Privacy policy

Dulypaid is operated by Dulypaid (operator name not set) (“we”). This policy explains what personal data we collect when you use Dulypaid, why, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

• Account data: your email address and name, used to sign you in and identify you to your team.
• Business data you enter: your legal name, PAN, GSTIN, address, bank and UPI details, brands and their contacts, deals, invoices, payments, expenses, tax filings, affiliate links and media-kit content.
• Files you upload, such as contracts and briefs.
• Usage data: sign-in times, and click counts on your tracked links (we count clicks; we do not store the visitor's IP address or identity).
• Inquiries brands send through your public media kit: their name, email, company and message.
• Payment data for subscriptions is handled by Razorpay. We never see or store your card or bank credentials.

Why we use it

• To provide the service: calculations, invoices, reminders, digests and exports.
• To send emails you ask for (invoices and reminders to brands) and service emails (sign-in codes, digests, invites).
• To bill subscriptions, prevent abuse, and keep the service secure.

We do not sell your data, and we do not use your business data for advertising.

Who processes it for us

• Supabase: database, sign-in and file storage.
• Vercel: hosting and scheduled jobs.
• Resend: sending email.
• Razorpay: subscription payments.
• An AI model provider, through the Vercel AI Gateway, only when you use “paste a brief”: the text you paste is sent to extract deal fields and is not used by us to train models.

Each processor handles data only on our instructions and under its own security commitments.

What's public

Nothing, unless you switch on your media kit. Then only the profile, audience stats, rates, brands and links you choose are shown. Deal values, invoices and payments are never public.

Cookies

We use only essential cookies: your sign-in session, the workspace you last opened, and your light or dark theme. No advertising or cross-site tracking cookies.

Keeping and deleting data

We keep your data while your account is active. You can export everything (Settings → Data) and delete a workspace at any time, which permanently removes its records and files. Invoices you issued may need to be kept by you for eight years under GST rules, so export before deleting.

Your rights

You can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights. Email support@dulypaid.in and we will respond within 30 days.

Security

Data is encrypted in transit, access is limited to your workspace's members by role, and files are stored privately and served through short-lived links.

Children

Dulypaid is for people aged 18 and over, or younger creators acting with a parent or guardian who manages the account.

Grievance officer

Dulypaid (operator name not set), India. Email support@dulypaid.in.

Changes

We will post changes here and email account owners about anything material.