Privacy Policy

This policy explains what personal data Star Boostly collects, why we use it, who we share it with, and the choices and rights you have. Star Boostly is run by KEPNEXUS ENTERPRISES PRIVATE LIMITED, which decides how your data is used — the “data fiduciary” under India's Digital Personal Data Protection Act, 2023.

1. What we collect

• Your account: name, email address, phone number (checked with a code sent on WhatsApp), password (stored only in scrambled, hashed form), and whether you're a brand or a creator.
• Creator profiles: display name, handle, profile photo, bio, state and city, categories, rates and portfolio.
• Brand profiles: business name, category, state and city, website, Instagram page, description, and anything you give us to verify the business, such as a Google Business profile link, legal name or GSTIN.
• Instagram, if you connect it: your username, profile picture, follower count and recent public posts (pictures, captions, links and like and comment counts), plus the access key that lets us refresh them. We use these to show your work, confirm the account is yours, and check that a post you deliver is really on your account.
• Creator payout and tax details: bank account holder name, bank, account number and IFSC, a photo of a bank statement or passbook, and — where tax rules require it — your PAN and a photo of your PAN card. These are stored in our own database and private file storage, visible only to you and our team.
• Addresses, for shipped products: the brand's pickup address and the creator's delivery address, with a contact phone number.
• Collabs and work: briefs, go-live dates, drafts and files, live post links and screenshots, feedback, and ratings and reviews.
• Messages and calls: your chat messages, and a record of in-app voice calls (who called, when and for how long). We don't record what is said on a call.
• Payments: amounts, dates, payment references, tax invoices, payouts and refunds. Card, UPI and bank details you pay with are handled by our payment provider, Razorpay — we never see or store your full card number.
• Device and usage: a notification token for your phone, which screens of the app are opened (counted by us, not by an outside analytics company), error reports when something breaks, and basic technical logs such as IP address and browser, kept for security.

We don't use your phone's GPS: your location is only the state and city you choose.

2. How we use it

• To run Star Boostly: accounts, profiles, collabs, payments, deliveries, chat and calls.
• To verify brands and creators, and to check payout details before we send money.
• To keep people safe and prevent fraud — for example, chat messages are checked automatically for phone numbers and emails being shared to take deals off the platform, and our team may review flagged messages.
• To send you updates about your collabs by email, push notification and WhatsApp.
• To handle support requests, reports, disputes and refunds.
• To meet our legal duties, such as tax invoices, GST and tax deducted at source.
• To understand, in total, how the app is used, so we can improve it.

We use your data because you've agreed to it when you signed up (and when you choose optional features, such as connecting Instagram), or where the law allows it without consent — for example to complete a collab you asked for, or to keep records the law requires. We don't sell your data, and we don't show you advertising.

3. Who can see what

• Anyone with the link to a creator's profile: their name, handle, photo, city, categories, portfolio, Instagram numbers and reviews. Rates are shown only to logged-in brands, and the list of all creators is only for logged-in users.
• The other side of a collab: creators see the brand's business profile and brief; both see the chat and the work. Neither sees the other's phone number, email or address.
• Creators see how many brands viewed their profile, but not which ones.
• Our team sees what it needs to verify accounts, support you, settle disputes and make payments.

4. Who we share it with

We share data only with the companies that run parts of Star Boostly for us, and only what each needs:

• Supabase — our database, file storage and login.
• Vercel — hosts our website.
• Razorpay — payments and refunds.
• Shiprocket and its courier partners — pickup and delivery addresses and phone numbers, to deliver and return products.
• MSG91 and WhatsApp (Meta) — your phone number, to send sign-up codes and collab updates.
• Our email provider — to send you emails.
• Expo, Apple and Google — to deliver notifications to your phone.
• Agora — to connect in-app voice calls.
• Instagram (Meta) — only if you connect your account.
• Sentry — error reports, which may include device and app details.

We may also share data when the law requires it — for example with tax authorities, or with police or a court under a valid legal order — or if Star Boostly is ever sold or merged, in which case this policy continues to protect your data. Some of these providers may process data outside India, as the law allows.

5. How long we keep it

• We keep your data while your account is open. When you delete your account, your profile, collabs, messages, files and connected accounts are deleted straight away — see Deleting your data.
• Records of payments, invoices, payouts and tax are kept for as long as Indian tax and company law requires (generally up to 8 years), and used for nothing else.
• Sign-up codes expire after 10 minutes.

6. How we protect it

Data travels encrypted (HTTPS). Database rules let each person reach only their own data. Drafts, PAN photos and bank proofs sit in private storage that can only be opened with short-lived links. Only the team members who need it can see sensitive details. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.

7. Your rights and choices

• See and correct your details — most are in your profile and Settings.
• Delete your account and data at any time from Settings, or by writing to us.
• Withdraw your consent — for example by disconnecting Instagram or deleting your account. Features that need that data will stop working.
• Turn email, push or WhatsApp updates off in Settings.
• Ask us what data we hold about you and who we've shared it with, and complain to us about how we've handled it.
• Name someone to use these rights for you if you die or become unable to.

To use any of these rights, write to support@starboostly.com from the email on your account. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

8. Children

Star Boostly is only for people aged 18 or over. We don't knowingly collect data from children; if we find we have, we delete it.

9. Cookies

We use only the cookies and browser storage Star Boostly needs to work — mainly to keep you logged in and remember your preferences. We don't use advertising or tracking cookies.

10. Changes to this policy

We'll update this policy when what we collect or who we share it with changes, and tell you about important changes before they take effect.

11. Contact and grievances

For privacy questions or requests, write to support@starboostly.com. Our Grievance Officer handles complaints: