This Privacy Policy describes how Chhap India LLP (“Chhap”, “Company”, “we”, “us”, or “our”) collects, uses, processes, stores, and protects personal data when individuals or entities (“User”, “Creator”, “Customer”, “Partner”, or “you”) access or use the Chhap platform, including websites, creator dashboards, mobile interfaces, analytics systems, APIs, and related services (collectively, the “Platform”).
This Policy is designed in alignment with applicable Indian data protection principles, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Information Technology Act, 2000, and related rules.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
1. ROLE UNDER DATA PROTECTION LAW
1.1 Chhap acts as a “Data Fiduciary” for purposes of applicable Indian data protection law.
1.2 Users whose personal data is processed are considered “Data Principals”.
1.3 Where third-party vendors process data on our behalf, they may act as data processors under contractual safeguards.
2. INFORMATION WE COLLECT
We may collect the following categories of information:
(a) Account Information: Name, email address, phone number, username, profile details, and authentication credentials.
(b) Identity and Compliance Information: KYC details, PAN/GST information, or identity verification data where required for fraud prevention or legal compliance.
(c) Transaction and Wallet Information: Order history, payout details, creator earnings, referral attribution data, and internal wallet ledger balances.
(d) Device and Usage Information: IP address, browser type, device identifiers, session logs, platform activity, and performance analytics.
(e) Creator Content Data: Design uploads, product listings, metadata, and promotional material submitted through the Platform.
(f) Communication Data: Support messages, feedback submissions, dispute communications, and internal notifications.
3. PURPOSES OF PROCESSING
Chhap processes data for legitimate operational purposes including:
- Providing and operating the Platform;
- Processing orders, payouts, and creator earnings;
- Fraud detection, abuse prevention, and platform integrity;
- Algorithmic ranking, discovery, and analytics optimization;
- Customer support and dispute resolution;
- Compliance with legal and regulatory obligations;
- Security monitoring and risk mitigation;
- Improving platform performance and user experience.
We do not sell personal data to third parties.
Processing activities may also include internal auditing, governance oversight, and platform safety assessments.
4. CONSENT AND LEGAL BASIS
4.1 By using the Platform, users consent to processing necessary for providing services and fulfilling contractual obligations.
4.2 Certain features may require additional consent where mandated by law.
4.3 Users may withdraw consent where legally applicable; however, withdrawal may limit access to Platform features.
4.4 Certain data processing activities may be necessary for fraud prevention, security monitoring, legal compliance, or contractual performance and may continue notwithstanding withdrawal of consent where permitted by applicable law.
5. REFERRAL, ANALYTICS, AND AUTOMATED PROCESSING
5.1 The Platform may use automated systems to analyze user activity, sales performance, and referral attribution.
5.2 Automated tools may influence discovery visibility, rewards allocation, or fraud detection outcomes.
5.3 These systems operate using aggregated behavioural signals and internal risk models.
5.4 Automated processing does not create employment relationships or managerial structures between users.
5.5 Referral attribution, reward calculation, and commission allocation may rely on automated tracking signals and internal attribution logic which may be updated periodically.
5.6 Automated systems are designed for operational optimization and fraud prevention and are not intended to make legally significant decisions solely through automated means where restricted by applicable law.
6. WALLET AND PAYMENT DATA
6.1 Creator earnings may appear within an internal wallet balance used solely for platform accounting purposes.
6.2 Wallet balances represent ledger entries and do not constitute bank deposits, prepaid instruments, or financial accounts.
6.3 Payment processing may involve licensed third-party gateways that independently manage financial data under their own privacy policies.
7. DATA SHARING
Chhap may share data with:
- Payment processors and banking partners;
- Logistics and manufacturing vendors;
- Infrastructure and analytics providers;
- Legal or regulatory authorities where required by law;
- Professional advisors such as auditors or legal counsel.
All third-party access is limited to operational necessity and subject to contractual safeguards where commercially feasible.
