Overview
ENROOP ("we", "us", or "our") operates enroop.com — a creator reputation and sponsorship conversion platform that connects content creators with brands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
By using ENROOP, you agree to the collection and use of information in accordance with this policy. We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable provisions of the Information Technology Act, 2000.
Quick summary
- • We collect only what we need to run the platform
- • We never sell your personal data to third parties
- • Social account data is used solely to build your public creator profile
- • Payments are processed by Razorpay — we don't store card details
- • You can request deletion of your account and data at any time
Data We Collect
Account Information
When you create an account we collect:
- Full name and email address (via Google Sign-In)
- Profile photo (from your Google account, if provided)
- Username and public profile details you add on ENROOP
- Role — creator or brand
Creator Profile Data
Creators voluntarily provide:
- Bio, niche/profession, location, and availability status
- Social media channel links and connected account data
- Collaboration history, case studies, and campaign results
- Blog posts and gallery images uploaded to ENROOP
- Audience demographics (country, age group) — entered manually or synced from connected platforms
Brand Data
Brands provide:
- Company name, industry, and contact email
- Deal request details (campaign type, deliverables, budget, timeline)
- Communication history within the collaboration workspace
Usage Data
We automatically collect standard web analytics data including IP address, browser type, pages visited, time on site, and referring URLs. This data is aggregated and used to improve the platform.
How We Use Your Data
We use the information we collect to:
- Create and manage your ENROOP account
- Display your public creator profile to brands and visitors
- Facilitate deal requests and collaboration workflows between creators and brands
- Process payments via Razorpay and send payment confirmations
- Send transactional emails (deal requests, status updates, payment receipts)
- Improve platform features and diagnose technical issues
- Enforce our Terms of Service and prevent abuse
- Comply with legal obligations under applicable Indian law
We do not use your data to serve third-party advertisements or build advertising profiles.
Data Sharing
We share your data only in the following circumstances:
Public Creator Profiles
Creator profile information (name, bio, social stats, collaborations, blogs, gallery) is publicly visible at your enroop.com/username page. You control what appears on your profile through your dashboard.
Between Creators and Brands
When a brand submits a deal request, their contact details and campaign information are shared with the relevant creator. Once a creator accepts a deal, both parties gain access to the collaboration workspace.
Service Providers
We share data with trusted third-party providers who help us operate the platform:
- Razorpay — payment processing (subject to Razorpay's Privacy Policy)
- Google — authentication via Google Sign-In
- Meta / Instagram — social data via Instagram Graph API when you connect your Instagram account
- Cloud infrastructure providers — hosting and database services (Google Cloud)
These providers are contractually bound to use your data only to perform services on our behalf and not for any other purpose.
Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe such disclosure is necessary to protect our rights, the safety of users, or the integrity of the platform.
Instagram & Meta Platform Data
ENROOP integrates with the Instagram Graph API (Instagram Business API) provided by Meta Platforms, Inc. This section explains exactly what Instagram data we access, why, and how it is used.
Permissions We Request
When you connect your Instagram account, ENROOP requests the following permissions:
instagram_business_basic
Allows ENROOP to read your Instagram Business or Creator account profile.
Data accessed:
- Username and display name
- Profile picture URL
- Follower count
- Biography text
- Account type (Business or Creator)
- Total media count
instagram_business_manage_insights
Allows ENROOP to read post-level engagement metrics for your Instagram content.
Data accessed (per post/reel):
- Impressions and reach
- Likes, comments, shares, and saves
- Video views (for video posts)
- Total interactions (for Reels)
How We Use This Data
Instagram data collected through the API is used exclusively to:
- Display your creator profile metrics on your public ENROOP page (
enroop.com/username) - Show brands your engagement rate, reach, and proof of influence
- Power the search and discovery engine so brands can find relevant creators
- Display post-level insights on your dashboard so you can choose which posts to highlight
We do not use Instagram data for advertising, profiling, or any purpose beyond what is described above. We do not sell, license, or share Instagram data with any third party except as required to operate the platform (e.g., cloud hosting).
What We Do Not Do
- We do not publish posts, stories, or reels on your behalf
- We do not send or read Instagram Direct Messages
- We do not access your followers' personal information
- We do not use Instagram insights for advertising targeting
- We do not share raw Instagram API data with third parties for their own use
Account Type Requirement
The Instagram Graph API requires a Professional account (Business or Creator). Personal Instagram accounts cannot be connected to ENROOP. You can switch your account type in Instagram's settings.
Revoking Instagram Access
You can revoke ENROOP's access to your Instagram account in two ways:
- From ENROOP: Dashboard → Platforms → Remove (next to your Instagram account)
- From Instagram: Instagram Settings → Apps and Websites → find ENROOP → Remove
Revoking access stops future data syncs. To also remove previously imported Instagram data from your ENROOP profile, contact us at [email protected] or use the data deletion request process described below.
Meta's Data Policy
Data accessed through the Instagram Graph API is also subject to Meta's Privacy Policy and the Meta Platform Terms.
Data Deletion
You have the right to request deletion of your personal data and any data collected from connected social accounts (including Instagram).
Delete Your ENROOP Account
You can delete your account from Dashboard → Settings → Delete Account. This will:
- Remove your public creator profile and all associated content
- Revoke all connected social account tokens
- Delete your personal data within 30 days
- Retain anonymised, non-identifiable data for platform analytics
Delete Instagram Data Only
To request deletion of only your Instagram-sourced data without closing your account, email us at [email protected] with the subject line "Instagram Data Deletion Request". We will process the request within 30 days.
Meta Data Deletion Callback
If you remove ENROOP from your Facebook/Instagram app settings, Meta will notify us via our data deletion callback. We will process the deletion of your Instagram data within 30 days of receiving that notification.
Payment Data
All payments on ENROOP are processed by Razorpay, a PCI-DSS compliant payment gateway. We do not collect, store, or transmit your card number, CVV, or bank account details.
We store only what is necessary for records: transaction ID, amount, currency, deal reference, and payment status. Payment amounts are always determined server-side — we never trust frontend values.
For any payment disputes, refunds, or chargebacks, please contact us at [email protected].
Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Specifically:
- Account data is retained for the life of your account
- Deal and collaboration records are retained for 3 years after completion for financial and legal compliance
- Usage/analytics data is aggregated and anonymised after 12 months
- On account deletion, personal identifiers are removed within 30 days; anonymised aggregate data may be retained indefinitely
Your Rights
Under the Digital Personal Data Protection Act, 2023 and applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Erasure — request deletion of your account and associated personal data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to specific processing activities
- Withdraw consent — withdraw consent for optional data processing at any time
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You can also delete your account directly from the dashboard settings.
Children's Privacy
ENROOP is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a person under 18 has provided us with personal data, we will delete that account and associated data promptly. If you believe a minor has created an account, please contact us at [email protected].
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify registered users by email or an in-app notice at least 14 days before the changes take effect.
Your continued use of ENROOP after the effective date of any changes constitutes acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or your data, please contact us:
ENROOP Privacy Team
Email: [email protected]
Website: enroop.com
We aim to respond to all privacy inquiries within 30 days.
Connected Social Accounts
Creators can connect Instagram and YouTube accounts to populate their ENROOP profile with verified metrics. When you connect a social account:
Disconnecting a social account removes the live sync. Previously imported public metrics may remain on your profile until you manually remove them from your dashboard.