Privacy Policy

RedPicky is run by Eduvitech India Private Limited (“we”, “us”). For the personal data you share on RedPicky we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”): we decide why and how it is used.

This policy covers redpicky.com and everything you do on it, as a creator, a brand or a visitor. Questions go to privacy@redpicky.com.

What you give us

• Account: your name, email address, password (stored only as a one-way hash), for creators a date of birth, and for brands a confirmation that you are 18 or older and a phone number (optional for creators).
• Creator profile: bio, niche, city, the handles of your social media accounts, your rates, and a profile photo.
• Brand profile: company name, website, industry, company size, description and logo.
• Content you upload: portfolio pieces and work you submit for a campaign.
• Verification: the screenshots of your account insights you send us if you ask to be verified.
• Connected social accounts: if you connect YouTube, Instagram, LinkedIn, Threads, a Facebook Page or Pinterest, the account details described under Connected social accounts.
• Deals and messages: campaigns, proposals, offers, agreed terms, messages and files in collaboration threads.
• Reviews and reports you write, and messages you send through the contact form.

What is created as you use RedPicky

• Records of your activity on the platform (for example, which campaigns you applied to), and the notifications we send you.
• A record of each time you accepted these terms: the versions and the time.
• Your sign-in sessions (when each started and was last used), and your IP address, which we use to limit repeated sign-in and signup attempts.

We do not use analytics or advertising trackers, and we do not buy personal data from anyone.

Creators can connect a YouTube channel, an Instagram professional account, a LinkedIn account, a Threads account, a Facebook Page or a Pinterest account, so the numbers on their profile come from the platform itself. Connecting is your choice. You sign in on the platform's own page; we never see or store your password for it.

What we read

• YouTube (through your Google account): your channel's ID, name and handle, its subscriber count and its number of videos. We ask Google only for read-only access to your YouTube account.
• Instagram: your account's ID, username and account type, its follower count and its number of posts.
• LinkedIn: your member ID, your name and your follower count. We ask LinkedIn only for read-only access.
• Threads: your account's ID and username, its follower count, and the number of posts you have made (counted up to 50; above that we show 50+). We ask Threads only for read-only access.
• Facebook: the ID, name and username of the one Page you choose to share, its follower count, and the number of posts it has (counted up to 50; above that we show 50+). We do not read your personal Facebook profile.
• Facebook Page post performance: for the Page's 12 most recent posts, the number of reactions and comments. We read these numbers only, not the posts, photos, videos or the comments themselves.
• Pinterest: your account's ID and username, its follower count and its number of Pins. We ask Pinterest only for read-only access.
• Pinterest Pin performance: for your 12 most recent Pins, the number of reactions and comments, where Pinterest shares them. We read these numbers only, not the images, videos, descriptions or the comments themselves.
• Instagram post performance: for your 12 most recent posts, the number of likes and comments. We read these numbers only, not the photos, videos, captions or the comments themselves.

What we do with it

• We show the handle, the audience size and the number of posts on your RedPicky profile, mark the account as verified, and read the numbers again about once a day to keep them current.
• From the Instagram, Facebook Page and Pinterest post performance we work out averages: your engagement rate (average likes or reactions plus average comments, divided by your followers), average likes and average comments. You see all of these on your own profile. The engagement rate is also shown on your public profile so brands can evaluate you for a campaign. We keep only the averages, not the figures for each post.
• We do not post, comment, message, follow or change anything on your account, and we do not read your private messages, your videos' or posts' content, the text of comments, or your contacts.
• We do not sell this data, use it for advertising, or pass it to anyone else. Brands see only what is on your public RedPicky profile.

How it is kept, and how to stop

• The access the platform gives us is stored encrypted and is used only for the daily update.
• You can disconnect an account at any time from your profile. We then delete the stored access straight away. For a YouTube channel we also delete its handle, name, subscriber count and number of videos from your profile.
• You can also remove RedPicky's access yourself: for YouTube, in your Google Account's third-party access settings; for Instagram, in Instagram's Apps and websites settings; for LinkedIn, in LinkedIn's Permitted services settings; for Threads, in the Threads app under Settings, Account, Website permissions; for Facebook, in Facebook's Business integrations settings; for Pinterest, in Pinterest's Security and logins settings. When we learn of that, the access and the verified mark are removed, and for YouTube the channel's numbers are deleted too.
• Deleting your RedPicky account deletes every connection with it.

