Legal & Trust Center

Privacy Policy

Last Updated: September 2026 • Effective Date: January 1, 2026

This Privacy Notice for Adowise (“we”, “us”, or “our”) explains how and why we collect, store, process, and protect your personal information when you use our platform, websites, digital services, creator storefronts, and third-party integrations.

Summary of Key Commitments

Zero card storage: Payments are processed via PCI-DSS certified gateways (Razorpay, Stripe, PayPal).
Strict Meta Compliance: Instagram messages & comments are processed solely for user-configured auto-replies.
No Selling of Data: We do not sell or rent your personal information to third parties or brokers.
Full User Control: You can export or permanently delete your account data at any time via your settings.

1. What Information Do We Collect?

We collect information that you voluntarily provide to us when creating an account, expressing interest in our products, offering or booking services, purchasing digital goods, or communicating with us.

Personal Information Provided by You:

  • Identity & Profile Data: Full name, username, email address, profile photo/avatar, phone number, bio, profession, and social profile links.
  • Service & Offer Data: Service listings, pricing, session durations, custom booking questions, digital product files, course details, and webinar schedules.
  • Booking & Communication Information: Attendee names, attendee email addresses, guest notes, booking messages, and submitted inquiries or review files.
  • Payout & Commercial Information: Bank account numbers, IFSC codes, UPI IDs, and tax IDs necessary to transfer creator earnings and generate compliant receipts.

Automatically Collected Data: When you access Adowise, our servers automatically log technical information including your IP address, browser type and version, operating system, referral URLs, device identifiers, and timestamped user actions (such as page views and service interactions).

2. How We Process Your Information

We process your personal information only when we have a valid legal justification, including to:

  • Facilitate Account & Profile Management: Enabling creator profiles, portfolio display, and user authentication.
  • Deliver & Fulfill Bookings: Scheduling 1:1 sessions, generating video meeting invitations, confirming bookings via email, and providing digital resource downloads.
  • Process Financial Transactions: Calculating platform fees, creator commissions, processing refunds, and executing payouts to bank accounts or UPI IDs.
  • Automate Social Interactions: Delivering auto-replies and download links triggered by authorized Instagram comments or direct messages.
  • Security & Fraud Prevention: Preventing malicious bot traffic, abuse, unauthorized access, and maintaining system integrity.
  • Legal Compliance: Complying with financial accounting, tax withholding, and applicable statutory reporting mandates.

3. Legal Bases for Processing (GDPR & UK GDPR)

If you reside in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is grounded in the following legal bases under the General Data Protection Regulation:

Performance of a Contract

Processing required to fulfill our Terms of Service, provide access to purchased services, and execute payouts.

Legitimate Interests

Securing our platform, optimizing user experience, tracking analytics, and preventing platform fraud.

Consent

When you explicitly authorize third-party connections (like Instagram OAuth) or opt into marketing communications.

Legal Obligations

Retaining financial records, tax invoices, and responding to lawful court orders or government requests.

4. When and With Whom We Share Data

We do not sell, rent, or trade your personal data. We only disclose information in specific circumstances:

  • Between Creators and Clients: When a user books a service or buys a digital product, relevant contact details (name, email, submitted notes) are shared with the creator to facilitate fulfillment.
  • Vetted Infrastructure Providers: Cloud hosting (e.g. AWS, Vercel), transactional email providers (e.g. Resend), file storage services, and database hosts who are contractually bound by strict data processing agreements.
  • Business Transfers: In connection with any merger, sale of corporate assets, financing, or corporate restructuring.
  • Legal Requirements: If compelled by subpoena, legal proceeding, or applicable governmental regulation.

5. Cookies and Tracking Technologies

We utilize cookies, local storage tokens, and secure session identifiers to maintain your authenticated login state, store dashboard preferences, and capture aggregated platform traffic analytics.

You can instruct your web browser to reject cookies or notify you when cookies are placed. However, disabling essential session cookies may prevent you from logging into your Adowise dashboard or completing checkout.

