Privacy Policy
Last updated
Dashrize is operated by Axilrise Private Limited, a Private Limited Company registered in India. We are the data fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023.
1. What we collect
We collect the minimum data needed to operate Dashrize:
- Account info (email, username, role)
- Linked social account handles + OAuth tokens
- Submission URLs and verified view counts
- Payout details required by our payment partners
- Identity and tax details where the law requires us to verify you before paying out (PAN, bank account, government ID)
- Browser logs (IP, user agent) for fraud and security
2. How we use it
To match clippers with campaigns, verify view counts via platform APIs, calculate and disburse earnings, prevent fraud, and provide support. We do not sell personal data.
3. Sharing
We share data only with the parties we need to in order to run the service:
- Razorpay, our payment gateway, to collect campaign funding and send payouts. They handle your card and bank details directly under their own privacy policy; we never store full card numbers.
- Social platform APIs(Instagram Graph API, YouTube Data API, TikTok, X) to verify that a submitted clip exists and read its public engagement metrics. See Section 4 for how Meta Platform data in particular is handled.
- Infrastructure processorswho host and operate the service on our behalf under contract: Neviri (cloud server hosting), Amazon Web Services (file storage & transactional email), and Google LLC (sign-in with Google only). Each processes data only on documented instructions from us and is bound by equivalent confidentiality and security obligations.
- Legally required authorities, where we are compelled to.
Any vendor we use must contractually meet at least the same standards described here.
4. Meta Platform data
Clippers can verify ownership of an Instagram handle by placing a temporary code in that account’s bio. They can verify more than one handle this way. Bio verification does not ask the clipper to sign in to Instagram through Dashrize or grant Dashrize an Instagram access token.
A clipper with an Instagram Business or Creator account can separately choose Connect Instagram to enable automatic checks of their own Reels. The clipper signs in directly with Instagram and grants Dashrize access to that account. A Facebook account or linked Facebook Page is not required for this connection. The clipper can connect each eligible Instagram account they want to use.
- instagram_business_basic lets us display the connected username and identify media belonging to that account.
- instagram_business_manage_insights lets us read views for a Reel submitted from that account.
For a connected account, we receive its Instagram account ID, username, an access token, and details and view counts for submitted Reels. We store the token encrypted so we can check campaign metrics while the account remains connected. We do not sell Instagram data. Disconnecting removes the stored token and stops automatic checks through that connection.
Dashrize may also use its own Page access token to look up public information about Business and Creator accounts through Business Discovery. This is separate from a clipper connecting an account. It can provide public profile and media metrics for campaign verification; it does not grant access to a clipper’s private insights.
Facebook account ownership can currently be checked through bio-code verification. Facebook Page Login is on hold. When available, it will be a separate choice and will not be required to connect Instagram.
To request deletion of associated Instagram data, contact us using the process in Section 6. Financial records may need to be retained as explained in Section 5.
Our use of information received from Meta Platform APIs follows the Meta Platform Terms and Developer Policies.
5. How long we keep it
Account and submission data is kept while your account is open and for 90 days after you close it. Financial records — payments, payouts, commission, TDS — are kept for eight years because Indian tax and company law requires it, even after account closure. OAuth tokens are deleted as soon as you unlink a social account. Server logs are kept for 180 days.
6. Your rights and data deletion
You can request access, correction, export, or deletion of your data, withdraw consent, or nominate someone to exercise these rights on your behalf, at any time by emailing [email protected]. We respond within 30 days. Deletion requests are honoured except for the financial records we are legally required to retain, as described above.
7. Cookies
We use first-party cookies for authentication, fraud detection, and core preferences (light/dark mode). For product analytics we use Google Analytics and Microsoft Clarity, which set their own cookies to measure aggregate usage and record anonymised session interactions — clicks, scrolls, and page navigation — so we can find and fix problems. Both mask text and form-input values by default. We do not sell your data or run third-party advertising trackers.
8. Security
Traffic is encrypted in transit. Access to production data is restricted to the people who need it. If a breach affects your personal data we will notify you and the Data Protection Board as the law requires. No system is perfectly secure, so please use a strong, unique password.
9. Children
Dashrize is for users aged 18 and over. We do not knowingly collect data from children. If you believe a minor has created an account, tell us and we will remove it.
10. Grievance Officer
If we have not resolved a privacy complaint to your satisfaction, escalate it to Grievance Officer, Axilrise Private Limited at [email protected]. Full details are on our contact page.
11. Changes
When we make material changes, we’ll update the date at the top and notify active users via email at least 14 days before the change takes effect. The latest version always lives at https://dashrize.com/privacy.
12. Contact
Axilrise Private Limited · [email protected] · Registered address