Privacy Policy

Overview

ENROOP ("we", "us", or "our") operates enroop.com — a creator reputation and sponsorship conversion platform that connects content creators with brands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using ENROOP, you agree to the collection and use of information in accordance with this policy. We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable provisions of the Information Technology Act, 2000.

Data We Collect

Account Information

When you create an account we collect:

• Full name and email address (via Google Sign-In)
• Profile photo (from your Google account, if provided)
• Username and public profile details you add on ENROOP
• Role — creator or brand

Creator Profile Data

Creators voluntarily provide:

• Bio, niche/profession, location, and availability status
• Social media channel links and connected account data
• Collaboration history, case studies, and campaign results
• Blog posts and gallery images uploaded to ENROOP
• Audience demographics (country, age group) — entered manually or synced from connected platforms

Brand Data

Brands provide:

• Company name, industry, and contact email
• Deal request details (campaign type, deliverables, budget, timeline)
• Communication history within the collaboration workspace

Usage Data

We automatically collect standard web analytics data including IP address, browser type, pages visited, time on site, and referring URLs. This data is aggregated and used to improve the platform.

How We Use Your Data

We use the information we collect to:

• Create and manage your ENROOP account
• Display your public creator profile to brands and visitors
• Facilitate deal requests and collaboration workflows between creators and brands
• Process payments via Razorpay and send payment confirmations
• Send transactional emails (deal requests, status updates, payment receipts)
• Improve platform features and diagnose technical issues
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations under applicable Indian law

We do not use your data to serve third-party advertisements or build advertising profiles.

Data Sharing

We share your data only in the following circumstances:

Public Creator Profiles

Creator profile information (name, bio, social stats, collaborations, blogs, gallery) is publicly visible at your enroop.com/username page. You control what appears on your profile through your dashboard.

Between Creators and Brands

When a brand submits a deal request, their contact details and campaign information are shared with the relevant creator. Once a creator accepts a deal, both parties gain access to the collaboration workspace.

Service Providers

We share data with trusted third-party providers who help us operate the platform:

• Razorpay — payment processing (subject to Razorpay's Privacy Policy)
• Google — authentication via Google Sign-In
• Meta / Instagram — social data via Instagram Graph API when you connect your Instagram account
• Cloud infrastructure providers — hosting and database services (Google Cloud)

These providers are contractually bound to use your data only to perform services on our behalf and not for any other purpose.

Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe such disclosure is necessary to protect our rights, the safety of users, or the integrity of the platform.

Connected Social Accounts

Creators can connect Instagram and YouTube accounts to populate their ENROOP profile with verified metrics. When you connect a social account:

• We request only the specific data scopes you explicitly authorise via that platform's OAuth flow
• We store follower counts, engagement metrics, and public post data solely to display on your creator profile
• We do not post, comment, or message on your behalf
• We do not access your followers' private data
• Access is read-only — we cannot modify your account or content
• You can disconnect any social account from Dashboard → Platforms at any time

Disconnecting a social account removes the live sync. Previously imported public metrics may remain on your profile until you manually remove them from your dashboard.

Instagram & Meta Platform Data

ENROOP integrates with the Instagram Graph API (Instagram Business API) provided by Meta Platforms, Inc. This section explains exactly what Instagram data we access, why, and how it is used.

Permissions We Request

When you connect your Instagram account, ENROOP requests the following permissions:

How We Use This Data

Instagram data collected through the API is used exclusively to:

• Display your creator profile metrics on your public ENROOP page (enroop.com/username)
• Show brands your engagement rate, reach, and proof of influence
• Power the search and discovery engine so brands can find relevant creators
• Display post-level insights on your dashboard so you can choose which posts to highlight

We do not use Instagram data for advertising, profiling, or any purpose beyond what is described above. We do not sell, license, or share Instagram data with any third party except as required to operate the platform (e.g., cloud hosting).

What We Do Not Do

• We do not publish posts, stories, or reels on your behalf
• We do not send or read Instagram Direct Messages
• We do not access your followers' personal information
• We do not use Instagram insights for advertising targeting
• We do not share raw Instagram API data with third parties for their own use

Account Type Requirement

The Instagram Graph API requires a Professional account (Business or Creator). Personal Instagram accounts cannot be connected to ENROOP. You can switch your account type in Instagram's settings.

Revoking Instagram Access

You can revoke ENROOP's access to your Instagram account in two ways:

• From ENROOP: Dashboard → Platforms → Remove (next to your Instagram account)
• From Instagram: Instagram Settings → Apps and Websites → find ENROOP → Remove

Revoking access stops future data syncs. To also remove previously imported Instagram data from your ENROOP profile, contact us at [email protected] or use the data deletion request process described below.

Meta's Data Policy

Data accessed through the Instagram Graph API is also subject to Meta's Privacy Policy and the Meta Platform Terms.

Data Deletion

You have the right to request deletion of your personal data and any data collected from connected social accounts (including Instagram).

Delete Your ENROOP Account

You can delete your account from Dashboard → Settings → Delete Account. This will:

• Remove your public creator profile and all associated content
• Revoke all connected social account tokens
• Delete your personal data within 30 days
• Retain anonymised, non-identifiable data for platform analytics

Delete Instagram Data Only

To request deletion of only your Instagram-sourced data without closing your account, email us at [email protected] with the subject line "Instagram Data Deletion Request". We will process the request within 30 days.

Meta Data Deletion Callback

If you remove ENROOP from your Facebook/Instagram app settings, Meta will notify us via our data deletion callback. We will process the deletion of your Instagram data within 30 days of receiving that notification.

Payment Data

All payments on ENROOP are processed by Razorpay, a PCI-DSS compliant payment gateway. We do not collect, store, or transmit your card number, CVV, or bank account details.

We store only what is necessary for records: transaction ID, amount, currency, deal reference, and payment status. Payment amounts are always determined server-side — we never trust frontend values.

For any payment disputes, refunds, or chargebacks, please contact us at [email protected].

Cookies & Tracking

We use cookies and similar technologies to operate the platform and remember your preferences. For full details, see our Cookie Policy.

In summary: we use essential session cookies (required for login), analytics cookies (aggregated, no cross-site tracking), and preference cookies (to remember your settings). We do not use advertising or tracking cookies.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained for the life of your account
• Deal and collaboration records are retained for 3 years after completion for financial and legal compliance
• Usage/analytics data is aggregated and anonymised after 12 months
• On account deletion, personal identifiers are removed within 30 days; anonymised aggregate data may be retained indefinitely

Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Erasure — request deletion of your account and associated personal data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to specific processing activities
• Withdraw consent — withdraw consent for optional data processing at any time

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You can also delete your account directly from the dashboard settings.

Children's Privacy

ENROOP is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a person under 18 has provided us with personal data, we will delete that account and associated data promptly. If you believe a minor has created an account, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify registered users by email or an in-app notice at least 14 days before the changes take effect.

Your continued use of ENROOP after the effective date of any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us: