enroop
Home/Privacy Policy

Privacy Policy

We take your privacy seriously. Here's exactly what we collect and why.

Last updated: August 24, 2026

Overview

ENROOP ("we", "us", or "our") operates enroop.com — a creator reputation and sponsorship conversion platform that connects content creators with brands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using ENROOP, you agree to the collection and use of information in accordance with this policy. We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable provisions of the Information Technology Act, 2000.

Quick summary

  • • We collect only what we need to run the platform
  • • We never sell your personal data to third parties
  • • Social account data is used solely to build your public creator profile
  • • Our AI assistant analyses only your own data — and it's never used to train external AI models
  • • Payments are processed by Razorpay — we don't store card details
  • • You can request deletion of your account and data at any time

Data We Collect

Account Information

When you create an account we collect:

  • Full name and email address (via Google Sign-In)
  • Profile photo (from your Google account, if provided)
  • Username and public profile details you add on ENROOP
  • Role — creator or brand

Creator Profile Data

Creators voluntarily provide:

  • Bio, niche/profession, location, and availability status
  • Social media channel links and connected account data
  • Collaboration history, case studies, and campaign results
  • Blog posts and images uploaded to ENROOP
  • Audience demographics (country, age group) — entered manually or synced from connected platforms

Brand Data

Brands provide:

  • Company name, industry, and contact email
  • Deal request details (campaign type, deliverables, budget, timeline)
  • Communication history within the collaboration workspace

Usage Data

We automatically collect standard web analytics data including IP address, browser type, pages visited, time on site, and referring URLs. This data is aggregated and used to improve the platform.

How We Use Your Data

We use the information we collect to:

  • Create and manage your ENROOP account
  • Display your public creator profile to brands and visitors
  • Facilitate deal requests and collaboration workflows between creators and brands
  • Power the AI Analytics Assistant that answers your questions about your own connected-platform performance
  • Process payments via Razorpay and send payment confirmations
  • Send transactional emails (deal requests, status updates, payment receipts)
  • Improve platform features and diagnose technical issues
  • Enforce our Terms of Service and prevent abuse
  • Comply with legal obligations under applicable Indian law

We do not use your data to serve third-party advertisements or build advertising profiles.

Data Sharing

We share your data only in the following circumstances:

Public Creator Profiles

Creator profile information (name, bio, social stats, collaborations, blogs) is publicly visible at your enroop.com/username page. You control what appears on your profile through your dashboard.

Between Creators and Brands

When a brand submits a deal request, their contact details and campaign information are shared with the relevant creator. Once a creator accepts a deal, both parties gain access to the collaboration workspace.

Service Providers

We share data with trusted third-party providers who help us operate the platform:

  • Razorpay — payment processing (subject to Razorpay's Privacy Policy)
  • Google — authentication via Google Sign-In
  • Meta / Instagram — social data via Instagram Graph API when you connect your Instagram account
  • Google / YouTube — channel and video data via YouTube Data API v3 and YouTube Analytics API when you connect your YouTube account
  • LinkedIn — profile, post, and follower/engagement analytics via the LinkedIn Community Management API when you connect your LinkedIn account (subject to the LinkedIn Privacy Policy and API Terms of Use)
  • Google Cloud Vertex AI (Gemini) — generative-AI processing that powers the AI Analytics Assistant. Only your own analytics data is sent, solely to generate your answer; under Google's Vertex AI terms this data is not used to train Google's models (see the AI Analytics Assistant section)
  • Cloud infrastructure providers — hosting and database services (Google Cloud)

These providers are contractually bound to use your data only to perform services on our behalf and not for any other purpose.

Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe such disclosure is necessary to protect our rights, the safety of users, or the integrity of the platform.

Connected Social Accounts

Creators can connect Instagram, YouTube, and LinkedIn accounts to populate their ENROOP profile with verified metrics. When you connect a social account:

  • We request only the specific data scopes you explicitly authorise via that platform's OAuth flow
  • We store follower counts, engagement metrics, and public post data solely to display on your creator profile
  • We do not post, comment, or message on your behalf
  • We do not access your followers' private data
  • Access is read-only — we cannot modify your account or content
  • You can disconnect any social account from Dashboard → Platforms at any time

Disconnecting a social account removes the live sync. Previously imported public metrics may remain on your profile until you manually remove them from your dashboard.

