Privacy Policy

This policy explains how UnifyOps handles personal information when you visit tryunifyops.com or use the UnifyOps marketplace. UnifyOps is operated by Raghav Mittal as an individual in India, who decides why and how your personal data is processed: the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023, and the “controller” under other laws. Questions about your data go to our Grievance Officer.

This notice is meant to be read on its own. It lists what we collect and why, and how to withdraw consent, use your rights or complain.

We collect what we need to run a marketplace where brands hire content creators, and no more. We do not sell your personal information, and we do not use third-party advertising trackers.

Account details. Your name, email address and role (brand or creator). If you sign up with a password, we store only a salted hash of it, never the password itself. We also give you a member number and an invite code.

Profile details you choose to add. For creators: handle, headline, bio, city and country, the categories and niches you work in, languages, social links, portfolio links, starting rate and availability. For brands: company name, website, industry, team size, the kinds of content you need and a rough monthly budget.

Marketplace activity. Briefs, pitches, contracts, deliveries (the links and notes you submit), revision requests, reviews, saved creators and messages between brands and creators.

Payment details creators share. So that brands can pay you directly, you can add the name payments should go to and a UPI ID, a PayPal email address or PayPal.me link, or a bank account number, IFSC and account-holder name. These are shown to a brand only while it has a current contract with you (see What is public and what is private). We never ask for Aadhaar, card details or passwords. We no longer ask for a PAN, and brands never see one; if you gave us yours before 8 October 2026, see How long we keep it.

The paid/received record. When a brand taps “I've paid” we record the time and any reference the brand adds (a UPI reference or UTR, a bank reference or a PayPal transaction ID). When the creator taps “Received” we record the time. UnifyOps doesn't take part in the payment itself, so we never see the money, your card number, UPI PIN, bank login or PayPal password.

Shipping addresses. If a project needs a product shipped, you share the address in the deal room messages. It is stored as part of that conversation, which only the brand, the creator and the UnifyOps team can see.

Support, disputes and complaints. What you write to us, what you send as evidence, and what we suggest or decide.

How you found us. If you arrive through a tagged link we record its campaign tags (utm_source, utm_medium, utm_campaign, utm_content), and if a member invited you we record who it was.

Usage and device data. Product events such as signing up, finishing onboarding, posting a brief, sending a pitch and marking a project paid. When you open a page, our own first-party analytics records which page it was (its path, without the rest of the address), the website that sent you (its domain only, such as google.com), any campaign tags in the link, your device type (mobile, tablet or desktop) and browser family, an approximate country worked out from your browser's time zone or language setting, and whether you are signed in as a brand or creator or browsing anonymously. If you're signed in, these records are linked to your account; otherwise only to the random ID in the fg_anon cookie. They never include your IP address or your browser's full details, and no third-party tracker sees them. We also record when you were last active. Like any website, our servers receive your IP address and browser details when you load a page.

We use your personal data with your consent, which you give when you create an account and when you add details such as the payment details you share with brands. We also use it where the law allows without consent: for the purpose you gave it to us for (for example, showing your payment details to a brand that has hired you, so it can pay you), and to meet legal duties such as a court order. You can withdraw consent at any time (see Your rights). Withdrawing doesn't affect what we did before, but without payment details brands can't see how to pay you, and without an account we can't run your projects.

If you choose “Continue with Google”, we ask Google only for the basic openid, email and profile permissions. From that we receive your Google account ID, your email address and whether Google has verified it, your name and your profile photo URL.

• We use them only to create and sign in to your UnifyOps account, and to show your name and photo on your profile.
• If an account with the same email already exists, we link your Google sign-in to it.
• We do not get access to your Gmail, contacts, Drive, calendar or anything else in your Google account, and we never post as you.
• We do not sell Google user data, use it for advertising, or let people read it except where needed for security or the law.

UnifyOps's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove UnifyOps's access at any time from your Google Account's security settings.

• To run the marketplace: show profiles and briefs, match briefs to creators, deliver messages and notifications, and run contracts.
• To let a brand pay the creator it hired directly: we show the creator's payment details to that brand and keep the paid/received record so both sides, and we, can see where a deal stands. We never receive or send the money ourselves.
• To help when something goes wrong: during early access our team looks at every contract, its messages, deliveries and paid/received record, so we can help both sides and keep the marketplace safe.
• To keep the Service safe: prevent fraud and spam, enforce our Terms, and resolve disputes.
• To understand what works: count signups, activation and which campaigns bring people in, using our own first-party analytics.
• To talk to you about your account, your projects and important changes. We'll only send marketing emails if you opt in, and you can opt out any time.
• To meet legal obligations, such as answering lawful requests from authorities and keeping the records the law requires.

