← Back

Privacy Policy

Last updated: October 8, 2026

1. Introduction

Valueskins Pvt. Ltd. ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services (collectively, the "Platform").

This Policy is written to meet the Information Technology Act, 2000; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and the Digital Personal Data Protection Act, 2023 (DPDP Act). The Platform is offered in India.

Please read this Policy carefully. By using the Platform, you consent to the practices described in this Policy. If you do not agree with this Policy, please do not use the Platform.

2. Information We Collect

Account and Profile Information: Your email address, and the profile details you enter in Settings. For a Creator these are full name, age, gender, city, and Instagram follower count. For a Brand these are brand name, website (optional), city, and Instagram follower count. You may also write a short description of yourself or your brand. We store your age as the age you gave and the date you gave it, so that it can advance each year; we do not ask for your date of birth. We do not collect a password or a phone number: you sign in with Instagram.

Tax Information: We do not currently collect Permanent Account Numbers or GST numbers from users. If the law requires us to collect them in future, we will ask you for them and tell you why.

Payout Details (Creators): The UPI ID you want to be paid on and the name on that account. We do not verify them. We do not accept or store bank account numbers.

Deal Data: The Deals you post or apply to, including the description, amount, dates, applications, the links to content that a Creator shares, a Brand's written feedback, the dates of each step, the UPI payment references a Brand records, and a Creator's confirmations that a payment arrived. For our own fee we keep the payment record from our payment processor. Card and bank details used to pay our fee are handled by Razorpay and are not stored by us. We do not keep a copy of the content itself, and we do not measure how it performs.

Communication Data: We keep a log of the emails the Platform sends you (recipient, subject, and time), and of any email you send us. There is no chat or messaging feature on the Platform.

Instagram Account Data (Meta): You sign in to ValueSkins with an Instagram professional (Business or Creator) account. With your authorization through Meta's Instagram Login, we receive basic profile information only: your Instagram user ID, your username, and your account type. We use it to sign you in and to show your Instagram username to other Users. We do not read your follower count, media, messages, insights, or analytics from Instagram, and we do not post, comment, message, or act on your behalf. The follower count shown on your ValueSkins profile is the number you enter yourself.

Usage Data: Our servers record the requests made to the Platform, such as the page or action requested and the time, for security and troubleshooting.

Device & Technical Data: IP address, browser type and version, operating system, device type, unique device identifiers, and other technical information.

Cookies: We use the cookies needed to keep you signed in and to remember your cookie choice. See Section 10 for details.

3. How We Collect Your Information

Direct Collection: You provide information directly when you create an account, complete your profile, create Deals, send messages, submit support requests, or otherwise use the Platform.

Automatic Collection: We automatically collect usage and device data when you interact with the Platform through cookies, server logs, and analytics tools.

Third-Party Sources: We receive information from Meta when you sign in with Instagram, as described below. We may also receive information from our payment processor (Razorpay) limited to transaction status and identifiers (not full payment details).

Meta / Instagram: When you sign in with Instagram, we receive the data described in Section 2 under the single permission instagram_business_basic, which you grant on Instagram's consent screen. We do not read any data from an Instagram account other than the one you sign in with.

4. How We Use Your Information

We use your information for the following purposes:

To Provide Services: Operate and maintain the Platform's features, including your account, posting and applying to Deals, showing a confirmed Brand where to pay a Creator, recording payments, sending notices by email, and reviewing disputes.

Sign-in and your profile: Your Instagram login identifies your account, and your Instagram username is shown on your ValueSkins profile, together with the profile details you entered, so that the other party in a Deal can see who they are working with.

To Improve the Platform: Understand how the Platform is used and fix problems. We do not use your personal data for advertising.

To Communicate with You: Send administrative messages (account verification, password resets, deal updates), service announcements, technical notices, and support responses.

To Ensure Safety & Security: Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.

To Comply with Legal Obligations: Fulfill legal requirements, respond to lawful requests from authorities, and enforce our rights.

With Your Consent: For any other purpose disclosed to you at the time of collection, with your consent.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contractual Necessity: Processing necessary to perform our contract with you (e.g., account management, Deal execution).

Legitimate Interests: Processing for our legitimate interests (e.g., improving the Platform, fraud prevention, security) that do not override your fundamental rights.

Consent: Processing based on your explicit consent (e.g., marketing communications, non-essential cookies). You may withdraw consent at any time.

Legal Obligation: Processing necessary to comply with legal obligations.

