Privacy Policy

1. Information We Collect

When you create an account, log brand partnerships, or generate invoices on DueMetrix, we collect the following categories of information:

• Account Credentials: Name, email address, password hash, creator studio brand name, and social media handles (Instagram, YouTube, LinkedIn, X, TikTok).
• Brand Deal & Pipeline Data: Brand names, agency contacts, deliverable scopes, campaign dates, agreed commercial fees (INR / USD), payment terms (Net 15, Net 30, Net 45, etc.), and deliverable statuses.
• Invoicing Records: Invoice numbers, bank beneficiary details (Account Name, Bank Name, IFSC code, UPI ID), Tax identification (GSTIN, PAN) if entered by you for commercial invoice generation.
• Communications & Follow-up Metadata: Timestamps of WhatsApp and email reminder dispatches.
• Technical & Usage Telemetry: IP address, device type, browser information, and session logs.

2. How We Use Your Information

We process your data strictly to deliver and enhance DueMetrix services, specifically:

• To provide your real-time visual deal pipeline and cash flow forecasting dashboards.
• To calculate overdue penalties, settlement schedules, and payment turnaround metrics.
• To format and generate compliant PDF commercial invoices and receipts for brand download.
• To generate customized 1-click WhatsApp and email recovery copy upon your direct instruction.
• To process subscription billing for our Pro Creator tier via our certified payment gateway partners.
• To detect and prevent fraudulent account activities and unauthorized access.

3. Financial Information & Razorpay Security

We prioritize the highest grade of financial security for creator subscriptions and payments:

Subscription payments for DueMetrix Pro Creator (₹99/month or ₹899/year) are processed directly by Razorpay Software Private Limited, an RBI-authorized Payment Aggregator and PCI-DSS Level 1 certified entity. DueMetrix does not store your credit card numbers, debit card PINs, CVV codes, or net-banking passwords on our servers.

4. Data Protection & Encryption Standards

DueMetrix utilizes modern cloud infrastructure backed by Supabase and PostgreSQL with strict Row-Level Security (RLS). All data in transit is encrypted using industry-standard TLS 1.3/SSL 256-bit protocols, and all stored data is encrypted at rest (AES-256).

5. Compliance with DPDP Act 2023 & Creator Rights

In full accordance with the Digital Personal Data Protection Act 2023 (India) and international data privacy norms:

• Right to Access & Portability: You may request an export of all your deal and invoice records in standard format at any time.
• Right to Correction: You can edit or update any profile or deal data directly in your studio settings.
• Right to Erasure: You can request complete deletion of your account, deals, and invoice history by emailing privacy@duemetrix.com.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We only share necessary operational data with verified service providers who assist in powering DueMetrix:

• Cloud Database & Authentication: Supabase / AWS (Secure cloud hosting).
• Payment Processing: Razorpay (Subscription billing and UPI processing).
• Email Delivery: Resend / SendGrid (Transactional and account notifications).

7. Grievance Redressal & Contact Officer

If you have any questions, feedback, or grievance regarding your personal data handling under this policy, please reach out to our designated Data Protection Officer: