Privacy Policy

Effective Date: August 23, 2026

We recognize that your privacy is very important and take it seriously. This Privacy & Cookies Policy describes IndiHunt's ("we", "us", or "our") policies and procedures on the collection, use, and disclosure of your information when you use our website at indihunt.in, products, self-serve ad tools, and mobile applications (collectively, the "Services").

This Privacy Policy is designed to meet statutory data protection transparency mandates under the Digital Personal Data Protection Act (DPDP Act, India), the General Data Protection Regulation (GDPR, EU/UK), and the California Consumer Privacy Act as amended by CPRA (CCPA/CPRA).


1. WHO WE ARE AND HOW TO CONTACT US

Data Fiduciary / Data Controller: IndiHunt Launchpad Private Limited is the Data Fiduciary (under Indian DPDP Act) and Data Controller (under GDPR) of your personal data.

IndiHunt Privacy & Operations Team

Email: [email protected] / [email protected]

Address: Bengaluru, Karnataka 560001, India

2. WHAT PERSONAL DATA WE COLLECT

We collect personal data that you voluntarily provide to us when registering, launching products, posting comments, voting, or purchasing ad campaigns. We also automatically collect certain technical diagnostic details.

CategoryData Elements Collected
Identity & Profile DataFirst name, last name, username, profile photo/avatar, bio, maker links, social handles.
Contact DataEmail address, work address, telephone/SMS numbers for verification.
Social Authentication DataLog-in tokens and public profile metadata from Google, GitHub, or X/Twitter logins.
Content & Activity DataProduct launch details, upvotes, reviews, comments, discussion threads, stories, campaign ads.
Technical & Behavioral DataIP address, browser type, device identifier, referrer URLs, page views, time zone, DataFast analytics.

3. HOW AND WHY WE USE YOUR PERSONAL DATA

We process your personal data for the following legitimate operational purposes:

  • Providing & Maintaining Services: To register your account, manage product launches, process votes, display maker profiles, and authenticate logins.
  • Email Digest & Notifications: To broadcast daily launch summaries, campaign status alerts, and security notifications (you can opt-out anytime via settings).
  • Security & Moderation: To run automated text content violation checks, prevent fraudulent upvoting, detect malicious bot traffic, and enforce platform rules.
  • Self-Serve Ad Campaigns: To track ad impressions, clicks, budget expenditures, and report anonymized performance stats to campaign owners.
  • Compliance with Legal Obligations: To comply with court orders, regulatory inquiries, and tax reporting laws.

4. YOUR LEGAL DATA RIGHTS

Depending on your region (DPDP India, GDPR EU/UK, CCPA/CPRA California), you enjoy the following rights:

  • Right to Access & Portability: Request a full copy of the personal data we hold about you in a structured, standard format.
  • Right to Correction & Erasure: Request correction of inaccurate information or complete deletion of your account and personal data.
  • Right to Withdraw Consent: Withdraw consent for marketing emails, newsletter digests, or optional tracking at any time.
  • California CCPA Opt-Out (Do Not Sell/Share): California residents can opt out of third-party data sharing or targeted ad tracking by emailing [email protected] or enabling Global Privacy Control (GPC) in their browser.

5. DATA RECIPIENTS & THIRD-PARTY SHARING

We do not sell your personal details to data brokers. We share necessary data only with trusted infrastructure service providers under strict confidentiality agreements:

  • Supabase (PostgreSQL): Secure database hosting and authentication backends.
  • Resend API: Transactional and daily digest email delivery.
  • DataFast & Analytics: Privacy-focused aggregate traffic measurement.
  • Legal Authorities: When required by binding subpoena, law enforcement warrant, or statutory order.

6. DATA RETENTION & SECURITY

We retain your information for as long as your account remains active or as needed to provide you with Services. If you request account deletion, we securely purge or anonymize your personal records within 30 days, except where retention is mandated by law.

We employ industry-standard SSL/TLS encryption, secure database access control layers, and automated vulnerability scanning to safeguard your data.

7. CHILDREN'S PRIVACY

Our Services are strictly intended for individuals 16 years of age and older. We do not knowingly collect personal information from children under 16. If we become aware of a child's registration, we delete the data immediately.

8. POLICY UPDATES

We will update this Privacy Policy periodically to reflect legal changes and new platform features. Material changes will be highlighted on our site or notified via email.