Privacy Policy
Last updated: 29 August 2026
ScriptMyAds is operated by Shiv Shankar Kanaujiya, a sole proprietor trading as "ScriptMyAds" (the "Platform", "we", "us"), at Your Space Boys Hostel, Hosur Road, Bengaluru, Karnataka, India, website scriptmyads.com. For data-protection purposes we are the Data Fiduciary for the personal data described below. This policy is aligned to the Digital Personal Data Protection Act 2023 (DPDP).
1. Scope and eligibility
This policy explains what personal data we collect when you use the Platform as a Creator, a Brand, or a visitor, why, how long we keep it (see our Data Retention Policy), who we share it with, and your rights. You must be 18 or older to use the Platform (see section 11).
2. What we collect and why
We collect only what each purpose needs. Financial and payout details are treated as sensitive personal data.
| Data we collect | Applies to | Purpose |
|---|---|---|
| Name, email, profile photo, Google account id (via Google Sign-In) | Everyone | Create and secure your account, verify your role, sign you in |
| Bio, social handles, services and prices | Creators | List you so brands can find and hire you |
| Business name and campaign brief | Brands | Set up and run your campaigns |
| Payment and payout details | Everyone, when payments go live | Pay creators, charge brands, issue invoices, meet tax law |
| Submitted content and proof links | Creators, when the campaign workflow goes live | Approve content before posting and verify the live post |
| Technical and usage data (IP, timestamps, device and browser, security logs) | Everyone | Run, secure, and debug the service, and prevent fraud |
We do not receive or store your Google password. We use your data only for the purposes above.
Public visibility. As a Creator, your profile, bio, social handles, services, and prices are shown to brands and may be publicly visible on the Platform. Do not put anything in those fields you do not want shown.
No AI training or automated decisions. We do not use your personal data or your submitted content to train AI models, and creator shortlisting is done manually by our team, not by automated profiling.
3. Cookies
We use strictly necessary cookies to sign you in and keep your session. We do not use third-party advertising trackers.
We use Microsoft Clarity to understand how people use the site: it records anonymised session replays, heatmaps, and interaction events, and sets cookies for that purpose. Clarity masks what you type by default. We use these recordings only to find and fix usability problems. You can read how Microsoft handles this data in Microsoft's privacy statement, and you can block Clarity with common tracker-blocking browser settings without losing any site functionality.
4. Legal basis and consent
We process your data on the basis of your consent, and, for some processing, the "legitimate uses" recognised by the DPDP Act (for example, meeting a legal or tax obligation, or providing a service you specifically requested).
Consent is taken by a clear affirmative action, is specific to each purpose in section 2, and is recorded. You may withdraw consent at any time, as easily as you gave it, from your account settings or by contacting us (section 8). Withdrawal may mean we can no longer provide parts of the service. If we introduce a new purpose, we will ask for fresh consent.
5. Who we share it with
We do not sell your personal data. We share it only with service providers acting on our instructions under contract, and only as needed:
| Provider | Purpose | Data shared |
|---|---|---|
| Google (Firebase Authentication) | Sign-in | Account identity |
| Cloudflare | Hosting, application backend, database, content delivery | Application data |
| Microsoft (Clarity) | Usage analytics: session replays and heatmaps | Interaction data, device and browser details |
When we introduce payments and invoicing, we will add our payment and accounting providers here and update this policy. Some providers process data outside India; the DPDP Act permits this except to countries the government restricts, and we require providers to protect your data and to erase it when we do. We may also disclose data where required by law or to establish or defend legal claims.
6. Security and breaches
We use reasonable security practices to protect your data. No system is perfectly secure. If a personal-data breach occurs, we will notify affected users without delay, describing the nature of the breach, its likely consequences, our mitigation, the steps you can take, and a contact, and we will notify the Data Protection Board of India as required.
7. Your rights
Under the DPDP Act you may: access a summary of your data and how we process it; correct, complete, or update it; erase it where it is no longer needed (subject to legal and tax retention, see the Data Retention Policy); seek grievance redressal; and nominate someone to exercise your rights if you die or are incapacitated. You may also withdraw consent (section 4). To exercise a right, contact us at section 8; we will respond within 30 days.
8. Contact and grievances
- Contact and privacy queries: hello@scriptmyads.com
- Grievance Officer: Shiv Shankar Kanaujiya, hello@scriptmyads.com, who acknowledges within 48 hours and resolves within one month.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
9. Language
This notice is available in English or any language in the Eighth Schedule to the Constitution of India on request.
10. Retention
We keep personal data only as long as the purpose needs or the law requires, then erase it. See our Data Retention Policy for the schedule and the erasure process.
11. Children
The Platform is for users 18 and older. We do not knowingly process the data of anyone under 18; if we learn a user is under 18 we will close the account and erase the data.
12. Changes
We may update this policy; material changes are notified through the Platform, and new purposes require fresh consent. The date at the top shows the current version.