Privacy Policy

A few terms are used consistently throughout this policy:

• “Customer” means anyone who uses the Service to discover, contact, or book a Creator — an individual, a business, a brand, or a marketing agency acting on a brand's behalf.
• “Creator” means anyone who registers a public profile on the Service to list services, connect social profiles, and receive bookings — including influencers and content creators.
• “Staff” means our own internal team members who operate the platform through a separate, permission-gated console. Staff accounts are provisioned by us and are not self-registered.
• “Personal Data” means any information that identifies or could reasonably be used to identify you.
• “Booking” means a request a Customer sends to a Creator, and everything that follows it — the message thread, status changes, and any review left afterward.

This Privacy Policy applies to everyone who uses Socialday: Customers discovering and booking Creators, Creators who publish a public profile and services, our own internal Staff who use the corporate console to operate the platform, and visitors browsing the site without an account. It covers personal data processed in connection with account creation, use of platform features, bookings and reviews, payments, and communications we send.

This policy does not apply to third-party websites, apps, or services linked from within the platform — most notably, a Creator's own connected social media profiles, which are operated by those platforms under their own privacy terms, not ours. We encourage you to review the privacy policies of any third-party service you access through or alongside Socialday.

If you're located outside India, please read Section 9 on international data transfers, and Section 12 for rights that may apply specifically to you depending on where you live.

We use the information we collect to:

• Create, authenticate, and secure your account, and connect Customers with Creators.
• Power search and discovery — matching a Customer's filters against Creator location, category, platform, and audience.
• Process Booking requests, confirmations, status changes, cancellations, and reviews.
• Process subscription and booking-credit payments through our payment processor.
• Send transactional emails: welcome messages, password reset and change notices, Booking sent/received notifications, and review notifications.
• Respond to support requests, investigate complaints, and enforce our Terms of Service.
• Monitor platform health, detect and investigate abuse or fraud, and keep the Service secure.
• Understand usage patterns so we can fix problems and improve the Service over time.
• Review Creator verification submissions and moderate content that violates our Terms.
• Resolve disputes between Customers and Creators when we're asked to help mediate one.
• Comply with applicable laws, regulations, and valid legal requests.

We do not sell, rent, or trade your personal data to any third party for advertising or marketing purposes, and we don't use your booking or review content to build advertising profiles. Where we use your information for a purpose not described here, we'll update this policy first, and where the law requires your consent for that new purpose, we'll ask for it.

Where applicable data protection law requires a legal basis for processing personal data, we rely on one or more of the following, depending on the activity:

• Performance of a contract — processing your account, profile, and Booking data is necessary to provide the Service you've signed up for. Without this, we simply can't operate your account or connect you with the other side of the marketplace.
• Legitimate interests — for usage data, security monitoring, and fraud prevention, in operating, improving, and protecting the platform and its users, balanced against your rights and expectations.
• Legal obligation — where we must retain or disclose data, such as payment and tax records, to comply with applicable law.
• Consent — for optional marketing emails, which you can withdraw at any time without affecting the emails necessary for your account (see Section 13).

Socialday has three separate account types — Customer, Creator, and internal Staff — each with its own login and session, and each seeing only what its role is meant to see. A Creator's public profile, services, and social links are visible to everyone by design; a Customer's Booking and message history is visible only to them and the relevant Creator, never to other Customers or unrelated Creators.

Internal Staff access is governed by role-based permissions: a Staff member can only see and act on the data their assigned role allows, and administrative actions taken through the corporate console are recorded for accountability. Staff accounts exist solely to operate and moderate the platform — support requests, verification review, and content moderation — not to browse user data for any other purpose.

Socialday is operated from India, and most of our users and Creators are based in India. Our infrastructure providers may nonetheless store and process data in other countries as part of providing reliable, globally-distributed cloud services. Where we transfer personal data internationally, we do so under appropriate safeguards recognized by applicable data protection law — such as standard contractual clauses or an equivalent transfer mechanism, where required. If you have questions about a specific transfer, contact us using the details in Section 22.