Instagram & Meta Platform Data

ENROOP integrates with the Instagram Graph API (Instagram Business API) provided by Meta Platforms, Inc. This section explains exactly what Instagram data we access, why, and how it is used.

Permissions We Request

When you connect your Instagram account, ENROOP requests the following permissions:

instagram_business_basic

Allows ENROOP to read your Instagram Business or Creator account profile.

Data accessed:

  • Username and display name
  • Profile picture URL
  • Follower count
  • Biography text
  • Account type (Business or Creator)
  • Total media count

instagram_business_manage_insights

Allows ENROOP to read post-level engagement metrics for your Instagram content.

Data accessed (per post/reel):

  • Impressions and reach
  • Likes, comments, shares, and saves
  • Video views (for video posts)
  • Total interactions (for Reels)

How We Use This Data

Instagram data collected through the API is used exclusively to:

  • Display your creator profile metrics on your public ENROOP page (enroop.com/username)
  • Show brands your engagement rate, reach, and proof of influence
  • Power the search and discovery engine so brands can find relevant creators
  • Display post-level insights on your dashboard so you can choose which posts to highlight

We do not use Instagram data for advertising, profiling, or any purpose beyond what is described above. We do not sell, license, or share Instagram data with any third party except as required to operate the platform (e.g., cloud hosting).

What We Do Not Do

  • We do not publish posts, stories, or reels on your behalf
  • We do not send or read Instagram Direct Messages
  • We do not access your followers' personal information
  • We do not use Instagram insights for advertising targeting
  • We do not share raw Instagram API data with third parties for their own use

Account Type Requirement

The Instagram Graph API requires a Professional account (Business or Creator). Personal Instagram accounts cannot be connected to ENROOP. You can switch your account type in Instagram's settings.

Revoking Instagram Access

You can revoke ENROOP's access to your Instagram account in two ways:

  • From ENROOP: Dashboard → Platforms → Remove (next to your Instagram account)
  • From Instagram: Instagram Settings → Apps and Websites → find ENROOP → Remove

Revoking access stops future data syncs. To also remove previously imported Instagram data from your ENROOP profile, contact us at [email protected] or use the data deletion request process described below.

Meta's Data Policy

Data accessed through the Instagram Graph API is also subject to Meta's Privacy Policy and the Meta Platform Terms.

YouTube API Data

ENROOP integrates with the YouTube Data API v3 and YouTube Analytics API provided by Google LLC. This section explains exactly what YouTube data we access, why, and how it is used. Our use of YouTube API Services is subject to the YouTube API Services Terms of Service and Google's Privacy Policy.

Permissions We Request

When you connect your YouTube channel, ENROOP requests the following OAuth scopes:

youtube.readonly

Allows ENROOP to read your YouTube channel details and video library.

Data accessed:

  • Channel name, description, and profile picture
  • Subscriber count and total view count
  • Total video count
  • Custom channel URL and country
  • Public video titles, thumbnails, and publish dates
  • Video duration and content type (video vs. Short)

yt-analytics.readonly

Allows ENROOP to read analytics metrics for your YouTube channel and videos.

Data accessed (per video):

  • View counts and watch time
  • Likes and comments
  • Estimated revenue (not displayed — used only for engagement calculations)

How We Use This Data

YouTube data collected through the API is used exclusively to:

  • Display your channel metrics (subscribers, total views, video count) on your public ENROOP profile (enroop.com/username)
  • Show brands verified proof of your YouTube reach and engagement
  • Import your videos as portfolio highlights that you select from your dashboard
  • Power the creator search and discovery engine so brands can filter by platform and reach

We do not use YouTube data for advertising, profiling, or any purpose beyond what is described above. We do not sell, license, or share YouTube API data with any third party except as required to operate the platform (e.g., cloud hosting).

