Privacy Policy

1. What we collect

• Account: your email address, the name and channel link you add, and your sign-in history.
• Deal information you add: brands and their contact names and emails, deal names, fees, dates, briefs, must-have checklists, and the editors you invite (names and emails).
• Videos and feedback: uploaded video cuts, timestamped notes, checklist ticks, and team chat messages.
• Approval records: when a brand approves or requests changes, we record the reviewer's name, the verified email, the date and time, their IP address and browser details. This is the evidence of the decision, which is why it can't be edited.
• Teams: workspace names, team members' emails, and which creators a team covers.
• Billing: your plan, its status and renewal date, and PayPal's subscription reference. Card and bank details are handled by PayPal; we never see or store them.
• Technical data: server logs (such as IP address, browser type, pages requested and errors), kept to run and secure the service.

Cookies: we only use cookies needed to keep you signed in. We don't use advertising cookies or sell your data.

2. Why we use it

• To provide Vyomas: sign-in, deals, video hosting and playback, sharing with editors, brands and teams, approvals.
• To send emails the service needs: sign-in links, review and editor links, approval codes, notifications, invites.
• To take payments and manage plans and limits.
• To keep Vyomas secure, prevent abuse, fix problems, and meet legal and tax obligations.

We use your data because you asked us to provide the service (by creating an account or using a link), with your consent where needed, and where the law requires or allows it. We don't use your videos or messages to train AI models.

3. Data about other people you add

Creators add details of other people, such as brand contacts and editors. If you add someone, make sure you're allowed to share their details for this purpose. If you were added and have questions, contact us using the details below.

4. Who can see your data

• Inside Vyomas: only the people you share with. Editors see what the creator shares with them, never fees. Brands see only the version sent to them and notes the creator shares. Team chat is private to the creator and their editors; brands never see it. On a team plan, teammates see reviews sent to the team.
• Service providers who process data for us under contract:
  • Supabase: database and sign-in
  • Mux: video storage and playback
  • Vercel: website hosting and error logs
  • Brevo: email delivery
  • PayPal: payments
• Authorities, when the law requires it.

These providers may store data outside India (for example in the United States). We choose providers with strong security and only share what's needed to run Vyomas.

5. How long we keep it

• Account and deal data: until you delete it or your account.
• Team chat messages: deleted automatically 90 days after they're sent.
• Free plan video files: removed 60 days after a deal is marked paid (paid plans keep them).
• Private links stop working after 14 days (review) or 30 days (editor), or when turned off. Approval codes expire after 10 minutes.
• Billing records: as long as tax law requires.
• Server logs: kept for a limited period for security, then deleted.

6. How we protect it

• Data is encrypted in transit (HTTPS) and at rest.
• Every account's data is separated at the database level, and our automated tests check that one person can't see or change another's data.
• Private links are long random codes; we store only a scrambled fingerprint of each, never the link itself. Approval codes are single-use and scrambled too.
• Videos play through short-lived signed links. Keys and passwords are stored encrypted with our hosting provider, never in our code.
• Team chat is private to the deal team and encrypted in transit and at rest, but it's not end-to-end encrypted.

No system is perfectly secure. If a breach affects your data, we'll notify you and the authorities as the law requires.

7. Your rights

You can:

• see and correct your data (most of it directly in the app);
• delete your account and its data any time (Profile → Delete my account);
• withdraw consent, which may mean you can no longer use parts of Vyomas;
• ask what data we hold about you and who it was shared with;
• nominate someone to exercise your rights if you die or become unable to (India);
• complain to us, and then to the Data Protection Board of India (or your local data protection authority).

Email us to use these rights. We'll reply within 30 days.

8. Children

Vyomas is for people aged 18 and over. We don't knowingly collect children's data; if we learn we have, we delete it.

9. Grievance Officer

Umadevi Digumarthy, India. Email: umadevidigumarthy11@gmail.com. We acknowledge complaints within 24 hours and resolve them within 15 days.

10. Changes to this policy

We may update this policy. For important changes, we'll notify you by email or in the app before they take effect.