Privacy Policy

1. Introduction & Data Fiduciary Details

PayTrail India ("PayTrail", "we", "us", or "our") provides a workflow and automated payment tracking platform designed specifically for Indian digital creators, influencers, and creative agencies. We operate as a Data Fiduciary under India's Digital Personal Data Protection (DPDP) Act, 2023.

This Privacy Policy describes our transparent policies regarding the collection, encryption, processing, storage, and retention of personal, business, and financial data when you use PayTrail.

2. Categories of Data Collected

We strictly collect data essential to deliver invoice automation and milestone settlement tracking:

• Identity & Business Details: Full name, verified creator handle (@handle), business or studio trading name, registered billing address, and timezone.
• Indian Statutory Tax Credentials: Permanent Account Number (PAN) used for TDS deductions under Section 194J/194C of the Income-tax Act, 1961, and Goods and Services Tax Identification Number (GSTIN).
• Remittance Coordinates: Virtual Payment Address (UPI ID) and direct banking coordinates (Account Number, IFSC code, Bank Name, Beneficiary Name) displayed on invoices and reminder notices.
• Deal & Commercial Contract Metadata: Brand sponsor name, campaign deliverables, total contract fee, payment milestone dates, and issued GST invoice line items.
• Brand Sponsor Contact Coordinates: Names, business emails, and mobile numbers of brand marketing managers or agency finance contacts whom creators authorize us to notify for milestone settlements.

We treat your tax and financial coordinates as high-sensitivity credentials:

4. Authorized Sub-processors & Service Providers

We never sell, rent, or monetize creator data. We transmit data strictly to authenticated sub-processors to execute core infrastructure services:

5. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you hold enforceable rights regarding your data:

• Right to Access: View and review all stored data at any time via your Settings dashboard.
• Right to Data Portability: Export all deals, invoices, and profile records in a machine-readable JSON archive.
• Right to Rectification: Update inaccurate tax, banking, or profile information immediately.
• Right to Erasure: Request permanent deactivation and deletion of your creator account.

6. Data Retention & Legal Statutory Obligations

While creators may request account closure at any time, Indian tax and commercial statutes (specifically Section 44AA of the Income-tax Act, 1961 and Section 36 of the Central Goods and Services Tax Act, 2017) mandate the retention of books of accounts, tax invoices, and payment receipts for a minimum of 6 to 7 years from the end of the relevant assessment year.

Upon account closure, personal contact details and reminder cadences are permanently wiped, while tax invoice records are retained in an immutable compliance archive solely for statutory audit obligations.