What We Do Not Do

  • We do not upload, edit, or delete videos on your behalf
  • We do not post comments or interact with other users on YouTube
  • We do not access your YouTube private videos or playlists
  • We do not access your subscribers' personal information
  • We do not use YouTube data for advertising targeting
  • We do not share raw YouTube API data with third parties for their own use

Data Storage and Retention

YouTube metrics (subscriber count, video stats) are stored in our database and refreshed each time you trigger a sync from Dashboard → Platforms. We retain this data only as long as your YouTube account remains connected. Disconnecting your YouTube account stops future syncs. Previously imported metrics remain on your profile until you remove them from your dashboard or request account deletion.

Revoking YouTube Access

You can revoke ENROOP's access to your YouTube account in two ways:

Revoking access stops future data syncs. To also remove previously imported YouTube data from your ENROOP profile, contact us at [email protected] with the subject "YouTube Data Deletion Request". We will process the request within 30 days.

Google's Data Policy

Data accessed through the YouTube API is also governed by Google's Privacy Policy and the YouTube API Services Terms of Service.

LinkedIn API Data

ENROOP integrates with the LinkedIn Community Management API provided by LinkedIn Corporation. This section explains exactly what LinkedIn data we access, why, and how it is used. Our use of LinkedIn's APIs is subject to the LinkedIn Privacy Policy and the LinkedIn API Terms of Use.

Permissions We Request

When you connect your LinkedIn account, ENROOP requests only the specific, read-only scopes you explicitly authorise on LinkedIn's OAuth consent screen. The data we access through the Community Management API falls into the following categories:

Profile & follower data

Basic profile and audience-size information for your creator profile.

Data accessed:

  • Name, headline, and profile picture
  • Vanity / public profile URL
  • Follower count and lifetime/time-bound follower statistics

Posts & engagement analytics

Content you have published and its performance metrics.

Data accessed (per post/share):

  • Post text, media, and publish date
  • Impressions, clicks, and engagement (reactions, comments, reposts)
  • Lifetime and time-bound post & share statistics
  • Video analytics (watch time, views, viewers) where available

How We Use This Data

LinkedIn data collected through the API is used exclusively to:

  • Display your channel metrics (followers, engagement) on your public ENROOP profile (enroop.com/username)
  • Show brands verified proof of your LinkedIn reach and engagement
  • Import your posts as portfolio highlights that you select from your dashboard
  • Power the creator search and discovery engine so brands can filter by platform and reach

We do not use LinkedIn data for advertising, profiling, or any purpose beyond what is described above. We do not sell, license, or share LinkedIn API data with any third party except as required to operate the platform (e.g., cloud hosting).

What We Do Not Do

  • We do not publish posts, comments, or messages on your behalf
  • We do not send or read LinkedIn messages
  • We do not access your connections' or followers' personal information
  • We do not use LinkedIn data for advertising targeting
  • We do not share raw LinkedIn API data with third parties for their own use
  • Access is read-only — we cannot modify your account or content

Data Storage and Retention

LinkedIn metrics (follower count, post stats) are stored in our database and refreshed each time you trigger a sync from Dashboard → Platforms. We retain this data only as long as your LinkedIn account remains connected. Disconnecting your LinkedIn account stops future syncs. Previously imported metrics remain on your profile until you remove them from your dashboard or request account deletion.

Revoking LinkedIn Access

You can revoke ENROOP's access to your LinkedIn account in two ways:

Revoking access stops future data syncs. To also remove previously imported LinkedIn data from your ENROOP profile, contact us at [email protected] with the subject "LinkedIn Data Deletion Request". We will process the request within 30 days.

LinkedIn's Data Policy

Data accessed through the LinkedIn API is also governed by the LinkedIn Privacy Policy and the LinkedIn API Terms of Use.

AI Analytics Assistant

ENROOP offers an optional AI Analytics Assistant in your creator dashboard that answers questions in plain language about your own connected-platform performance (for example, "which reel got the most saves?" or "how have my views trended this month?"). This section explains how it works and how your data is handled.

