Privacy Policy

Kitepod LLP (“we”) operates Yapbar and is the Data Fiduciary for personal data processed through it. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made under them.

This Policy explains what we collect, why, who sees it and your rights. We keep it plain on purpose.

• Account data: name, handle, email address, mobile number, password (stored only as a salted hash) and account type.
• Profile data you add: photo, headline, location, skills, experience, education, languages and interests.
• Content and activity: posts, comments, reactions, messages, applications, event responses, searches and settings.
• Verification data: the outcome of identity, email, mobile, company and GSTIN checks. We keep a reference token, a masked identifier and a one-way hash. We do not store your full government ID number.
• Payment data: order and invoice details. Card and bank details are handled by our payment processor, not stored by us.
• Device and usage data: IP address, browser, device type and security logs, which we need to keep the Service safe and working.

We process data only for specified purposes, on the basis of your consent or another lawful ground permitted by the DPDP Act:

• to create your account, show your profile and deliver content you ask for;
• to verify identity and prevent fraud, impersonation and abuse;
• to personalise your feed using the controls you set, and to show relevant advertising you have not turned off;
• to process payments, issue GST invoices and meet tax and accounting duties;
• to respond to your requests and grievances;
• to comply with law and legal process.

We do not sell your personal data, and we do not read your private messages to target advertising.

• Other members, as you choose through your privacy settings.
• Service providers who work for us under contract, such as hosting, messaging, payment and identity verification partners, who may use data only to serve us.
• Advertisers receive aggregated results only, never your identity.
• Authorities, where required by law, court order or a lawful government request.
• A successor, if the business is reorganised, subject to the same protections.

We store data on infrastructure we control or on providers we choose, with a preference for locations in India. We keep data only as long as your account is active or as needed for the purposes above and to meet legal obligations such as tax records. When you delete your account, we erase or anonymise personal data unless the law requires us to keep it.

We use encryption in transit, salted password hashing, access controls, audit logging and regular reviews. No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected members as required by law.

Under the DPDP Act you may access your data, correct or complete it, erase it, withdraw consent, nominate someone to exercise your rights if you die or become incapacitated, and have your grievance addressed. See Your DPDP rights for how to exercise them. You may also complain to the Data Protection Board of India if you are not satisfied with our response.

Yapbar is not directed at children. We do not knowingly process the personal data of a child without verifiable parental consent and we do not track, monitor behaviour of or target advertising at children.

We use cookies and similar technologies as explained in our Cookie Policy.

Questions about this Policy or your data: Grievance Officer – name to be updated, Grievance Officer, grievance@yapbar.example, Kitepod LLP, Registered office address – to be updated in Admin › Platform settings. We respond within 7 days.

We will tell you in the Service and by email before any material change to this Policy takes effect.