Legal

Privacy Policy

Last updated:

Template only — not legal advice. This draft must be reviewed and adapted by a qualified professional (including for DPDP Act compliance) before it goes live. Items in [brackets] are placeholders.

The short version

  • We collect little: your contact details, your public @handle, your questionnaire answers, and payment status from Razorpay.
  • Optional read-only Instagram stats come only through Meta's official login — never your password — and you can revoke them any time.
  • We use your data to build and review your strategy, support you, and bill you. We never sell it.
  • You can ask to see, correct or delete your data: support@boostio.in.

1. Who this covers

This policy explains how Boostio ([Legal Entity Name], [registered address], India) handles personal data when you visit our website, sign up, or use our strategy service. Short version of our approach: collect the minimum, use it only for your service, keep you in control.

2. What we collect

Things you give us

  • Contact and account details: name, email, phone/WhatsApp number, portal login.
  • Your public Instagram @handle / profile link.
  • Questionnaire answers: your niche, goals, posting capacity, preferences.
  • Messages you send us (support emails, WhatsApp, review calls notes).

Optional read-only Instagram statistics

  • Only if you choose to connect through Instagram's official login (by Meta), we receive read-only statistics such as follower counts, reach and content performance, as shared by Meta's API.
  • We never receive or store your Instagram password, and we cannot post, message or change anything. You can disconnect any time from your Instagram settings, and we delete the connection tokens promptly after revocation.

Billing

  • Payments are processed by Razorpay. We receive payment status, invoice details and a transaction reference — never your card number, CVV or UPI PIN.

Website basics

  • Standard technical logs (IP, browser type) and minimal cookies needed for the site to work. [If analytics are added later, name the tool and update this section.]

3. Why we use it

  • To analyse your public profile and build your strategy.
  • To run monthly reviews and show expected vs actual in your portal.
  • To support you (email/WhatsApp) and send service messages.
  • To bill you, issue GST invoices, and meet tax and legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Where it lives and how long we keep it

  • Data is stored with reputable hosting providers using industry-standard security (encryption in transit, access controls). [Name providers/regions before launch.]
  • Account and strategy data: kept while your subscription is active, and for up to [24 months] after it ends, in case you return — or deleted earlier on request.
  • Invoices and payment records: kept as long as Indian tax law requires (currently around 8 years).
  • Read-only Instagram tokens: deleted promptly when you disconnect.

5. Who else touches your data

  • Razorpay — payment processing (their privacy policy applies to payment credentials).
  • Meta Platforms — only if you connect read-only stats via Instagram's official login.
  • Hosting, email and communication providers that run our infrastructure, bound by their own confidentiality obligations.
  • Authorities, where the law genuinely requires it.

6. Your rights and choices

  • Ask what we hold about you, and get a copy.
  • Correct anything that's wrong.
  • Delete your data (subject to records we must keep by law).
  • Withdraw consent for read-only stats at any time — revoke in your Instagram settings or write to us.
  • Complain — first to us, and if unresolved, through the applicable authority under Indian law.

Write to support@boostio.in — we respond within [7 days]. Unresolved concerns can go through Raise a grievance to our Grievance Officer [Name, email — appoint before launch].

7. India's data-protection law

We design our practices around the principles of India's Digital Personal Data Protection Act, 2023 (DPDP Act): purpose limitation, data minimisation, consent for optional features, and grievance redressal. As rules and notifications under the Act evolve, this policy will be updated to match. [Have counsel confirm current obligations before launch.]

8. Cookies

We use only the cookies needed for the site and portal to function (for example, keeping you logged in). If we add analytics later, we'll list the tools here and offer any required choices.

9. Children

Boostio is intended for users aged 18 and above. We don't knowingly collect data from children; if you believe a minor has signed up without guardian consent, contact us and we'll remove the account.

10. Changes to this policy

We'll post updates here with a new "last updated" date, and notify you by email about material changes at least 15 days in advance.

11. Contact

support@boostio.in · Mon–Sat, 10:00–19:00 IST · Grievance Officer: [Name], grievance process here.

Related policies: Terms of Service · Refund & Cancellation Policy · Raise a grievance