Privacy Policy

Last updated: 4 May 2026

Introduction

Welcome to Phyo. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered influencer search platform and payment processing services through Razorpay.

Your Personal Data shall be processed in accordance with this Privacy Policy, the Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, and any applicable rules and regulations thereunder.

By using our platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our platform.

Information We Collect

Personal Information

We collect the following personal information:

  • Personal Identifiers: Name, email address, contact information, date of birth, demographic information such as age and gender.

  • Account Information: Profile information for brands and influencers, communication preferences.

  • Payment Information: Payment details processed securely through Razorpay, including transaction data and billing information.

  • Transaction Data: Items purchased, payment amounts, and transaction history.

  • User-Generated Content: Campaign descriptions, search queries, feedback, and reviews.

  • KYC Documents: As required by RBI regulations and applicable laws.

Device & Technical Data

We automatically collect certain technical information:

  • Device Information: IP address, browser type, operating system, and device identifiers.

  • Usage Data: Pages visited, time spent, search queries, and related activity data.

  • Location Data: Approximate device location if you grant permission.

  • Cookies and Tracking: Session cookies and persistent cookies for functionality, security, and analytics.

Influencer Data

Our platform aggregates publicly available information about influencers:

  • Social Profiles: Public social media profiles and follower counts.

  • Engagement Metrics: Content categories, engagement metrics, and profile activity signals.

  • Audience Insights: Demographic information and audience insights derived from available sources.

  • Commercial Signals: Collaboration rates and availability status where publicly accessible or submitted.

How We Use Your Information

We use the collected information for the following purposes:

  • Service Provision: Provide and maintain our AI-powered influencer search services.

  • Account Management: Process and manage user accounts, subscriptions, and payment transactions.

  • Matching Services: Match brands with relevant influencers based on search criteria.

  • Payment Processing: Facilitate secure payments through Razorpay in compliance with RBI guidelines.

  • KYC Compliance: Conduct Know Your Customer checks as required by applicable laws.

  • Platform Improvement: Analyze usage patterns to enhance our services.

  • Communications: Send service updates, transaction confirmations, and promotional communications.

  • Security & Fraud Prevention: Detect and prevent fraud and ensure platform security.

  • Legal Compliance: Comply with applicable laws and enforce our terms of service.

Payment Processing & Security

We partner with Razorpay Software Limited for secure payment processing:

  • PCI DSS Compliance: All payment data is processed in compliance with Payment Card Industry Data Security Standards.

  • Encryption: We use industry-standard encryption for sensitive data transmission and storage safeguards.

  • Secure Transmission: All services are served over HTTPS using TLS.

  • Tokenization: Payment details are replaced with secure tokens to reduce exposure risk.

  • RBI Compliance: We adhere to Reserve Bank of India regulations for payment processing.

  • Data Minimization: We only collect payment information necessary for transaction processing.

When you make payments through our platform, your payment information is directly processed by Razorpay and subject to their privacy policy available at razorpay.com/privacy.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Payment Partners: With Razorpay for secure payment processing and transaction facilitation.

  • Financial Institutions: With banks, RBI, or other regulatory agencies as required by law.

  • Service Providers: With trusted third-party providers assisting platform operations under confidentiality obligations.

  • Legal Requirements: When required by law, court orders, or to protect our rights and safety.

  • Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.

  • Explicit Consent: With your explicit consent for specific purposes.

  • KYC & AML: For Know Your Customer and Anti-Money Laundering compliance as mandated by law.

  • Public Information: Publicly available influencer data may be displayed to platform users.

Data Security

We implement comprehensive security measures to protect your data:

  • Encryption: Encryption safeguards for data in transit and at rest where applicable.

  • Access Controls: Role-based access controls and authentication protections.

  • Regular Audits: Periodic security assessments and vulnerability testing.

  • Secure Infrastructure: Use of managed infrastructure and monitored environments.

  • Employee Training: Internal awareness and handling practices for sensitive data.

  • Incident Response: Incident response procedures for suspected security events.

  • Compliance Monitoring: Ongoing review of security and regulatory obligations.

Security incidents or breaches involving customer data will be addressed and reported in accordance with applicable legal and regulatory requirements.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your platform experience:

  • Essential Cookies: Required for core platform functionality and security.

  • Analytics Cookies: Help us understand user interactions and improve services.

  • Preference Cookies: Remember your settings and personalization choices.

  • Marketing Cookies: Support relevant content delivery and campaign measurement where applicable.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect platform functionality.

Third-Party Services

Our platform integrates with the following third-party services:

  • Razorpay: Payment processing, transaction management, and compliance workflows.

  • Social Media Platforms: Platforms such as Instagram and YouTube for publicly available influencer data.

  • Cloud Services: Hosting and storage providers used for platform delivery.

  • Analytics Providers: Usage and performance analysis tools.

  • Communication Services: Email and messaging service providers for notifications.

These third-party services have their own privacy policies. We encourage you to review their privacy practices before relying on those services.

Your Rights Under DPDP Act 2023

Under the Digital Personal Data Protection Act, 2023, you may have the following rights:

  • Right to Information: Know what personal data we process and how we use it.

  • Right to Access: Request access to your personal information.

  • Right to Correction: Request correction of inaccurate or incomplete information.

  • Right to Erasure: Request deletion of personal information, subject to legal obligations.

  • Right to Data Portability: Request a copy of your data in a portable format where applicable.

  • Right to Grievance Redressal: Lodge complaints regarding the processing of personal data.

  • Right to Nominate: Nominate an individual to exercise your rights in case of death or incapacity.

  • Right to Opt-out: Unsubscribe from marketing communications.

To exercise these rights, please contact us using the information provided below. We will respond within timelines required by applicable law.

Data Retention

We retain your personal information only as long as necessary:

  • Account Data: While your account is active and for a limited period after deletion where legally required.

  • Transaction Data: As required by financial, tax, and payment regulations.

  • KYC Documents: As mandated by applicable AML and KYC requirements.

  • Usage Analytics: For a limited operational period and then in aggregated or anonymized form where feasible.

  • Marketing Data: Until you opt out or request deletion, subject to applicable law.

  • Legal Compliance: For as long as required to satisfy legal, regulatory, or dispute-resolution needs.

Cross-Border Data Transfers

Your personal data is primarily processed within India. If international transfers are necessary for service provision, we ensure appropriate safeguards including contractual, organizational, and legal measures required by applicable law.

Children's Privacy

Our platform is not intended for children under 18 years of age. We do not knowingly collect personal information from individuals under 18. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.

Grievance Redressal Mechanism

We have established a grievance redressal mechanism in compliance with applicable laws:

  • Acknowledgement: We will acknowledge your complaint within a reasonable time after receipt.

  • Resolution Timeline: We aim to resolve valid complaints within a commercially reasonable timeframe.

  • Escalation: If unresolved, you may request further review through our designated contact channel.

  • Regulatory Recourse: You may also seek recourse through the appropriate authority where available under law.

Contact Us

For questions, concerns, or requests regarding this Privacy Policy, you can contact us using the details below.

Email & Call us at:

phyo.aiofficial@gmail.com+91 7249005806

Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules and regulations thereunder. Any disputes arising from this Privacy Policy shall be subject to the jurisdiction of competent courts in India.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Updated versions will be posted on this page, and your continued use of the platform after any update becomes effective constitutes acceptance of the revised policy.