Free Enquiry
Legalities

Privacy Policy

Updated on : 23/06/2026

Last Updated: June 23, 2026

Legit Lucknow ("we", "us", or "our") operates the website legitlucknow.com (the "Platform"). We are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, process, and protect personal data in compliance with the **Digital Personal Data Protection (DPDP) Act, 2023 (India)**, the **Information Technology (IT) Act, 2000 (India)**, and relevant **Meta (Facebook/Instagram/WhatsApp) Developer Policies**.

1. Definitions under the DPDP Act, 2023

  • Data Fiduciary: Legit Lucknow determines the purpose and means of processing personal data on this Platform.
  • Data Principal: You, the individual creator, influencer, brand representative, or user whose personal data is processed by the Platform.
  • Personal Data: Any data about an individual who is identifiable by or in relation to such data.

2. Information We Collect

All data processed by us is provided voluntarily by users or synced with explicit authorization. We collect the following categories of data:

  • User Registration & Profile Data: Full name, email address, contact numbers, age, gender, location, primary category, and custom niche description.
  • Instagram & Meta Platform Data: If you connect your Instagram account via the Facebook OAuth dialog, we request permissions for the following scopes:
    • pages_show_list and pages_read_engagement (to list linked Facebook pages).
    • instagram_basic and instagram_manage_insights (to retrieve Instagram profile details and media analytics).
    We collect and store your Instagram username, follower count, follows count, media count, engagement rates, 30-day reach & impressions, and audience demographics (gender split, age groups, top cities, top countries).
  • Sensitive Personal Data or Information (SPDI): Optional physical/body measurements (height, weight, waist, hips, shoe/clothing sizes, eye/hair color) solely for modeling, fashion styling, and apparel campaign eligibility. Representative verification details (GST registration certificate, shop establishment certificate, PAN cards, representative ID proofs) are collected for business verification. Bank account details (Account Name, Bank Name, Account Number, and IFSC Code) are collected to process campaign payouts.
  • Analytics & Tracking Data: IP address, device type, browser settings, cookies, and profile view metrics (card views, action clicks, outbound link actions) stored securely in our database.

3. Purpose and Legal Basis for Processing Data

We process your data only with your explicit consent or for legitimate uses defined by law:

  • To show your verified profile card in the Legit Lucknow Creator Roster and help brands discover you.
  • To display verified Instagram metrics on your public creator listing.
  • To qualify and match creators with campaign briefs based on niches, location, and physical stats.
  • To communicate campaign details, task requirements, and OTP verifications.
  • To process payouts, escrow releases, and Visibility Boost payments via our payment gateways.

4. Data Storage and Hosting Disclosures

We believe in absolute transparency about where your data is stored and how it is secured:

  • Database Hosting: All user records, analytics, activity logs, and encrypted access tokens are hosted on **Supabase** cloud databases.
  • Media & Document Storage: Custom avatars, business documents (GST certificates, PAN cards), and verification assets are hosted on **Cloudinary** cloud storage.
  • Security Measures: We employ industry-standard secure socket layers (SSL/TLS) for data in transit, token-based authentication, and Row Level Security (RLS) on our databases to restrict unauthorized access. Access tokens synced from Meta are encrypted at rest.

5. Communications Policy (Emails, WhatsApp, Telegram, and Calls)

By registering on the platform, you explicitly consent to receive transactional and promotional updates from us:

  • Emails: Sent via **Zoho ZeptoMail** for account activation, verification OTPs, transaction receipts, and system alerts.
  • WhatsApp: Messages sent to your registered number for campaign briefs, collaboration invites, and verification alerts.
  • Telegram: Optional notifications via our Telegram Bot system if linked to your account settings.
  • Voice Calls: Occasional support calls or campaign coordination by our team.
  • You can opt-out of promotional communications at any time in your dashboard preferences or by notifying us.

6. Meta API Compliance & Data Deletion (User Control)

You retain absolute control over your connected Meta accounts and data:

  • Disconnecting Accounts: You can disconnect your Instagram profile at any time via the Creator Dashboard. This immediately and permanently deletes your Instagram access tokens and synced insights from our database.
  • Revoking Access: You can also revoke our Platform's permissions at any time directly through your Facebook Business Integrations settings page.
  • Profile Deletion: Creators can choose to delete their entire platform listing and associated data at any time using the "Delete Profile" option in the Dashboard.

7. Data Sharing and Third-Party Disclosures

We do not sell, rent, or lease your personal data. We only share data with verified partners for service delivery:

  • Payment processors (e.g. **Razorpay**) to handle visibility boost purchases and escrow routing.
  • Communication APIs (e.g. Zoho, Telegram) for notifications.
  • Legal authorities in compliance with law enforcement directives under the IT Act, 2000.

8. Rights of the Data Principal

Under the DPDP Act, 2023, you have the right to: (i) Access a summary of your data, (ii) Correct, complete, or update inaccurate information, (iii) Erase your personal data (subject to tax/payment transaction retention laws), and (iv) Nominate another individual to act on your behalf in case of death or incapacity.

9. Grievance Redressal and Data Breach Notification

In the event of a suspected data breach or security incident, we will notify the **Computer Emergency Response Team (CERT-In)** and affected users within the legally mandated timelines. For grievances or questions regarding this policy, please contact our appointed Grievance Officer:

Grievance Officer: Legal & Compliance Desk
Email: [email protected]
Address: Lucknow, Uttar Pradesh, India.