Privacy Policy

1. Introduction

This Privacy Policy describes how PromoFast ("PromoFast," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information when you access or use the PromoFast platform, including our website, creator dashboard, campaign tools, payment features, and any related services (collectively, the "Platform"). PromoFast operates a creator marketplace that connects Telegram channel owners and social promoters with brands seeking verified promotional reach. Because our business model depends on accurate account identity, campaign performance measurement, and secure payout processing, we handle personal data with particular care and in accordance with applicable privacy and data protection laws.

By registering for an account, participating as a creator, joining campaigns, submitting promotional content, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you must discontinue use of the Platform and may request account deletion subject to our retention obligations. This Policy applies to all users, including prospective creators, active participants, brand partners where applicable, and visitors who browse public areas of the Platform without creating an account.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or internal data practices. When we make material changes, we will post the revised Policy on the Platform and update the effective date shown at the top of this document. Your continued use of the Platform after such changes constitutes acceptance of the updated Policy, except where applicable law requires a different form of consent.

2. Scope and Definitions

For purposes of this Privacy Policy, "Personal Information" means any information that identifies, relates to, describes, or could reasonably be linked with a particular individual or household. This includes, but is not limited to, name, email address, telephone number, account credentials, profile image, bank or payout details, device identifiers, IP addresses, campaign participation records, earnings data, and communications you send to us. "Processing" means any operation performed on Personal Information, including collection, storage, use, disclosure, retention, and deletion.

The Platform is intended primarily for creators and promoters operating Telegram channels and related social media properties, with a focus on users in South Asia and adjacent markets. Certain features, such as payment processing and identity verification, may involve additional data collection beyond what is required for basic account access. Where we process data on behalf of brand partners or third-party service providers, we do so in accordance with contractual obligations and only to the extent necessary to deliver Platform functionality.

2.1 Controller Role

PromoFast acts as the data controller for Personal Information collected through the Platform unless otherwise stated in a separate agreement. When you link external services or authorize data sharing with partners, those third parties may act as independent controllers of information they receive. You should review the privacy practices of any third-party service before enabling integrations or sharing account details outside the Platform.

3. Information We Collect

We collect Personal Information through several channels, including information you provide directly, information generated through your use of the Platform, and information obtained from third-party sources where permitted by law. The categories of data we collect depend on how you interact with PromoFast, whether you are a registered creator, a campaign participant, or a visitor reviewing public marketing content.

3.1 Account Registration Data

When you create an account, we collect your full name, email address, telephone number, password (stored in hashed form), and any optional profile details you choose to provide. Registration data is necessary to establish your identity, secure your account, communicate important service updates, and comply with fraud prevention requirements. We may also record the date and time of registration, referral source, and device information associated with the signup event.

3.2 Creator and Profile Information

Creators may upload a profile image, provide display names, and maintain channel-related metadata used to evaluate campaign suitability. We may collect information about your Telegram channel identifiers, audience size estimates, content categories, and historical promotional activity where you choose to disclose or authorize such data. This information supports campaign matching, eligibility review, and platform analytics.

3.3 Campaign Participation Data

When you join a campaign, we collect records of enrollment, assigned creative assets, submission timestamps, post URLs, view metrics, engagement signals, and payout calculations derived from verified performance data. Campaign participation data may include screenshots, links, captions, hashtags, and any compliance attestations you submit confirming that content was published according to campaign rules.

3.4 Social Media and Submission Data

PromoFast processes information related to social media submissions made in connection with brand campaigns, including Telegram post links, publication dates, channel identifiers, and third-party analytics associated with promotional content. We may use automated and manual methods to verify that submissions meet campaign requirements and to detect irregular view patterns or policy violations. You should not submit private communications or sensitive personal data of third parties as part of campaign content unless expressly authorized.

3.5 Payment and Financial Information

To process creator payouts, we may collect bank account holder name, account number, IFSC or routing details, tax identifiers where required, transaction history, withdrawal requests, and records of payment disputes. Payment-related information is used solely for eligibility verification, settlement of earned balances, regulatory compliance, and fraud prevention. We do not store full payment card numbers on Platform servers unless a specific payment feature explicitly requires it and appropriate security controls are in place.

3.6 Technical and Usage Data

We automatically collect technical information when you access the Platform, including IP address, browser type, operating system, device model, session duration, pages viewed, referral URLs, crash logs, and interaction events within the dashboard. This data supports security monitoring, product improvement, performance optimization, and abuse detection. We may associate technical data with your account where you are logged in.

4. How We Use Your Information

PromoFast uses Personal Information for legitimate business purposes connected to operating the creator marketplace, facilitating campaign participation, measuring promotional performance, and administering payments. We limit processing to what is reasonably necessary for the purposes described in this Policy and consistent with applicable law.

4.1 Platform Operations

We use account and profile data to authenticate users, maintain session security, personalize dashboard experiences, and provide customer support. Creator information helps us display relevant campaigns, track participation status, and present earnings summaries. Without this data, core Platform features including campaign discovery, enrollment, and payout tracking would not function.

