This notice is written to stand on its own, separately from our general Privacy Policy, for anyone in India exercising rights under the Digital Personal Data Protection Act, 2023 and its 2025 Rules. It lists, category by category, what personal data we process and why. Where we rely on your consent, you can withdraw it as easily as you gave it; where we don't, that's noted too.
What we process, and why
Account & sign-in
| Data | Purpose |
|---|
| Name, email, password | Create and secure your account, sign you in |
| Two-factor authentication code (if enabled) | Extra sign-in security you choose to turn on |
| IP address, device/browser information, session activity | Detect suspicious sign-ins, keep your account secure |
Organization & billing
| Data | Purpose |
|---|
| Billing name, email, address, tax ID | Generate invoices, process payment, meet tax record-keeping obligations |
| Subscription and invoice history | Billing history, accounting, dispute resolution |
Connected social accounts
| Data | Purpose |
|---|
| OAuth access tokens for platforms you connect (Facebook, Instagram, LinkedIn, X, TikTok, Pinterest, YouTube, Threads, and similar) | Publish, schedule and read analytics on your behalf, on the accounts you connect |
| Connected-account profile info (handle, display name, avatar) | Show you which account you're posting as |
Content you create
| Data | Purpose |
|---|
| Post drafts, published content, uploaded media | The core service — creating and scheduling your content |
| Comments and messages imported from your connected accounts | Let you view and respond to your own audience from one inbox |
| Contact profiles for people who engage with your connected accounts | Help you keep track of your own audience relationships |
AI features (if you use them)
| Data | Purpose |
|---|
| Prompts and generated content | Generate captions, ideas or suggestions you request |
| Your own AI provider API key (if you bring your own key) | Route your AI requests to your own provider account, at your own cost — stored encrypted, never shown in full |
Support & communications
| Data | Purpose |
|---|
| Support ticket contents, contact-form submissions | Respond to your questions and requests |
Website visits and campaign measurement (cookie-based, with your consent)
| Data | Purpose |
|---|
| A random visitor identifier, the page you landed on, the campaign tags in the link you followed (utm_ parameters) and the website you came from. No IP address or name is stored in these visit records | Count visitors and learn which pages and campaigns bring people to MultiPost Studio |
| The source and campaign that first brought you, and the latest one, saved with your account if you sign up | Learn which campaigns lead to real customers |
| Usage data collected by Google Analytics (Google LLC) through its cookies | Count visits and see which pages are used |
Affiliate program (optional, opt-in)
| Data | Purpose |
|---|
| Affiliate code, referred organization, commission and payout records | Run the commission program you chose to join |
Legal basis
Cookies and campaign measurement. The analytics cookies and visit records above are only used with your consent. A notice is shown on your first visit with an equally easy Accept and Decline, and you can withdraw consent at any time as easily as you gave it, through “Cookie settings” in the site footer or on the cookie policy. Declining deletes the analytics cookies already on your device, and nothing about the product depends on accepting. A Do Not Track or Global Privacy Control signal from your browser is treated as a standing “no”.
Most of what's listed above is data you provide voluntarily to get the specific service you signed up for — creating an account, connecting a platform, publishing a post — and we haven't been told you object to that use. Where we ask for something separately and optionally, such as joining the Affiliate Program, we record your acceptance directly (see Affiliate Program Terms) and you can stop participating at any time from your account.
Who else sees it
We share data with the specific processors needed to run the service — your connected social platforms, our payment processor, our email and hosting providers, and (only if you use AI features) an AI provider — never for their own marketing purposes. See the DPA for the processor list.
Your rights and how to use them
- Access a summary of the personal data we hold about you
- Correct or update inaccurate data
- Request erasure of your data, subject to records we're required to keep (invoices, audit trail)
- Withdraw any consent you've given, at any time
- Raise a complaint about how your data is handled
Most of this is available directly in the app under Settings. For anything else, email [email protected] — see data deletion instructions for the account-deletion flow specifically. We aim to respond within a reasonable time; we're working toward the 90-day response window the Rules specify as we build out a dedicated rights-request system.
Full policy
For our complete data-handling practices, including retention and security, see the full Privacy Policy.
