1. Introduction
Welcome to Osirus ("Platform", "we", "us", or "our").
Osirus is a social commerce and influencer collaboration platform that connects Brands and Creators to execute paid marketing campaigns, UGC services, and affiliate collaborations.
We are committed to protecting your personal and business information in compliance with:
- The Digital Personal Data Protection Act, 2023 (India)
- Applicable GST and Income Tax laws
- RBI guidelines for payment processing and escrow accounts
This Privacy Policy explains how we collect, use, process, and safeguard your data.
2. Who This Policy Applies To
This policy applies to:
- Brands / Businesses
- Creators / Influencers
- Website Visitors
- Users installing Osirus tracking tools (Pixel / Integrations)
3. Data We Collect
A. Data Collected from Brands
1. Business Identity Data
- Company Name
- GSTIN
- Registered Address
- Authorized Representative Name
- Contact Email & Phone
2. Logistics Data
- Warehouse / Pickup Address
- Contact Person for Dispatch
- Shipping Instructions
(Used for automated reverse pickup labels and logistics coordination.)
3. Payment Data
- Payment method (Credit Card / Net Banking / UPI / Wallet)
- Billing Information
Important: Osirus does not store raw card details. Payments are processed via secure gateways such as Razorpay or Stripe.
4. Performance & Tracking Data
If you install our:
- Tracking Pixel
- Shopify / WooCommerce Integration
- Custom API Integration
We collect:
- Conversion Value
- Order ID
- Revenue attributed to influencer links
- Click-through data
- Campaign performance metrics
This data is anonymized and used for ROI analytics.
B. Data Collected from Creators
1. Identity Data
- Full Name
- Date of Birth (Age Verification 18+)
- PAN (for TDS compliance)
- Government ID (if legally required)
2. Social Media Data
- Instagram / YouTube Handle
- Follower Count
- Engagement Rate
- Public Audience Demographics
We may use third-party APIs to audit public engagement authenticity.
3. Logistics Data
- Delivery Address
- Phone Number
Used strictly for product shipment coordination.
4. Financial Data
- Bank Account Details
- UPI ID
Used solely to transfer earnings and deduct TDS as required by Indian tax law.
4. How We Use Your Data
A. Escrow & Payment Processing
- Brand campaign funds are held in a designated Nodal/Escrow account
- Funds are released to the Creator only after successful submission and review
- We deduct applicable taxes (GST/TDS) where required by law
B. Campaign Matching & Recommendation Engine
We use platform data to:
- Match Brands with relevant Creators
- Rank influencers based on niche fit
- Improve campaign performance predictions
All analytics for recommendation modeling is aggregated and anonymized.
C. Logistics Coordination
- We generate automated shipping labels
- Creator addresses are shared only with logistics partners (e.g., Shiprocket, Delhivery)
- Brands do not directly access full Creator address unless operationally necessary
D. ROI & Performance Analytics
For Brands:
- Influencer sales attribution
- Traffic & conversion tracking
- Campaign performance dashboards
5. Intellectual Property & Content Rights
A. Standard Influencer Campaigns
- Creators retain ownership of posted social content
- Brands receive limited usage rights as specified in the campaign agreement (e.g., 30-day whitelisting)
B. UGC / Raw File Services
If a Creator is hired for:
- UGC content
- Raw video file delivery
- Ad creatives
Upon successful payment:
- Full copyright transfers to the Brand
- The Creator waives moral rights for commercial use
- The Brand may use content for paid advertising and digital campaigns
Osirus facilitates this legal transfer.
6. Data Sharing
We do not sell your data.
We may share data with:
A. Service Providers
- Payment Gateways (Razorpay / Stripe)
- Logistics Companies (Shiprocket / Delhivery)
- Cloud Hosting Providers
- Analytics Service Providers
B. Between Brands & Creators
Before collaboration:
- Only public stats are visible
After confirmation:
- Necessary details shared for order execution
C. Legal Authorities
If required under:
- DPDP Act 2023
- GST Laws
- Income Tax Regulations
- Court Orders
7. Data Security
We implement:
- Encrypted payment processing
- Secure cloud infrastructure
- Role-based access control
- Secure API authentication
- Limited internal access protocols
Important: Despite safeguards, no online system is 100% secure.
8. Data Retention
We retain data:
- For active accounts
- For 7 years for GST and tax compliance
- For dispute resolution
- For fraud prevention
After retention periods, data is securely deleted or anonymized.
9. Your Rights Under DPDP Act, 2023
As a Data Principal under Indian Law, you have the right to:
1. Right to Access
Request a summary of data we hold about you.
2. Right to Correction
Update your address, bank details, or profile data.
3. Right to Erasure
Request deletion of your account.
Note: We may retain mandatory financial records for 7 years.
5. Right to Withdraw Consent
You may withdraw consent by deleting your account.
Active orders must be completed before withdrawal is processed.
10. Consent Manager
By using Osirus, you provide consent for data processing as outlined in this policy.
Consent may be withdrawn at any time through:
- Account Deletion
- Written request to DPO
11. Cookies & Tracking
We use cookies for:
- Login authentication
- Performance analytics
- Fraud detection
- Campaign tracking
You may disable cookies in your browser settings.
12. Children's Privacy
Osirus is strictly for users aged 18+.
We do not knowingly collect data from minors.
13. Policy Updates
We may update this Privacy Policy periodically.
Continued use of the Platform after updates constitutes acceptance.
Questions or Concerns?
Our Data Protection Officer is available to address any privacy-related questions or requests.
Contact DPO