RedPicky's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

RedPicky uses YouTube API Services. When you connect your YouTube channel, you sign in with your Google account and allow RedPicky read-only access to it. We use that access only to read your own channel's numbers.

• We read your channel's ID, name and handle, its subscriber count and its number of videos, and show the handle and numbers on your RedPicky profile with a verified mark.
• We read them again about once a day while the channel is connected. We never post, comment, upload or change anything on your channel.
• We do not sell this data, use it for advertising, or pass it to anyone else.
• When you disconnect the channel or delete your RedPicky account, we delete the stored access and the channel's numbers from your profile straight away. If you remove RedPicky's access in Google instead, we notice at our next daily check and delete them then.

You can remove RedPicky's access at any time in your Google Account permissions. YouTube is a Google service, and YouTube's handling of data is covered by the Google Privacy Policy.

When you connect your LinkedIn account, you sign in on LinkedIn's own page and allow RedPicky read-only access to it. We use that access only to confirm the account is yours and to read its numbers.

• We read your LinkedIn member ID, your name and your follower count, and show the name and follower count on your RedPicky profile with a verified mark.
• We read them again about once a day while the account is connected. We never post, comment, message, connect with anyone or change anything on your LinkedIn account, and we do not read your connections, messages or posts.
• We do not sell this data, use it for advertising, or pass it to anyone else.
• When you disconnect the account or delete your RedPicky account, we delete the stored access and the account's details from your profile straight away. If you remove RedPicky's access in LinkedIn instead, we notice at our next daily check and delete them then.

You can remove RedPicky's access at any time in LinkedIn's Permitted services settings. LinkedIn's handling of data is covered by the LinkedIn Privacy Policy.

When you connect Threads, you sign in on Threads' own page and allow RedPicky read-only access to your account. We use that access only to confirm the account is yours and to read its numbers.

• We read your Threads account ID, username and follower count, and count your posts up to 50 (above that we show 50+). To count them we read only each post's ID, never its text or media. We show the username, follower count and number of posts on your RedPicky profile with a verified mark.
• We do this so brands looking for creators see an audience size that comes from Threads itself, not one typed in, and so your total audience on RedPicky is correct.
• We read them again about once a day while the account is connected. We never post, reply, message or change anything on your Threads account, and we do not read the content of your threads, their views, likes, replies or reposts, your messages, or the list of people who follow you.
• We do not sell this data, use it for advertising, or pass it to anyone else.
• When you disconnect the account or delete your RedPicky account, we delete the stored access and the account's details from your profile straight away. If you remove RedPicky in Threads, or ask Threads for your data to be deleted, Threads tells us and we delete them then.

You can remove RedPicky's access at any time in the Threads app, under Settings, Account, Website permissions. Threads' handling of data is covered by the Threads Supplemental Privacy Policy.

When you connect Facebook, you sign in on Facebook's own page and choose one Facebook Page to share with RedPicky, with read-only access. We use that access only to confirm the Page is yours and to read its numbers.

• We read the Page's ID, name, username and follower count, count its posts up to 50 (above that we show 50+) from each post's ID only, and read the reactions and comments counts of its 12 most recent posts. We show the Page name, follower count, number of posts and engagement averages on your RedPicky profile with a verified mark.
• We read them again about once a day while the Page is connected. We never post, comment, message or change anything on your Page, and we do not read your personal profile, friends, messages or the content of posts and comments.
• We do not sell this data, use it for advertising, or pass it to anyone else.
• When you disconnect the Page or delete your RedPicky account, we delete the stored access and the Page's details from your profile straight away. If you remove RedPicky in Facebook, or ask Facebook for your data to be deleted, Facebook tells us and we delete them then.

You can remove RedPicky's access at any time in Facebook's Business integrations settings. Facebook's handling of data is covered by the Meta Privacy Policy.

When you connect Pinterest, you sign in on Pinterest's own page and allow RedPicky read-only access to your account. We use that access only to confirm the account is yours and to read its numbers.

• We read your Pinterest account ID, username, follower count and number of Pins, and, where Pinterest shares them, the reactions and comments counts of your 12 most recent Pins. We show the username, follower count and engagement averages on your RedPicky profile with a verified mark.
• We read them again about once a day while the account is connected. We never create, save or change Pins or boards, follow anyone or message anyone, and we do not read your messages or the content of your Pins and comments.
• We do not sell this data, use it for advertising, or pass it to anyone else.
• When you disconnect the account or delete your RedPicky account, we delete the stored access and the account's details from your profile straight away. If you remove RedPicky's access in Pinterest instead, we notice at our next daily check and delete them then.

