Privacy Policy

# 1. What We Collect

AdKar collects the following categories of data to operate the platform:

• • Account data: name, email address, UPI ID (publishers), company name and GST IN (advertisers).
• • Integration data: publisher IDs, API keys, selected ad surfaces, SDK configuration.
• • Performance data: impression counts, click counts, revenue figures — aggregated per surface and campaign.
• • Payment data: UPI transaction references, Razorpay payment IDs. We do not store raw card or banking credentials.
• • Technical data: IP addresses (used only for fraud detection), user-agent strings, and request timestamps.

# 2. How We Use Your Data

• • To deliver and attribute ads to the correct publisher surfaces.
• • To calculate and process publisher earnings and advertiser spend.
• • To issue UPI payouts and generate GST-compliant invoices.
• • To detect invalid traffic (IVT) and prevent ad fraud.
• • To send transactional notifications (payout processed, campaign live, low balance).

We do not sell your personal data to third parties. Advertisers receive only aggregated, anonymised performance metrics — never raw user data.

# 3. Data Sharing

We share data only with:

• • Razorpay — for processing UPI payments and top-ups.
• • Cloud infrastructure providers (AWS/GCP) hosting the AdKar backend.
• • Regulators — if required by Indian law (DPDP Act 2023, IT Act 2000).

# 4. Data Retention

Account data is retained for as long as your account is active plus 3 years (for GST compliance). You may request deletion of personal data at any time by emailing privacy@adkar.in. Financial records required by GST/TDS regulations will be retained for the mandatory 7-year period.

# 5. Security

API keys are stored hashed (bcrypt). Payment references are encrypted at rest. All data is transmitted over TLS 1.3. We run quarterly security audits and penetration tests.

# 6. Your Rights (DPDP Act 2023)

As a data principal under the Digital Personal Data Protection Act 2023, you have the right to:

• • Access a summary of personal data we hold about you.
• • Correct inaccurate personal data.
• • Erase personal data (subject to legal retention requirements).
• • Nominate a person to exercise rights on your behalf.
• • Withdraw consent, which will result in account closure.

To exercise any right, email privacy@adkar.in with subject line DPDP REQUEST. We will respond within 72 hours.

# 7. Cookies & Tracking

The AdKar dashboard uses only session cookies (for authentication) and localStorage for UI preferences (theme, sidebar state). We do not use third-party tracking cookies. The AdKar SDK deployed in publisher tools sends impression/click pings to our servers — no third-party analytics SDKs are bundled.

# 8. Contact