Privacy Policy

Effective date: 30 July 2026

This policy explains what personal data FanFlame ("we") collects when you use fanflame.web.app and the related booking and call services, how we use it, who we share it with, and the choices you have.

1. Data we collect

• Account data — name, email address and profile photo, collected when you sign in with Google or with email/password via Firebase Authentication.
• Creator profile data — display name, handle, bio, categories, pricing, availability and any photos or posts you publish. This information is public on your booking page.
• Verification (KYC) data — for Creators only: identity documents, contact details, address, and bank account / UPI details needed for verification and payouts. KYC documents are stored privately and are never shown publicly.
• Booking and payment metadata — bookings, schedules, amounts, currencies, payment status, refund status and payment-provider references. Card and banking details entered at checkout stay with Razorpay; we never receive or store full card numbers.
• Call metadata — who joined a call, when, and for how long. Call content is not recorded by default (see Section 4).
• Messages and support requests — booking messages between fan and Creator, contact-form submissions, and reports you file.
• Technical data — device/browser information, approximate location (e.g. for currency selection), and usage analytics events.

2. How we use data

We use this data to operate bookings and calls, process payments, refunds and payouts, verify Creators, prevent fraud and abuse, provide support and resolve disputes, send transactional notifications (booking confirmations, reminders, receipts), and improve the Service. We do not sell personal data.

3. Third parties we share data with

• Razorpay — payment processing (checkout, refunds). Receives payment details and booking amounts.
• Cloudflare — RealtimeKit call infrastructure. Receives display names and call session data to run the call.
• Google / Firebase — authentication, hosting and analytics (Google Firebase Authentication, Firebase Hosting, Firebase Analytics where enabled).
• Microsoft Azure — our backend API and databases run on Azure; uploaded media and documents are stored in Azure Blob Storage.

Each provider processes data under its own terms and safeguards. We may also disclose data where required by law, to enforce our Terms, or to protect users from fraud or harm.

4. Calls and recordings

Calls run on Cloudflare's Realtime network. Calls are not recorded by default. If recording is enabled by the platform for safety or dispute-resolution purposes, this will be indicated, and recordings are kept only as long as needed for those purposes and then deleted.

5. Cookies and local storage

We use browser storage (localStorage/sessionStorage) for essential purposes: keeping you signed in, remembering preferences (such as recently viewed creators and dismissed banners), and basic analytics. We do not use third-party advertising cookies.

6. Retention

Account and profile data is kept while your account is active. Booking, payment and payout records are retained for as long as required for accounting, tax and dispute-handling obligations (typically 7 years in India). KYC documents are retained while you remain a verified Creator and for the period required by law after that. Messages and support threads are kept as long as needed to provide support and resolve disputes.

7. Your rights

You can access and update your profile from the app. You may request a copy of your personal data, correction of inaccurate data, or deletion of your account and data via the contact form. We will honour deletion requests except where retention is legally required (e.g. financial records). You can also stop email notifications other than essential transactional messages.

8. Security

Data is encrypted in transit (HTTPS everywhere). Access to production data is restricted, KYC documents are stored in private storage, and payment credentials are handled entirely by Razorpay. No system is perfectly secure — if we become aware of a breach affecting your data, we will notify you as required by law.

9. Children

The Service is for adults (18+). We do not knowingly collect data from minors; if you believe a minor is using the Service, contact us and we will remove the account.

10. Changes and contact

We may update this policy as the Service evolves; material changes will be announced with a new effective date. Questions or requests: use the contact form or email support@fanflame.app.