DPDP Act 2023 Compliant

Privacy Policy

How we collect, process, and protect your personal data on ClipRaft in accordance with Indian regulations.

Last Updated: June 2, 2026

Welcome to ClipRaft (the "Platform"). We are committed to protecting the privacy and personal data of our creators ("Clippers") and businesses ("Brands"). This Privacy Policy describes how we process your personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Key Definitions Under DPDP Act 2023

Data Principal: You, the individual creator or brand representative whose personal data is collected and processed.
Data Fiduciary: ClipRaft, which determines the purpose and means of processing your personal data.
Consent Notice: The description provided to you before or during collection specifying the data we process and the purposes of processing.

2. Personal Data We Collect & Purpose of Processing

We only collect the minimum necessary data to provide our performance-based earning platform. Below is a detailed breakdown:

Category of Data	Specific Items Collected	Purpose of Processing
Identity & Account Details	Full name, email address, password, referral source	Authentication, account management, and security.
Earnings & Financials	UPI ID, bank account details (optional for wire transfers)	Processing performance-based RPM campaign payouts.
Social media analytics	Connected social handles, views, likes, shares, and content URLs	Verifying content views and validating earnings performance.
Verification & KYC	PAN, GST number (for brands), verification documents	Tax compliance, fraud mitigation, and user authentication.

3. Your Rights as a Data Principal

Under the DPDP Act 2023, you hold the following statutory rights regarding your personal data:

Right to Access & Portability

You can request a copy of all personal data we hold about you. You can export this data in JSON format directly from your Settings page.

Right to Correction & Updating

You have the right to correct, complete, or update any inaccurate or out-of-date personal data in your settings panel.

Right to Consent Withdrawal

You can withdraw your consent to data processing at any time. This will trigger the logging out of your session and suspension of processing.

Right to Erasure (Right to be Forgotten)

You can request complete deletion of your account and personal data from our systems via the "Delete Account" button in settings.

4. Data Processing of Minors (Children)

ClipRaft does not permit the registration of individuals under the age of 18 years without lawful consent of their parent or legal guardian. We do not engage in targeted advertising, profiling, or tracking the behavior of children.

5. Data Retention & Deletion

Under Section 8(1)(d) of the DPDP Act, 2023, we retain your personal data only for as long as is necessary for the stated purpose of processing:

Active Accounts: Profile and usage data are retained while your account remains active.
Inactive Accounts: After 24 months of inactivity, we will notify you and may initiate secure deletion, unless retention is required by law (e.g., tax or audit obligations).
Financial Records: Transaction and tax-related data are retained for 7 years as mandated by Indian tax laws (Income Tax Act, 1961 and GST Act).
Deleted Accounts: Upon consent withdrawal or account deletion request, we erase your personal data within 48 hours, except where statutory retention applies.

6. Cross-Border Data Transfers

ClipRaft primarily stores and processes personal data within India. Under Section 16 of the DPDP Act, 2023, cross-border transfers of personal data are restricted. We only transfer data outside India when:

The transfer is necessary for payment processing or fraud prevention services that operate globally.
The recipient country is notified by the Central Government of India as having adequate data protection standards.
Appropriate safeguards (such as standard contractual clauses) are in place.

We do not sell or lease your personal data to any third party for commercial purposes.

7. Data Breach Notification

In compliance with Section 8(6) of the DPDP Act, 2023, in the event of a personal data breach, ClipRaft will:

Notify the Data Protection Board of India (DPBI) within 72 hours of becoming aware of the breach, where feasible.
Notify affected Data Principals in clear and plain language without undue delay.
Describe the nature of the breach, likely consequences, and measures taken or proposed to address it.

8. Grievance Redressal Officer & DPO Details

In compliance with Section 10 of the DPDP Act 2023, if you have any questions, feedback, or complaints regarding our data processing practices, or wish to exercise your rights, please reach out to our designated Data Protection Officer (DPO) / Grievance Officer:

Designated OfficerMr. Nikhil Shilla

Email Addressdpo@clipraft.in

Response SLAWe acknowledge requests within 48 hours and resolve complaints within 7 business days.

Regulatory EscalationIf you are unsatisfied with our resolution, you have the right to register a complaint with the Data Protection Board of India (DPBI).