You can remove RedPicky's access at any time in Pinterest's Security and logins settings. Pinterest's handling of data is covered by the Pinterest Privacy Policy.

We use your personal data with your consent, which you give when you sign up, and for the other uses the DPDP Act allows, only to:

• Create and run your account, and show your profile to the people it is meant for.
• Match brands and creators, and let you negotiate, agree terms, deliver content and review each other.
• Send you emails and notifications about your account and your deals. You can turn off the ones that are not essential in Settings.
• Check you are 18 or older. We ask creators for their date of birth, and brands to confirm their age, only for this; it is never shown to anyone.
• Keep RedPicky safe: verify accounts, review reports, moderate content, and stop spam, fraud and abuse.
• Meet our legal obligations, including answering lawful requests from authorities and handling grievances.

• Anyone can see public creator and brand pages: name, profile link, photo or logo, bio, niche, city, social handles, follower figures (marked as self-reported or verified), the engagement rate of a connected Instagram account, rates, approved public portfolio pieces, reviews and open campaigns.
• The other side of a deal sees the proposal, the agreed terms, the messages and files in your collaboration thread, and the work you submit.
• Nobody else sees your email address, phone number, date of birth, private portfolio pieces, drafts or verification screenshots. Our administrators see them only when they need to, for example to review a verification or a report.

We never sell your personal data. We share it only with the companies that run RedPicky's systems for us (Data Processors), under contracts that let them use it only on our instructions:

We also share personal data when the law requires it, and, with notice to you, with a company that takes over RedPicky.

Your data is stored mainly in India. Some processing by our providers, such as delivering email, may happen outside India. We transfer personal data abroad only where the DPDP Act allows it.

We keep your personal data while your account is open. When you delete your account in Settings:

• Your profile, content, files, date of birth, verification requests and notifications are deleted, and your email address, phone number and name are removed.
• Messages you wrote in shared threads read “Message removed”.
• Finished deals and the reviews you wrote stay with the other person, shown as “Deleted user”, because they are part of that person's record too. Reports and our moderation and security records are kept for safety and to meet legal obligations.

Copies in our backups are removed as those backups expire. We may keep some data longer where the law requires it.

Under the DPDP Act you can:

• Get a summary and a copy of your personal data: Settings → Your data → Download my data.
• Correct, complete or update it: edit your profile, or write to us for anything you can't edit yourself.
• Have it erased: Settings → Your data → Delete account.
• Withdraw your consent at any time, as easily as you gave it. Because RedPicky can't work without the data you consented to, withdrawing consent means closing your account; it does not affect what was done before.
• Nominate someone to exercise these rights for you if you die or become unable to: write to privacy@redpicky.com.
• Raise a grievance with our Grievance Officer. If you are not satisfied with the answer, you can complain to the Data Protection Board of India.

RedPicky is only for people 18 and older. We ask creators for their date of birth and brands to confirm their age at signup, and don't let anyone younger create an account, because under the DPDP Act a person under 18 is a child whose data needs a parent's verifiable consent. If we learn that an account belongs to someone under 18, we delete it. Parents can reach us at privacy@redpicky.com.

Everything travels over HTTPS. Passwords are stored only as one-way hashes, private files open only through short-lived links, and access to personal data inside our team is limited to the people who need it. If a breach affects your personal data, we will tell you and the Data Protection Board as the law requires.

We use only the cookies RedPicky needs to keep you signed in and secure. There are no analytics or advertising cookies.

Your browser's local storage also keeps your light or dark theme, whether you were signed in (so the page loads faster), and when you last changed your photo (so the new one shows). None of this is sent to anyone else. If you block cookies, you won't be able to sign in.

When we change this policy in a way that matters, we update the date at the top and ask you to read and accept the new version the next time you sign in.

Eduvitech India Private Limited
Office No. 56, 3rd Floor, 185D, Phase 8B, Industrial Area, Sector 74, Sahibzada Ajit Singh Nagar (Mohali), Punjab 140307, India
Privacy questions: privacy@redpicky.com
Grievances: grievance@redpicky.com (see Grievance Officer)