4.2 Campaign Administration

Campaign participation records are used to confirm eligibility, distribute creative assets, validate submissions, calculate view-based earnings, and generate reports for internal operations and brand partners. We may use submission metadata to investigate discrepancies between reported and verified views and to enforce campaign-specific requirements such as posting windows, disclosure obligations, and content restrictions.

4.3 Analytics and Product Improvement

We analyze aggregated and individual usage patterns to understand how creators interact with campaigns, which features drive engagement, and where users encounter friction in the withdrawal or verification process. Analytics may inform product design, fraud model refinement, and capacity planning. Where feasible, we use de-identified or aggregated datasets for statistical analysis that does not identify individual users.

4.4 Communications

We use contact information to send service-related messages, including account verification, security alerts, campaign notifications, payout confirmations, and policy updates. Marketing communications, if any, will be sent in accordance with applicable consent requirements, and you may opt out of non-essential promotional emails while continuing to receive transactional notices necessary for Platform use.

4.5 Legal and Safety Purposes

We may process Personal Information to comply with legal obligations, respond to lawful requests from authorities, enforce our Terms and Conditions, protect the rights and safety of users and third parties, and defend against legal claims. This includes preserving records relevant to payment disputes, intellectual property complaints, and investigations of platform abuse.

5. User-Generated Content

PromoFast allows creators to upload profile images, submit campaign content links, and provide descriptive information about their channels and promotional activity. User-generated content may be visible to PromoFast personnel, automated verification systems, and in some cases brand partners for campaign administration purposes. You retain ownership of content you create, subject to licenses granted in our Terms and Conditions.

We do not routinely monitor all user-generated content but reserve the right to review submissions flagged by automated systems, reported by users, or identified during campaign audits. Content that violates law, infringes intellectual property, contains malware, or facilitates fraud may be removed and associated accounts may be restricted. Metadata associated with removed content may be retained for compliance and dispute resolution.

Profile images and display names are stored on Platform servers and may be displayed in the creator dashboard, internal admin tools, and any future features that surface creator identity to brand partners. You should not upload images containing sensitive personal information beyond what is appropriate for a professional creator profile.

6. Account Management

Your account serves as the central record for campaign participation, earnings, payout preferences, and security settings. We maintain account status indicators, login history, password change events, and profile update logs to help you manage your presence on the Platform and to detect unauthorized access.

You may update certain account details through the profile section of the dashboard, including your display name, profile image, and contact information where editing is permitted. Some fields, such as historical earnings or verified campaign submissions, cannot be altered by users because they form part of the audit trail used for payment integrity.

Account deletion requests are handled in accordance with our retention schedule. We may retain certain records after deletion where required for tax, accounting, fraud prevention, or legal compliance. Deletion of an account does not automatically remove content already published on Telegram or other external platforms.

7. Security Practices

PromoFast implements administrative, technical, and organizational measures designed to protect Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures include access controls for personnel, encryption in transit for data transmitted over public networks, hashed storage of passwords, and monitoring for suspicious login activity.

No method of transmission or storage is completely secure. While we strive to safeguard your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorized access. We recommend using strong, unique passwords and enabling any additional security features we make available.

7.1 Personnel Access

Access to Personal Information is limited to employees, contractors, and service providers who require such access to perform their duties. Personnel with access are subject to confidentiality obligations and training regarding data handling practices. We review access permissions periodically and revoke access when no longer required.

7.2 Incident Response

In the event of a data breach that poses a risk to your rights and freedoms, we will take steps to contain the incident, assess its scope, and notify affected users and regulators as required by applicable law. Our incident response procedures include forensic review, remediation measures, and documentation of corrective actions.

8. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the category of data, the nature of your relationship with the Platform, and applicable regulatory requirements in jurisdictions where we operate.

Account registration data is retained for the duration of your account plus a reasonable period thereafter to handle disputes, enforce agreements, and comply with legal obligations. Campaign participation records and earnings data are typically retained for multiple years to support payment audits, tax reporting, and fraud investigations. Technical logs may be retained for shorter periods unless needed for security investigations.

When Personal Information is no longer required, we take steps to delete, anonymize, or aggregate it in accordance with our internal retention schedule. Backup systems may retain copies for a limited additional period before automatic purging. You may request information about retention practices applicable to specific data categories by contacting us through the channels described in this Policy.

9. Third-Party Services

PromoFast relies on third-party service providers to deliver certain Platform functions, including cloud hosting, email delivery, analytics, payment processing, identity verification, and fraud detection. These providers may process Personal Information on our behalf under contractual terms that require appropriate security measures and limit use to specified purposes.

When you interact with third-party platforms such as Telegram to publish campaign content, data shared on those platforms is governed by the privacy policies of the respective services. PromoFast does not control how third-party platforms collect, use, or disclose information outside of data you explicitly link or authorize for campaign verification.

We may also share limited Personal Information with brand partners for campaign administration, such as creator display names, channel identifiers, and verified performance metrics. Such sharing is conducted to fulfill campaign contracts and is subject to confidentiality expectations communicated to partners.