What Data It Uses

The assistant only ever accesses the analytics data of the account owner asking the question — enforced both in our application logic and at the database level, so one creator can never see another creator's data. To answer a question, it processes:

  • Your Instagram and/or YouTube metrics already synced to ENROOP (e.g. reach, views, likes, comments, saves, shares, watch time, subscriber and follower counts)
  • Your own post/video captions and titles, and your account-level audience demographics, where relevant to the question
  • The text of the questions you type into the assistant

How It Works

Your question and the relevant slices of your own analytics are sent to Google Cloud Vertex AI (the Gemini model) to generate a written answer, which is streamed back to you. Processing happens within Google Cloud in the India (Mumbai) region. The assistant is read-only — it can retrieve and summarise your data but cannot modify your account, your content, or anyone else's data.

Not Used to Train AI Models

We use Vertex AI under Google Cloud's enterprise terms. Under those terms, the data we send to and receive from the model is not used by Google to train its foundation models and is not shared with other customers. We do not use your data to train any AI models of our own, and we never use the assistant's inputs or outputs for advertising or profiling.

Conversation History

Your conversations with the assistant (your questions and its answers) are stored in your account so you can revisit them. You can delete a conversation at any time, and all conversation history is removed when you delete your ENROOP account. Google processes the data we send to Vertex AI only to generate your response and, under its enterprise terms, does not use it to train its models or retain it to build a profile of you.

Accuracy

Every figure the assistant reports is computed from your stored analytics — it is instructed never to invent numbers. However, AI-generated explanations may still contain errors or omissions. Treat the assistant's output as guidance, not as financial, legal, or business advice, and verify important figures against your platform's native insights.

Data Deletion

You have the right to request deletion of your personal data and any data collected from connected social accounts (including Instagram).

Delete Your ENROOP Account

You can delete your account from Dashboard → Settings → Delete Account. This will:

  • Remove your public creator profile and all associated content
  • Revoke all connected social account tokens
  • Delete your personal data within 30 days
  • Retain anonymised, non-identifiable data for platform analytics

Delete Instagram Data Only

To request deletion of only your Instagram-sourced data without closing your account, email us at [email protected] with the subject line "Instagram Data Deletion Request". We will process the request within 30 days.

Meta Data Deletion Callback

If you remove ENROOP from your Facebook/Instagram app settings, Meta will notify us via our data deletion callback. We will process the deletion of your Instagram data within 30 days of receiving that notification.

Payment Data

All payments on ENROOP are processed by Razorpay, a PCI-DSS compliant payment gateway. We do not collect, store, or transmit your card number, CVV, or bank account details.

We store only what is necessary for records: transaction ID, amount, currency, deal reference, and payment status. Payment amounts are always determined server-side — we never trust frontend values.

For any payment disputes, refunds, or chargebacks, please contact us at [email protected].

Cookies & Tracking

We use cookies and similar technologies to operate the platform and remember your preferences. For full details, see our Cookie Policy.

In summary: we use essential session cookies (required for login), analytics cookies (aggregated, no cross-site tracking), and preference cookies (to remember your settings). We do not use advertising or tracking cookies.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

  • Account data is retained for the life of your account
  • Deal and collaboration records are retained for 3 years after completion for financial and legal compliance
  • Usage/analytics data is aggregated and anonymised after 12 months
  • On account deletion, personal identifiers are removed within 30 days; anonymised aggregate data may be retained indefinitely

Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable law, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your account and associated personal data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to specific processing activities
  • Withdraw consent — withdraw consent for optional data processing at any time

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You can also delete your account directly from the dashboard settings.

Children's Privacy

ENROOP is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a person under 18 has provided us with personal data, we will delete that account and associated data promptly. If you believe a minor has created an account, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify registered users by email or an in-app notice at least 14 days before the changes take effect.

Your continued use of ENROOP after the effective date of any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:

ENROOP Privacy Team

Email: [email protected]

Website: enroop.com

We aim to respond to all privacy inquiries within 30 days.