Chhap may disclose data in response to lawful governmental or judicial requests where legally required.
Third-party service providers process data under their own independent legal obligations where applicable.
8. CROSS-BORDER DATA PROCESSING
8.1 Platform infrastructure or service providers may process data outside India.
8.2 Where cross-border processing occurs, Chhap implements commercially reasonable technical and contractual protections to safeguard personal data.
8.3 Users acknowledge that global platform operations may involve international data flows consistent with applicable law.
9. DATA RETENTION
9.1 Personal data is retained only for as long as necessary for operational purposes, legal compliance, dispute resolution, fraud prevention, or security monitoring.
9.2 Certain records may be retained longer where required under tax, accounting, or regulatory frameworks.
9.3 Chhap processes only such personal data as is reasonably necessary for the purposes described in this Policy.
10. DATA SECURITY
10.1 Chhap implements administrative, technical, and organizational safeguards designed to protect data from unauthorized access, alteration, disclosure, or destruction.
10.2 Security measures may include encryption, access controls, monitoring systems, and internal risk audits.
10.3 No system can guarantee absolute security; users acknowledge inherent internet risks.
10.4 Security practices may evolve based on industry standards and risk assessments.
11. CHILDREN AND MINOR ACCOUNTS
11.1 Users under eighteen (18) may access the Platform only through verified guardians who accept responsibility for data processing.
11.2 Limited identity verification may be required to ensure compliance with applicable laws and safety obligations.
11.3 Where Chhap becomes aware of inaccurate guardian verification or misuse involving minors, the Company may suspend processing pending verification.
12. USER RIGHTS UNDER APPLICABLE LAW
Subject to applicable law, users may have rights to:
- Request access to personal data;
- Request correction or update of inaccurate information;
- Request erasure where legally permissible;
- Withdraw consent where processing is consent-based;
- Seek grievance redressal through the contact process below.
Certain requests may be limited where retention is required for legal or operational purposes.
13. DATA BREACH RESPONSE
13.1 In the event of a data security incident, Chhap may take reasonable steps to investigate, mitigate risk, and notify affected users or authorities where required by applicable law.
13.2 Notification timing may depend on legal obligations, technical feasibility, and risk assessment.
14. MARKETING AND COMMUNICATIONS
14.1 Users may receive service-related communications necessary for Platform operations.
14.2 Promotional communications may be sent where permitted by law and users may opt out where such options are provided.
15. COOKIES AND TRACKING TECHNOLOGIES
15.1 The Platform may use cookies or similar technologies for authentication, analytics, and performance optimization.
15.2 Users may manage browser settings to control certain tracking technologies; however, disabling cookies may affect functionality.
16. PLATFORM ANALYTICS AND TRADE SECRETS
16.1 Aggregated analytics, performance insights, and optimization models derived from platform usage constitute proprietary intellectual property of Chhap.
16.2 These analytics do not transfer ownership of creator intellectual property to the Company.
17. MERGER, ACQUISITION, OR BUSINESS TRANSFER
17.1 In the event of restructuring, merger, or asset transfer, user data may be transferred to a successor entity subject to this Privacy Policy and applicable law.
18. POLICY UPDATES
18.1 Chhap may update this Privacy Policy to reflect regulatory developments, operational changes, or platform evolution.
18.2 Material updates may be communicated through platform notifications or official communication channels.
19. GRIEVANCE REDRESSAL AND CONTACT
For privacy-related concerns, requests, or complaints, users may contact:
Chhap India LLP
2nd Floor 8, 3-678, opp. Sri Ram Manor Apartments,
Pragathi Nagar, Yousufguda, Hyderabad, Telangana 500045
Email: support@chhap.in
Website: https://chhap.in
Chhap has designated or may designate a Grievance Officer to review data protection requests in accordance with applicable Indian law.
20. ACKNOWLEDGEMENT
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of data as described herein.