Privacy Policy

SocialBridge is an influencer marketing agency based in Nagpur, Maharashtra, at B/6, Ground Floor, Morya Complex, Mankapur, Nagpur, Maharashtra 440030. It is the creator-marketing arm of NoisTech. Both are brands of Technois Media Marketing Pvt. Ltd., the company registered at 3rd Floor, Patel Apartment, Opp. Sonam Beauty Parlour, Mankapur, Nagpur, Maharashtra 440030 — contracts, invoices and GST are in that name, and its details are at the foot of this page.

We decide why and how the information described here is used, which under India's Digital Personal Data Protection Act, 2023 makes us the data fiduciary for it.

Questions, corrections and complaints all go to hi@socialbridge.agency, which reaches the person responsible rather than a queue.

When a brand enquires. The form on our site asks for a brand name, a contact name, an email address, and optionally a phone number, website, budget range, campaign type and the creators you are interested in. We use it to answer the enquiry and, if it goes ahead, to run the campaign.

When a creator applies. Name, email, phone, city, niche, social handles, follower counts and any links or notes sent with the application. We use it to decide whether to take the application further, and to contact the applicant either way.

When a creator joins the roster. Alongside the public profile, a creator can fill in a phone number, date of birth and postal address in their own portal, and tell us what they expect to be paid for each kind of work. These are used for contracts, invoices, payments and shoot logistics. They are never shown on the public site and never sent to a brand — including the expected rates, which are the creator's own figures and separate from anything we quote.

A creator can also give their gender. That is used in one public place only: to group creators in lists on our blog, such as a list of women creators. Leave it blank and you will not appear in those lists.

When someone emails a creator's SocialBridge address. Mail sent to an address on our domain is stored in our admin panel with the sender's name, address, subject and message, so we can answer it and keep a record of the conversation. An automatic acknowledgement goes back to the sender.

When anyone visits the site. We keep a count of how many times each creator's page has been opened, and the visit records described in section 3 below.

When you browse the public site we record the page you opened, the time, the address you came from (including any campaign tags in the link), your IP address, the city, region and network provider derived from it, and your browser's user-agent string. A cookie lets us connect your visits to each other, so we can see how you found us and which pages you read. We also note when you tap our phone number, email address or WhatsApp link, and when you send a form. When you start typing into one of our forms, what you have entered is saved as you type — along with the same request details — even if you never press submit. We keep these records to run the site securely, to investigate abuse or attacks, and to follow up enquiries that were started but not finished. Visit logs are kept for up to 6 months and unsent form drafts for up to 3 months; submitted forms are kept as long as we work together. Pages behind a login (the admin panel and the creator portal) are not tracked this way.

Our forms and the creator rate calculator take your city from your device's location rather than a typed field. Your browser asks you first — when you start filling in the form — and nothing is shared unless you allow it. If you do, we save the coordinates your browser gives us and the address details for that point from OpenStreetMap (area, city, district, state and PIN code), along with your check or form. We use them to fill in your city, to compare creators with others in the same city, and to suggest creators, brands and campaigns near you. A form that needs a city waits until you allow location; one that already has your city keeps it until you update it. You can ask us to delete your location at any time.

Creators on our roster can connect their Instagram professional account through Facebook Login, from the Facebook Page the account is linked to. We then read, every day, the account's follower count, its recent posts and their numbers (views, reach, likes, comments, shares and saves), its totals for the last 28 days and its follower demographics (top cities, age and gender). We use them to keep the creator's page and rate card accurate and to show brands verified numbers. The access is read-only — we cannot post, comment or read messages — and its key is stored encrypted. A creator can disconnect at any time from their portal or from Instagram's settings, and we then delete the key and the numbers we stored. If a creator turns on Auto-DM or brand replies, Instagram also sends us new comments on their posts and new messages to their account. We use a comment only to check it for the creator's chosen word and send that person the DM they asked for, and a message only to check whether it is a brand asking about a collaboration — we keep those brand messages, and the name of the account that sent them, so our team can follow up; other messages are not stored.

