Your data, plainly stated.

BigSocials is a creator marketplace run by BigSocials Technologies Pvt. Ltd. from India (“BigSocials”, “we”, “us”). Brands brief campaigns, creators respond and deliver work, and we handle matching, review and payments. This policy explains how we handle personal data under India’s Digital Personal Data Protection Act, 2023 and other applicable law. By using BigSocials you accept it.

• Account details — name, email address, phone number, and how you sign in (email and password, a one-time code, Google, or Instagram). Passwords are stored hashed, never in plain text.
• Creator profile — bio, niches, languages, location, rates, profile photo, work links, and the UPI ID or bank account details (account holder, account number and IFSC code) and PAN you give us so we can pay you and keep tax records. The account number and PAN are stored encrypted, shown back to you only in part, and visible to the BigSocials team who send your payouts.
• Instagram data (creators) — if you connect Instagram we receive your username, account type, profile picture, follower count and your media list (captions, links, thumbnails and publish dates). We also read insights for your account and posts, such as reach, views, likes, comments, saves and shares. We never post on your behalf.
• Comment and message automations — if you create an automation, we receive comment notifications on the posts you chose, and send the reply and direct message you wrote. We keep the commenter’s Instagram ID, the keyword that matched, and whether the reply and message were sent. We do not store the comment text. Comments are shown to you on request and are not saved.
• Brand details — company name, GSTIN, website, contact name and position, and the campaigns, briefs and budgets you create.
• Facebook Page data (brands, optional) — if a brand connects its Meta account we read the Pages it administers (name and follower count) and the selected Page’s recent posts. This connection is optional and is not a way to sign in.
• Payments — processed by Razorpay. We store order and payment identifiers, amounts, fees, wallet balances, withdrawal requests and payouts. We never see or store the card or net-banking details you use to pay. Creators who choose to be paid by bank transfer give us their bank account details, as described above.
• Work and messages on the platform — invitations, offers, submissions (links to files you share) and notifications.
• Technical data — IP address, browser, device and request logs used for security, rate limiting and debugging, and push-notification tokens if you turn push on.

• To create your account, verify your phone and email, and keep it secure.
• To match brands with creators, send invitations and run campaigns, reviews and payouts.
• To show creators their own analytics, scores and AI suggestions, and to show brands the creator information needed to choose who to invite.
• To run the comment and message automations a creator has set up.
• To prevent fraud and abuse, comply with the law, and improve the service.

We use Instagram and Meta data only to provide the features you asked for. We do not sell it, use it for advertising, or give it to data brokers.

Matching, rankings, content analysis and suggestions use AI services from third-party providers (OpenAI, Google and Anthropic). To produce a result we send them limited content: profile text such as bio and niches, public Instagram metrics, and post captions. When you use Script Writer we also send what you type there, the campaign brief and terms if you are writing for a campaign, and, if you choose it, your Persona answers, which describe how you write and talk (your tone, pacing and favourite phrases). We do not send your phone number, email address, UPI ID, bank account, PAN or payment details. AI output is a suggestion, not a guarantee, and a person makes the final decision on every invitation and payment.

We share data only with the people and services needed to run BigSocials:

• Other users. A brand sees a creator’s profile and performance numbers when matching or reviewing them; a creator sees the brief and brand details for an invitation they receive.
• Service providers acting for us: Supabase (database and sign-in), Vercel (hosting), Razorpay (payments), MSG91 (SMS codes), Resend and Brevo (email), and the AI providers above.
• Meta Platforms, when you connect Instagram or a Facebook Page, under Meta’s own terms and policies.
• Authorities, when the law requires it.

Our main database is hosted in India (Mumbai). Some providers process data in other countries; where they do we rely on their security commitments.

• Account, profile and campaign data: for as long as your account is active.
• Instagram access tokens: until you disconnect Instagram, remove BigSocials in your Instagram or Facebook settings, or delete your account. Tokens are stored encrypted.
• Payment and wallet records: for the period tax and accounting law requires, even after you delete your account.
• Security and audit logs: up to 12 months.
• Deleted data: removed within 30 days of a valid request, as described on our data deletion page.

You can, at any time:

• Ask for a copy of the personal data we hold about you.
• Correct inaccurate data, most of which you can edit yourself in your profile and settings.
• Disconnect Instagram or your Meta account from your dashboard.
• Delete your account and data — see how to delete your data.
• Withdraw consent, which may stop features that need the data.
• Nominate someone to exercise these rights for you if you cannot, and complain to us or to the Data Protection Board of India.

Write to bigsocialsdev@gmail.com from the email address on your account. We acknowledge requests within 3 business days and complete them within 30 days.

Connections use HTTPS. Access to data is limited by role, and database access rules stop users reading each other’s private data. Instagram and Facebook tokens are encrypted at rest. No system is perfectly secure, so if a breach affects you we will tell you and the authorities as the law requires.

We use first-party cookies for sign-in sessions and security. We do not use third-party advertising or cross-site tracking cookies.

BigSocials is for people aged 18 and over. We do not knowingly collect data from anyone younger.

We may update this policy. The date at the top shows the latest version, and we will tell you in the app or by email about significant changes.

Grievance Officer, BigSocials Technologies Pvt. Ltd., India. Email: bigsocialsdev@gmail.com. We acknowledge complaints within 3 business days and aim to resolve them within 30 days. You can also use the contact page.