6. Data Sharing & Disclosure

Service Providers: We share data with trusted third-party service providers who help us operate the Platform, subject to contractual obligations to protect your data:

• Payment Processing: Razorpay (INR payments), transaction data necessary to process payments

• Hosting & Infrastructure: Vercel and Render, which host the website and the database

• Authentication: Meta (Instagram Login), to verify your identity when you sign in

• Analytics: We do not use third-party behavioral advertising trackers. Where analytics are used, we process de-identified usage data ourselves or through a processor bound by this Policy, only with your consent where required by law.

• Instagram / Meta: We interact with Meta Platforms solely to sign you in and retrieve the basic Instagram profile data described in Section 2, subject to Meta's Platform Terms. We do not otherwise share your Instagram data with any third party.

• Communications: Zoho Mail, which sends our transactional emails

Other Users: Your Instagram username, your profile details, your description, and a summary of your completed Deals are visible to other signed-in Users. Your email address is shown only to Users with whom you share a Deal: the Brand that posted a Deal you applied to or were confirmed on, or a Creator who applied to or was confirmed on your Deal. If you are a Creator, your UPI ID and the name on that account are shown only to a Brand that has confirmed you on a Deal, so that it can pay you. A Brand's written feedback on content is visible to the Creator on that Deal.

Legal Requirements: We may disclose your information if required to do so by law, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change.

We do not sell your personal information to third parties for marketing or advertising purposes.

7. Data Retention

Active Accounts: We retain your information for as long as your account is active and as needed to provide you with services.

Deleted Accounts: When you request account deletion, a 30-day grace period begins during which you may cancel the deletion. After 30 days, your personal data is permanently deleted by our automated deletion system. Deal messages are retained for 90 days after deletion for dispute resolution purposes, then permanently deleted. Instagram profile data is retained only while your account is active and is removed upon account deletion.

Deal Records and Tax Documents: Deal records, transaction history, invoices, payment status, and associated audit logs are retained for a minimum of seven years as required by Indian tax law, accounting standards, and legal obligations. This is because a deal is a binding agreement between two parties and one party cannot erase the shared record of it.

Logs: Server logs containing IP addresses and technical data are retained for 30 days.

Anonymized Data: Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and platform improvement.

Legal Holds: Data may be retained longer if required by applicable law, regulatory obligations, or legal proceedings.

8. Your Rights & Choices

Under the DPDP Act (India):

• Right to Access: Request a summary of your personal data held by us

• Right to Correction: Request correction of inaccurate or incomplete data. Profile details cannot be edited on the Platform after they are saved, apart from your follower count, so to correct a detail entered in error please email us and we will correct it after reasonable verification

• Right to Erasure: Request deletion of your personal data (subject to legal exceptions)

• Right to Grievance Redressal: Lodge complaints regarding data processing

• Right to Nominate: Nominate a person to exercise your rights after your death

Under the GDPR (EEA Users):

• Right to Access: Obtain confirmation of whether we process your data and request a copy

• Right to Rectification: Correct inaccurate data

• Right to Erasure (Right to be Forgotten): Request deletion of your data

• Right to Restrict Processing: Limit how we use your data

• Right to Data Portability: Receive your data in a structured, commonly used format

• Right to Object: Object to processing based on legitimate interests or direct marketing

• Right to Withdraw Consent: Withdraw consent at any time without affecting lawfulness of prior processing

Under the CCPA (California Users):

• Right to Know: Request disclosure of data categories collected, sources, purposes, and third parties

• Right to Delete: Request deletion of your personal information

• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell data)

• Right to Non-Discrimination: We will not discriminate against you for exercising these rights

To Exercise Your Rights: Contact us at founder@valueskins.com. We will respond to your request within the timeframes required by applicable law (generally 30 days). We may need to verify your identity before processing your request.

9. Data Security

We take reasonable steps to protect your data:

• Encryption in Transit: Data sent between your browser and the Platform is encrypted using TLS

• No Passwords: We do not hold a password for your account. Sign-in is through Instagram, and your session is kept in a cookie that scripts on the page cannot read

• Payment Details: Card and bank details used to pay our fee are handled by Razorpay and never reach our servers

• Limited Access: Access to the database is restricted to the people who need it to run the Platform

• Records of Change: A change to a Creator's UPI ID is recorded and notified to the account's email address

Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Cookie Policy and Analytics

We use cookies and similar technologies to enhance your experience. Here is what we use:

Essential Cookies: Required for the Platform to function (session management, CSRF protection, authentication). No consent required. These cannot be disabled.