Public: creator profile pages (name, handle, photo, headline, bio, city and country, categories, portfolio, starting rate, member number and reviews) and open briefs (the brand's company name and the brief details). Public pages can appear in search engines.

Shared with the other side of a project: pitches, contract details, deliveries, messages and the paid/received record (including any reference the brand adds) are visible to the brand and the creator on that project, and to the UnifyOps team.

A creator's payment details are shown to a brand only while it has a current contract with that creator: from the hire until the creator marks the payment Received, or the contract is cancelled. The UnifyOps team can see them too, only to help with a problem, keep the Service safe or meet the law. They are never public. A brand that has seen them may keep them in its own payment records; it must use them only to pay that creator, and is responsible for that copy.

Private: your email address, password hash, how you found us and your activity data.

We share personal information only with:

• other members, as described above, when you use the marketplace;
• a brand that has hired a creator and asks us in writing, to resolve a complaint about that contract: the creator's name and the contact details we hold for them;
• the service providers below, who process it for us under contract and only to provide their service;
• authorities, when the law requires it or to protect people from harm; and
• a buyer or successor if UnifyOps is transferred, who must keep this policy's promises.

When a brand pays a creator, the payment goes through their own banks, UPI apps or PayPal, under those companies' own terms and privacy notices. UnifyOps isn't involved and shares nothing with them. If we ever add a payment provider, we'll list it here before we use it. We don't sell or rent personal information, and we don't share it with advertisers.

UnifyOps uses a handful of first-party cookies and no advertising or analytics cookies from anyone else. Our analytics are counted on our own servers.

You can block or delete cookies in your browser settings. If you block fg_session you won't be able to stay signed in; the others are optional and the site works without them.

• Account and profile data: while your account is open.
• Sessions: until you log out or 30 days pass.
• Product analytics events: up to 24 months, then deleted or aggregated so they no longer identify you.
• Server and access logs: one year, then deleted.
• Payment details you share with brands (UPI ID, PayPal, bank account): until you change or remove them, or close your account; then deleted from our systems within 30 days. We can't delete a copy a brand has already kept.
• Contracts, their messages and deliveries, and the paid/received record: while either side's account is open, and for 3 years after the contract ends in case of a dispute or legal claim, then deleted.
• Records of payments, refunds and payouts that UnifyOps itself received or sent before 8 October 2026, and any PAN given for them: as long as Indian tax and accounting law requires (up to 8 years after the financial year), then deleted. A PAN not linked to such a record is deleted.

Wherever you live, you can ask us to:

• give you a summary of the personal data we hold about you, what we do with it, and the names of the companies we share it with;
• correct, complete or update it;
• erase it. We delete your account, profile, portfolio, briefs and personal details, including the payment details you shared, and sign you out everywhere. We keep only the records above that the law requires or that a dispute needs, and we tell you what we kept. Reviews you wrote stay on the other member's profile without your name, and the other side of a project keeps its copy of the contract and messages. We can't erase a copy of your payment details that a brand kept in its own records;
• withdraw your consent, as easily as you gave it, or stop marketing emails;
• nominate someone to use these rights for you if you die or become unable to; and
• resolve a complaint about how we handle your data.

How: email hello@tryunifyops.com with the subject “Data request”, from the email address on your account. That address is your identifier with us. We may ask you to confirm it's you. We reply within 30 days, and every reply includes our Grievance Officer's contact details. If you're not satisfied, you can complain to the Data Protection Board of India after using our process. Depending on where you live (for example the EU, UK or California), you may have further rights, including complaining to your local data protection authority, and we will honour them.

We protect your data with HTTPS, hashed passwords, httpOnly session cookies and access limited to the people who need it. A creator's payment details are visible only to the creator, to brands with a current contract with them, and to the UnifyOps team. No system is perfectly secure. If a breach affects your personal data, we'll tell you without delay: what happened, what it means for you, what we're doing about it and who to contact. We'll also report it to the Data Protection Board of India and other authorities as the law requires.

UnifyOps is for people aged 18 and over. We don't knowingly collect information from anyone under 18 (a “child” under India's DPDP Act). If you think a minor has signed up, tell us and we'll delete the account.

Our app and database run in Singapore (Amazon Web Services and Supabase). Some providers listed above may process data in other countries, including the United States. India's DPDP Act allows personal data to be transferred abroad unless the Government restricts a country, and we'll follow any such restriction. Where other laws require it (for example, for people in the EU), we use safeguards such as standard contractual clauses.

If we make a material change, we will tell you by email or in the app before it takes effect. The date at the top shows when this policy last changed.

Privacy questions, requests and complaints: hello@tryunifyops.com (subject “Privacy” or “Data request”), or our Grievance Officer, who answers questions about how we process your data.