• We retain your account, profile, and activity data for as long as your account remains active, or as reasonably needed to provide the Service.
• If you request account deletion, we delete or anonymize your personal data within a reasonable time, except where we're required to retain specific records by law.
• Financial and transaction records — invoices, payment confirmations, and billing history — are retained for as long as applicable tax and accounting law requires, which is typically longer than the life of your account.
• Booking and review content tied to a completed transaction may be retained even after one party deletes their account, since it forms part of the other party's record of that transaction and may still be relevant to a dispute.
• Password reset tokens and similar one-time links expire automatically and can only be used once.
• Support tickets and correspondence with us are retained long enough to handle follow-up questions and maintain a record of how an issue was resolved.
• Verification documents submitted by a Creator are retained only for as long as needed to complete the review and to keep a record that verification took place, then handled according to our general retention practice for account data.

We use industry-standard technical and organizational measures to protect your information, including encrypted connections between your browser and our servers, secure storage of passwords and session credentials, and internal safeguards that limit our own systems and Staff to only the data and actions their role requires. Access to production systems is restricted to the people who need it to do their jobs, and we review our practices as the Service grows.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure, and we can't guarantee absolute security. You play a role too: keep your account credentials confidential, use a strong and unique password, and notify us immediately at hello@socialday.in if you suspect unauthorized access to your account.

We may send Creators and Customers occasional product updates or tips. You can ask to be unsubscribed at any time from the Unsubscribe page or by emailing us, and we honor the request promptly. Opting out never affects transactional emails necessary for your account, like Booking notifications, review notifications, or password resets — those aren't marketing, and you'll continue to receive them as long as your account is active.

Some browsers offer a “Do Not Track” signal. Because there's no common industry standard for how sites should respond to it, we don't currently change our behavior based on that signal — though as described in Section 8, we already don't use third-party advertising or cross-site tracking regardless of your browser settings.

We don't make decisions that produce legal or similarly significant effects about you based solely on automated processing, including profiling. Search results and rankings are based on the filters and criteria you or the searching Customer choose, not on an automated assessment of you as a person.

If a personal data breach occurs that's likely to put your rights or freedoms at risk, we'll notify affected users without undue delay, describing what happened, what categories of data were involved, the likely consequences, and the steps we've taken or plan to take — and we'll notify the relevant regulator where applicable law requires it.

Socialday is intended for use by people 18 or older. We don't knowingly collect personal information from children under 18, and Creator and Customer accounts both require confirming you meet this age requirement. If we become aware that we've inadvertently collected personal information from a child, we'll take prompt steps to delete it — contact us at hello@socialday.in if you believe a child has provided us with personal information.

We don't ask for or knowingly collect sensitive categories of personal data — such as information about health, religion, caste, sexual orientation, or biometric identifiers — as part of normal use of the Service. Please don't include this kind of information in your profile, bio, Booking messages, or reviews.

The platform links to third-party sites and services — most notably, a Creator's own connected social media profiles, and our payment processor at checkout. This policy doesn't apply to those third-party destinations, and we're not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site before sharing information with it.

In accordance with applicable Indian information technology law, we've designated a contact point for privacy and data protection complaints. You can reach this contact at hello@socialday.in with the subject line “Grievance” or “Privacy Request.” We aim to acknowledge grievances promptly and resolve them within the timeline applicable law requires.

You're responsible for keeping the information on your account and profile accurate and up to date — an out-of-date phone number, service price, or location doesn't just affect your own experience, it can affect a Customer or Creator on the other side of a Booking who relies on it. If any of your account information changes, please update it directly from your settings as soon as you're able to.

Where our own internal Staff use the Service as employees or contractors of Socialday, we process the personal data reasonably necessary to manage that relationship — including account credentials, role and permission assignments, and records of administrative actions taken through the corporate console. This information is used only for internal operational and security purposes and is subject to the same general protections described throughout this policy.

This Privacy Policy should be read together with our Terms of Service, which governs your use of the Service more broadly — including acceptable use, billing, and liability. Where this policy specifically addresses personal data and the Terms address something else, both apply; if the two conflict on a matter of data handling, this Privacy Policy controls.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or legal requirements. When we make material changes, we'll update the “last updated” date above and, where appropriate, notify registered users by email or an in-app notice. Continued use of the Service after a change takes effect means you accept the updated policy; if you don't agree with a change, you should stop using the Service and may request account deletion by contacting us.

Socialday is the data controller for personal data processed in connection with your account. Questions, concerns, or requests about this Privacy Policy or our data practices:

• Email: hello@socialday.in
• Website: https://www.socialday.in
• Subject line: “Privacy Request” or “Grievance” for faster routing.

We aim to respond to privacy-related inquiries within 10 business days.