Privacy Policy

1About this policy

This policy explains how the operator of PostWallah named in the Contact section ("PostWallah", "we", "us") collects and uses your personal data. We are the Data Fiduciary for that data under the Digital Personal Data Protection Act, 2023. This policy forms part of our Terms of Service.

By using PostWallah, you consent to the processing described here. You can withdraw consent at any time, as explained below.

2What we collect

• Account: your mobile number, sign-in records and the sessions you're signed in on.
• Details you add: name, designation, organisation, the mobile number and email you choose to show, custom text, business logo and language.
• Photos: photos you take or pick, the background-removed cut-outs we make from them, and photos you choose for AI photos.
• Posts: posts you save, bookmark or share, with the template, layout, text and copies of the photo or logo used.
• AI photos: images you submit, the results we generate, and reports you send.
• Payments: plans and credit packs you buy, amounts, order, payment, refund and mandate references, and their status. We do not receive your card number, UPI PIN or bank passwords.
• Technical: an ID for your app installation, your time zone, your IP address (to deliver OTPs and protect against abuse), app version and basic request logs.
• Support: anything you send us when you contact us.

We do not collect your contacts, SMS messages, precise location or advertising ID. The app shows no ads and has no third-party analytics or tracking tools. The camera is used only when you take a photo, and the photo picker gives us only the images you choose.

3How we use it

• to sign you in and keep your account secure;
• to show your details on posts, make cut-outs, create AI photos, and save and share posts as you ask;
• to process payments, subscriptions, trials and credits;
• to prevent fraud, abuse and misuse, and to enforce our Terms;
• to answer support requests and grievances;
• to comply with the law and lawful requests from authorities;
• to fix problems and improve PostWallah, using aggregated or de-identified information where possible.

We do not sell your personal data, and we do not use it for advertising.

4Image links are public

Photos, cut-outs, logos, AI photos and post images are stored at web links that anyone who has the link can open without signing in. The links are long, hard to guess and not published, but anyone you share a link or image with can view, save and forward it. Do not upload images you need to keep private.

5Who we share it with

• Service providers who run PostWallah for us under contract: cloud hosting, databases and storage (including Google Cloud and Firebase, DigitalOcean and MongoDB Atlas), SMS and OTP delivery, AI photo creation (Google Gemini, only when you use AI photos) and payments (such as Razorpay).
• The apps and people you choose to share posts with.
• Government authorities, courts or law enforcement, when the law requires it or to protect the rights, property or safety of PostWallah, our users or others.
• A buyer or successor if PostWallah is sold, merged or reorganised, who must keep protecting your data under this policy.

Your data may be stored and processed in India or other countries, as Indian law permits.

6How long we keep it

• Account and profile data: while your account is active.
• Photos, logos and posts: until you delete them or your account. Deleted files may stay in backups or recovery storage for a short time before they're removed.
• OTP records: about an hour.
• Payment, tax and accounting records: as long as the law requires, even after you delete your account.
• Security logs and records needed for legal claims or investigations: as long as those purposes require, including periods set by the Information Technology Rules.

7Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• correct or update it (most details can be changed in Edit Profile);
• ask us to erase it by deleting your account;
• withdraw consent. Some features, or the whole service, may then stop working. This doesn't affect processing already done;
• have your grievances handled by our Grievance Officer;
• nominate someone to exercise your rights if you die or become unable to.

Write to us using the Contact details. We may verify your identity first. If you're not satisfied with our response, you can complain to the Data Protection Board of India.

The Act also gives you duties: give accurate information, don't impersonate anyone, and don't file false or frivolous complaints.

8Deleting your account

To delete your account, go to Profile → Manage account → Delete account. You can also write to us from the number registered with PostWallah, using the Contact details.

When your account is deleted, we delete your profile, photos, logos, posts and AI photos from our servers, except records we must keep by law. Copies you've already shared stay with the people who received them.

Before deleting, cancel any active plan or UPI AutoPay mandate. Deleting your account doesn't cancel it.

9Security

We protect your data with encryption in transit (HTTPS), encrypted sign-in storage on your phone and access controls. No system is completely secure, so we can't guarantee absolute security. Keep your phone locked and never share your OTP. If a personal data breach happens, we'll inform the Data Protection Board and affected users as the law requires.

10Children

PostWallah is only for people aged 18 and over, and we do not knowingly collect children's data. Do not upload a child's photo unless you are their parent or guardian. If we learn that we hold a child's data without verifiable parental consent, we'll delete it.

11Changes to this policy

We may update this policy. We'll show the date of the latest version and tell you in the app about important changes. Where the law requires, we'll ask for your consent again.