Analytics Cookies: We do not currently use analytics or advertising cookies. If we introduce analytics in future, they will be set only with your consent and this Policy will be updated first.

Preference Cookies: Remember your settings and preferences.

Managing Cookies: You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. You can also use our cookie consent banner to manage your preferences.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our hosting and service providers operate globally, including in India, the United States, and the European Union.

GDPR Adequacy: For EEA users, we ensure appropriate safeguards for data transfers through Standard Contractual Clauses (SCCs) or adequacy decisions as required under applicable law.

DPDP Act: For Indian users, data is primarily stored within India. Where data is transferred outside India, we ensure equivalent levels of protection as required under the DPDP Act.

12. Children's Privacy

The Platform is for adults. You must be at least 18 years old to use it, and we do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has given us personal data, please contact us and we will delete it.

13. Deal Records

For each Deal we keep a record of its terms, the dates of each step, the content links shared, the feedback given, and the payments recorded and confirmed. Both parties to the Deal can see and download this record. It is kept so that either party can show what was agreed and what happened.

Retention: Deal records are retained as described in Section 7.

14. Data Deletion

To delete your account and data, sign in, open My Data, and choose Delete Account, or email founder@valueskins.com from the address on your account. You can also remove ValueSkins from your Instagram account at any time under Instagram Settings → Website permissions → Apps and websites. When you request account deletion, the following happens:

• A 30-day grace period begins during which you may cancel the deletion

• After 30 days, your personal data is permanently deleted by our automated deletion system

• Deal messages are deleted as part of this process (retained for 90 days for dispute resolution)

• Anonymized audit log entries may be retained for legal compliance

• Backup copies are purged within 90 days

• Instagram profile data is deleted as part of account deletion

15. Grievance Officer (India)

In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data processing and privacy:

Grievance Officer: Saketh Velamuri
Company: Valueskins Pvt. Ltd.
Email: founder@valueskins.com

We will acknowledge your complaint within 24 hours and resolve it within 15 days of receiving it.

17A. Payment Processing

Our fee: Our fee is paid through our payment processor (currently Razorpay). We do not store, process, or have access to the card or bank details used. Payments to Creators: A Brand pays a Creator directly by UPI, outside the Platform. We do not process these payments. We store the Creator's UPI ID and the name on that account, show them to a Brand that has confirmed that Creator, and store the payment reference the Brand records. We do not verify UPI IDs.

16. Accessibility and Data Processing for Persons with Disabilities

Valueskins is committed to ensuring that our Platform is accessible to all users, including persons with disabilities. We process personal data for persons with disabilities in accordance with applicable accessibility laws and standards:

Accessibility Commitments:

• We strive to comply with Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards

• The Platform supports assistive technologies including screen readers, keyboard navigation, and text scaling

• All images include descriptive alt text for users relying on screen readers

• Color contrast ratios meet accessibility standards to support users with visual impairments

• We provide captions or transcripts where relevant for multimedia content

• Keyboard navigation is fully supported as an alternative to mouse-based interaction

Data Processing for Accessibility: We may process additional data related to accessibility features you use (e.g., screen reader detection, accessibility preferences, assistive technology information) solely to enhance your experience and ensure the Platform functions correctly with your accessibility tools. This data is never shared with third parties for marketing or profiling purposes.

Accessibility Feedback: If you encounter accessibility barriers or have suggestions for improvement, please contact us at founder@valueskins.com. We welcome your feedback and will respond promptly.

17. Data Protection Officer (GDPR)

For users in the European Economic Area, you may contact our Data Protection Officer at founder@valueskins.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

17B. What We Do Not Collect or Do

So that you know the limits of what we hold and check:

• We do not read your follower count, posts, messages, or insights from Instagram. Follower counts are entered by Users and are not verified by us

• We do not verify identity, age, gender, city, or UPI IDs. We confirm only that a User controls the Instagram account they sign in with

• We do not store the content a Creator delivers, only the link to it, and we do not track how content performs

• We do not collect a phone number, a password, a date of birth, a precise location, or a bank account number

• We do not sell personal data, and we do not use it for advertising

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Platform. The "Last updated" date at the top of this Policy indicates when it was last revised. Your continued use of the Platform after the changes take effect constitutes your acceptance of the updated Policy.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Registered Entity: Valueskins Pvt. Ltd.

Email: founder@valueskins.com

Support: founder@valueskins.com

Cookie Settings

We use cookies to improve your experience. Essential cookies are required for authentication. Analytics & marketing cookies are optional. Learn more.