Privacy Policy

• Account data — name, email address, phone number, password (stored only as a secure hash), and whether you joined as a creator or a brand.
• Verification (KYC) data — PAN, bank account details (account number, IFSC), and for brands, business details such as GSTIN and company name. We collect these because payouts and tax compliance legally require them.
• Profile data — photo, bio, social media handles, follower counts, portfolio content, niches, and pricing you choose to display.
• Deal and transaction data — briefs, applications, agreed specs, messages and files exchanged on a deal, payment amounts, invoices, reviews and ratings.
• Technical data — device and browser type, IP address, pages visited, and cookies (see section 6).

• To create and operate your account and show your profile to the other side of the marketplace.
• To run deals: matching, locked specs, messaging, delivery, approvals and reviews.
• To process payments — including verifying your identity and bank account before any payout is made.
• To meet legal obligations: tax deduction and reporting (TDS under Section 194-O, GST TCS), accounting records, and lawful requests from authorities.
• To prevent fraud, spam, fake reviews and circumvention of the platform.
• To provide support and send you service messages about your deals and account. Marketing messages are sent only with your consent and always include an opt-out.

We process your personal data on the basis of the consent you give at signup and for the legitimate uses permitted by the DPDP Act (such as processing needed to provide a service you asked for, or to comply with law). You may withdraw consent at any time by writing to hypermedia.agencies@gmail.com — after withdrawal we will stop the related processing, but this may mean we can no longer provide parts of the service (for example, we cannot pay you out without your bank details).

We never sell your personal data. We share it only with:

• Our payment partner — an RBI-authorised payment aggregator that collects brand payments, holds them in escrow accounts maintained under RBI's Payment Aggregator guidelines, and settles payouts to creators. They receive the data needed to process payments and complete their own KYC checks.
• Verification providers — services that validate PAN and bank account details.
• Infrastructure providers — cloud hosting and email/SMS delivery. Your data is hosted on Vercel (Mumbai region, India), with media files on Cloudflare R2 (Asia-Pacific).
• Authorities — tax authorities and law-enforcement or government agencies, where the law requires it.
• The other party to your deal — the counterparty sees your profile, messages on the deal, deliverables, and the details needed on invoices (such as name and PAN or GSTIN, where tax rules require them to appear).

• Account and profile data — for as long as your account is active, and for a short period after deletion to handle disputes.
• Transaction, invoice and tax records — retained as required by Indian tax and company law (generally up to 8 years), even after account deletion.
• KYC records — retained per the requirements applicable to our payment partner and applicable law.

We use cookies that are necessary to keep you logged in and the site secure, and basic analytics cookies to understand how the product is used. You can block cookies in your browser; the site will still work, but you may need to log in more often.

Data is encrypted in transit (HTTPS/TLS), passwords are stored only as salted hashes, bank and PAN details are stored with restricted access, and access to production systems is limited to authorised personnel. No system is perfectly secure — if we become aware of a breach affecting your personal data we will notify you and the Data Protection Board of India as the DPDP Act requires.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct or update inaccurate or incomplete data (most of it is editable in your profile).
• Erase your data by deleting your account, subject to the retention required by law (section 5).
• Nominate a person to exercise these rights on your behalf in case of death or incapacity.
• Raise a grievance (section 10) — and if unresolved, complain to the Data Protection Board of India.

HyperUGC is for users aged 18 and above. We do not knowingly collect data from anyone below 18; if we learn that we have, we will delete the account and its data.

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act:

• Saksham Nagar, Grievance Officer & COO
• Email: sakshamnagarpm2054@gmail.com
• Address: Mahamanapuri Colony, near ITI BHU, Varanasi 221005, Uttar Pradesh, India
• Complaints are acknowledged within 24 hours and resolved within 15 days.

If we change this policy materially, we will notify you by email or an in-app notice before the change takes effect. The "last updated" date at the top always reflects the current version. See also our Terms & Conditions.