Privacy Policy

This Privacy Policy explains how Dono ("we") collects, uses, and protects your information when you use the Platform as a streamer.

1. Information We Collect

• Account: username, display name, email address, and a securely hashed password.
• Identity & KYC: legal name, PAN, date of birth, and address used for verification and tax compliance.
• Payout: bank account holder name, account number, and IFSC code.
• Channel: the channel URL you provide for creator verification.
• Activity: tips received, messages, settlement and payout history, and overlay settings.
• Technical: log data, device/browser information, and cookies used to keep you signed in.

2. How We Use It

• To operate the Platform, process tips, and make payouts.
• To verify your identity (KYC), prevent fraud, and ensure security.
• To comply with legal, tax, and regulatory obligations.
• To communicate with you about your account, settlements, and support.

3. How We Protect It

Sensitive financial data — your PAN and bank account number — is encrypted at rest using AES-256-GCM. Passwords are stored only as salted hashes. Access to sensitive data is restricted to authorised administration for verification and payout purposes.

4. Sharing

We do not sell your personal information. We share it only with:

• Payment processor(Razorpay) to process viewers' livestream tips and payouts. Payment processing is used solely for such tips and not for any sale of goods or services.
• Service providers we rely on to run the Platform — e.g. email delivery, cloud file storage, and hosting — under appropriate safeguards.
• Authorities where required by law, regulation, or valid legal process, or to protect rights and prevent fraud.

5. Data Retention

We keep your information for as long as your account is active and as required to meet legal, tax, and accounting obligations. We may retain certain records after account closure where the law requires it.

6. Your Rights

You may access or correct your information from your profile, and you may request deletion of your account. Some information must be retained to satisfy legal and financial-record requirements even after a deletion request.

7. Cookies & Sessions

We use a signed session cookie to keep you logged in. It is essential to the service and is not used for advertising or third-party tracking.

8. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes

We may update this Policy from time to time; material changes will be notified through the Platform.

10. Contact

For privacy questions or requests, email support@donoapp.in.