Privacy Policy

1. Who we are

SocialHalwa is a product of CodeEdge Tech and Ventures Pvt Ltd, a company incorporated in India. When this policy says "we", "us", or "our", it refers to CodeEdge Tech and Ventures Pvt Ltd.

Contact: hello@socialhalwa.com

2. Data we collect

• Account information: your name and email address, provided via Google Sign-In.
• Social account tokens: OAuth access tokens for Instagram and LinkedIn accounts you connect. Tokens are encrypted at rest using AES-256-GCM before storage.
• Post content: text, images, and scheduling metadata for content you create or schedule inside SocialHalwa.
• Usage analytics: anonymised events (pages visited, features used) collected via PostHog to improve the product.
• Billing information: payment method details are handled entirely by Razorpay. We do not store card numbers or UPI handles.

3. How we use your data

• To authenticate you and maintain your session.
• To publish posts to Instagram and LinkedIn on your behalf, using the tokens you authorised.
• To process subscription payments via Razorpay.
• To send transactional emails (receipts, alerts) via Resend.
• To analyse product usage and improve features.

We do not sell your data to third parties. We do not use your content to train AI models.

4. Data storage and residency

All user data is stored in Supabase's Mumbai region (ap-south-1). Your content, account credentials, and scheduling data never leave Indian data centres. Media files uploaded for posts are stored in Supabase Storage in the same region.

5. Third-party services

We share data with the following services only to the extent necessary:

• Meta (Instagram): OAuth tokens and post payloads to publish content.
• LinkedIn: OAuth tokens and post payloads to publish content.
• Razorpay: billing and subscription management.
• PostHog: anonymised product analytics.
• Resend: transactional email delivery.

6. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days and then deleted. You may request earlier deletion at any time (see section 7).

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Withdraw consent for processing at any time.

To exercise any of these rights, email hello@socialhalwa.com with the subject "Data request". We will respond within 30 days.

8. Cookies

SocialHalwa uses cookies solely for authentication (session management). We do not use advertising cookies or cross-site tracking cookies.

9. Children

SocialHalwa is not directed at children under 18. We do not knowingly collect personal data from anyone under 18.

10. Governing law

This policy is governed by the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (India). Any disputes shall be subject to the exclusive jurisdiction of courts in Mumbai, India.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use of SocialHalwa after the effective date of a change constitutes acceptance of the revised policy.