6. Meta & Instagram API Data Handling

When you connect your Instagram Professional or Creator account to Adowise to enable Auto DM or Comment-to-Link Automations, we access specific data strictly via official Meta Graph APIs under the following protections:

Data Accessed: Instagram Account ID, Username, Profile Picture, Post Comments, Story Replies, and Direct Messages sent to your connected account.
Purpose of Use:To detect user-configured trigger keywords (e.g. when an audience member comments “BOOK” or “COURSE”) and automatically dispatch the designated booking link or digital resource.
24-Hour Messaging Policy:All automated responses are sent strictly within Meta's standard 24-hour customer service window in response to user-initiated interactions.
Data Retention & Deletion: Instagram interaction data is cached solely for automation execution. If you disconnect your Instagram account in your dashboard settings, all associated tokens and Instagram metadata are permanently deleted from our servers within 30 days.
Zero Profiling: We do not sell Instagram data, build advertising profiles, or share personal messages with third-party advertisers.

7. Payment & Financial Data Processing

Adowise partners with Tier-1 certified payment processors including Razorpay, Stripe, and PayPal to handle end-to-end checkout transactions and subscriptions.

Security: All sensitive payment card credentials (card numbers, CVV, expiry) are transmitted directly to the PCI-DSS compliant payment gateways via secure encryption. Adowise never stores or has access to your raw credit or debit card numbers.

Payout Verification: Bank details and account identifiers provided by creators for earnings withdrawal are encrypted at rest and transmitted securely to our payout partners solely for remittance.

8. Artificial Intelligence & Automated Features

Where Adowise provides AI-assisted features (such as automated bio suggestions, smart summaries, or AI search), your inputs may be processed by industry-leading AI infrastructure providers (such as OpenAI or Google AI APIs).

Data transmitted for AI processing is governed strictly under commercial data privacy agreements which prevent the third-party AI provider from using your private customer content to train public foundational models.

9. Data Retention & Deletion Policy

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice, maintain your active creator account, or comply with statutory financial auditing requirements.

When an account is deactivated or a deletion request is confirmed, all profile data, digital files, custom links, and automated rules are permanently wiped or anonymized from our active databases within thirty (30) days, except where retention is mandated by law.

10. Security Safeguards

We employ organizational, administrative, and modern technical security safeguards designed to protect personal data against loss, theft, and unauthorized access:

  • End-to-end Transport Layer Security (TLS/HTTPS) across all public and internal API endpoints.
  • Bcrypt and Argon2 hashing for stored authentication passwords.
  • Role-based access controls (RBAC) restricting server and database permissions to authorized personnel only.
  • Continuous automated security audits and dependency vulnerability monitoring.

11. Children's Privacy

Our services are directed exclusively to individuals who are at least 18 years of age or the age of legal majority in their jurisdiction. We do not knowingly collect or solicit personal information from minors under the age of 18. If we become aware that a minor has registered an account without verified parental consent, we will promptly terminate the account and purge the data.

12. Your Global Privacy Rights (GDPR, CCPA, CPRA)

Depending on your location, applicable data privacy legislation grants you specific statutory rights:

Right to Access & Portability

Request an exported copy of all personal information we hold concerning your account.

Right to Rectification

Update or correct inaccurate or incomplete profile or financial details via your settings.

Right to Erasure (“To Be Forgotten”)

Request full deletion of your account, services, and associated booking records.

Non-Discrimination

We will never deny services, charge different prices, or degrade quality for exercising privacy rights.

13. Updates to This Policy

We may revise this Privacy Policy periodically to reflect enhancements to our platform, changes in statutory obligations, or new integration offerings. When material modifications occur, we will notify you by updating the “Last Updated” date at the top of this page or providing direct in-app notifications.

14. How to Contact Us & Exercise Your Rights

If you have inquiries regarding this Privacy Policy, wish to submit a Data Subject Access Request (DSAR), or want to request the removal of your account data or connected Instagram data, please reach out to our privacy team:

Response:We respond to all verified privacy requests within 30 days.