Privacy Policy

This Privacy Policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Data Principal Rights

As a Data Principal under the DPDP Act, you have the right to:

  • Access and obtain information about your personal data
  • Correct, complete, update, and erase your personal data
  • Nominate another individual to exercise your rights in case of death or incapacity
  • Withdraw your consent at any time
  • Lodge complaints with the Data Protection Board of India

2. Personal Data We Collect

We collect personal data that you provide directly to us, including:

  • Name and phone number (for authentication)
  • Profile information (username, bio, social media handles)
  • Campaign and application data
  • Communications and interactions on the platform

3. Lawful Basis and Purpose

We process your personal data based on your consent and for the following specified purposes:

  • To provide and maintain the BidBOO platform services
  • To enable connections between brands and influencers
  • To facilitate campaign management and applications
  • To communicate important service updates
  • To improve and personalize your experience

4. Data Sharing and Disclosure

We do not share your personal data with third parties except:

  • With your explicit consent
  • With service providers who assist in platform operations (Firebase/Google Cloud)
  • When required by law or legal process
  • To protect the rights, property, or safety of BidBOO and its users

5. Data Security and Retention

We implement reasonable security safeguards to protect your personal data from unauthorized access, disclosure, alteration, and destruction. We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

6. Authentication and Third-Party Services

We use Firebase Authentication (Google) for secure phone number verification. Your authentication data is processed in accordance with Google's privacy practices and the DPDP Act requirements.

7. Consent Withdrawal

You may withdraw your consent to data processing at any time by deleting your account or contacting us. Please note that withdrawal of consent may affect your ability to use certain features of the platform.

8. Children's Privacy

Our platform is not intended for children under the age of 18. We do not knowingly collect personal data from children without verifiable parental consent as required under the DPDP Act.

9. Data Breach Notification

In the event of a data breach that is likely to cause harm to you, we will notify you and the Data Protection Board of India in accordance with the DPDP Act requirements.

10. Grievance Redressal

If you have any concerns or complaints regarding your personal data, please contact us through the platform. We are committed to resolving your concerns in a timely manner. You also have the right to lodge a complaint with the Data Protection Board of India.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page.

12. Contact Information

For any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us through the platform or reach out to our Data Protection Officer.

Last updated: January 2025