10. Cookies and Tracking Technologies

PromoFast uses cookies, local storage, session tokens, and similar technologies to maintain login sessions, remember preferences, measure Platform performance, and detect abusive traffic. Cookies are small text files stored on your device that allow the Platform to recognize your browser on subsequent visits.

10.1 Types of Cookies

Essential cookies are necessary for authentication, security, and basic navigation. Without these cookies, you may be unable to log in or access protected areas of the dashboard. Analytics cookies help us understand how users interact with pages and features, which informs product improvements. We minimize use of non-essential tracking technologies and review their necessity periodically.

10.2 Your Choices

Most browsers allow you to block or delete cookies through settings. Blocking essential cookies may impair Platform functionality. Where required by law, we will provide mechanisms to manage non-essential cookie preferences. Session tokens issued upon login expire according to our security policies and may be invalidated when you sign out or change your password.

11. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your Personal Information, including the right to access, correct, delete, restrict processing, object to certain processing activities, and receive a portable copy of data you provided. We will honor applicable rights requests in accordance with law and verify your identity before fulfilling requests.

To exercise privacy rights, contact us using the information provided at the end of this Policy. We may request additional verification to prevent unauthorized disclosure. We will respond within timeframes required by applicable law. If we deny a request, we will explain the basis for denial where permitted.

You may update certain information directly through your account settings. For requests that cannot be completed through self-service tools, our support team will assist you subject to legal and operational constraints, including records we must retain for compliance purposes.

12. Platform Abuse Prevention

PromoFast processes Personal Information as part of efforts to detect and prevent fraud, view manipulation, duplicate accounts, unauthorized automation, and other conduct that undermines campaign integrity. Abuse prevention activities may include analysis of login patterns, device fingerprints, submission timing, view velocity anomalies, and payout request behavior.

When abuse is suspected, we may restrict account features, delay payouts pending review, request additional verification, or suspend access in accordance with our Terms and Conditions. Information gathered during abuse investigations may be retained and shared with law enforcement where legally required and proportionate to the threat identified.

We do not use abuse prevention data for unrelated marketing purposes. Automated decision-making may inform risk scores or eligibility flags, but significant adverse actions are subject to human review where required by applicable law.

13. International Data Transfers

PromoFast may process and store Personal Information in countries other than your country of residence, including jurisdictions that may have different data protection standards. When we transfer data internationally, we implement appropriate safeguards such as contractual clauses, vendor security assessments, and access limitations designed to protect your information.

Creators participating from South Asia and neighboring regions should be aware that campaign verification, cloud infrastructure, and support operations may involve processing in multiple locations. We take steps to ensure that cross-border transfers are necessary, proportionate, and compliant with applicable legal frameworks.

14. Children and Minors

The Platform is not directed to individuals under the age of 18, and we do not knowingly collect Personal Information from children. If we learn that we have collected information from a minor without appropriate authorization, we will take steps to delete such information and terminate the associated account. Parents or guardians who believe a minor has provided data to PromoFast should contact us immediately.

15. Legal Compliance

PromoFast processes Personal Information in compliance with applicable data protection, consumer protection, and financial regulations in the jurisdictions where we operate or where our users are located. This includes obligations related to lawful basis for processing, transparency, data subject rights, breach notification, and records of processing activities maintained internally.

We cooperate with regulatory inquiries and lawful government requests while reviewing each request for validity, scope, and consistency with user rights. Where permitted, we will notify affected users of government requests for their data unless prohibited by law or court order.

Our compliance program includes periodic review of privacy practices, vendor assessments, and updates to policies and procedures reflecting changes in law or Platform functionality. We designate internal personnel responsible for privacy oversight and escalation of significant privacy matters.

16. Marketing and Public Communications

PromoFast may use aggregated, de-identified performance statistics in marketing materials to illustrate Platform activity, such as total creator counts or campaign volumes. We do not publicly disclose individual payout amounts or personally identifiable creator data in marketing without consent.

If you opt in to receive promotional communications, we will use your contact information to send newsletters, feature announcements, or campaign opportunities. You may withdraw consent for marketing emails at any time using the unsubscribe mechanism provided in each message or by updating communication preferences in your account.

17. Disclosures Required by Law

We may disclose Personal Information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements and policies; to protect the security or integrity of the Platform; or to protect the rights, property, or safety of PromoFast, our users, or the public. Such disclosures are made on a need-to-know basis and documented where appropriate.

In connection with a merger, acquisition, financing, reorganization, or sale of assets, Personal Information may be transferred as part of the transaction subject to confidentiality obligations. We will provide notice of any change in ownership or control affecting your Personal Information where required by law.

18. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact PromoFast through the support channels available on the Platform. Please include sufficient detail to allow us to understand and respond to your inquiry, including your account email and a description of the issue or request.

We are committed to resolving privacy-related complaints in a timely and fair manner. If you are dissatisfied with our response, you may have the right to lodge a complaint with a data protection authority in your jurisdiction, subject to applicable procedural requirements.