Creators can also connect their YouTube channel by signing in with Google. We then read, every day, the channel's name and handle, subscriber and view counts, its recent videos and Shorts with their views, likes and comments, and its YouTube Analytics for the last 28 days (views, watch time, average view duration, subscribers gained, and viewers by age, gender, country, city, device and traffic source). We also receive the Google account's name and email address: the email is kept on the creator's profile for account recovery and so they can sign in with Google, and becomes their contact email only if they had none. We use this data only to show the creator their insights, to keep their SocialBridge page and rate card accurate, and to show brands verified numbers; we don't sell it or use it for advertising. Access tokens are stored encrypted. Our use of YouTube data follows the YouTube Terms of Service and the Google Privacy Policy, and the Google API Services User Data Policy, including its Limited Use requirements. A creator can disconnect at any time from their portal — we then delete the tokens and the YouTube data we stored and revoke our access — or remove SocialBridge from their Google account at myaccount.google.com/permissions.

Brands and crew (editors, cinematographers and photographers) sign in to their portals with a link we email them; the link works once and the sign-in lasts 60 days unless they sign out. A brand's portal shows the campaigns, quotations and shortlists we sent to that email address. When we send a brand a creator shortlist, the brand's approve or reject choices and notes are kept with it so our team can act on them. Crew profiles list only what the person chose to show; their email and phone stay private and are used to arrange and pay for bookings. For a crew booking we record who asked, what for and the budget, and we show both sides the agency's share.

If you allow notifications, your browser gives us an address its push service uses to deliver them, which we keep along with whether you told us you are a creator or a brand. We use it only to send occasional SocialBridge notifications — new campaigns, guides and similar news. You can turn them off at any time in your browser's site settings, and we delete the address when the browser tells us it is no longer valid.

We may also use standard analytics and advertising pixels (such as Google Analytics or the Meta Pixel) to understand how the site is used and to measure our own campaigns, including when someone sends a form or taps to contact us. We may also use Microsoft Clarity, which records how pages are scrolled and clicked so we can improve them; it hides what you type into forms. Where these run, the provider receives the usage data described in its own privacy policy.

When you open a quotation, campaign report or approval link we sent to your business, we connect that visit to your business so we know when to follow up.

• We do not sell personal information, and never have.
• We do not ask for or store payment card details anywhere on this site.

The site sets a small number of cookies: a signed session cookie when someone logs in to the admin panel or creator portal (removed on logout), an anonymous visitor identifier used for the visit and form records described above, and — where enabled — the cookies set by the analytics and pixel providers named in section 3.

A few services process information on our instructions so the site and our mail work. Each gets only what that job needs.

• Railway — hosting and the database, in a Southeast Asia region.
• Cloudflare — DNS and email routing for our domain; mail for our addresses passes through it.
• Brevo — sending the email we reply with.
• Apify — reading public profile pictures, follower counts and recent posts from Instagram and YouTube for roster profiles. Only already-public information.

Beyond these, we share information when the person it belongs to asks us to — for example passing a creator's details to a brand once a campaign is agreed — or when the law requires it.

Brand enquiries and creator applications are kept while there is a reasonable chance of working together, and cleared out when there is not. Records tied to a campaign — contracts, invoices, payments — are kept as long as tax and accounting rules require. Creator profiles are kept for as long as the creator is on the roster; when they leave, the public page comes down and the personal details are deleted, though past campaign records naming them remain.

Under the DPDP Act, 2023 you can ask us to:

• tell you what we hold about you and what we have done with it;
• correct anything that is wrong, incomplete or out of date;
• delete it, where we are not required to keep it for a legal or accounting reason;
• withdraw a consent you have given, which stops the use it covered from that point on;
• nominate someone to exercise these rights for you if you are unable to.

Write to hi@socialbridge.agency and we will answer within thirty days. If you are not satisfied with the answer, you may complain to the Data Protection Board of India. Creators on the roster can also change most of their own details directly in the creator portal.

The site is served only over HTTPS. Passwords are stored as bcrypt hashes, never as text, and sign-in sessions are signed tokens that expire. The admin panel and the creator portal are behind separate logins, and personal details are visible only inside them. Backups are taken regularly. No system is perfect, and we will tell affected people and the Board without delay if something goes wrong.

This site is not meant for children. We do not knowingly collect information about anyone under eighteen, and we do not take creators under eighteen onto the roster. If you believe a child's information has reached us, write to us and we will remove it.

When this policy changes we update the date at the top. If a change materially affects how we use information already given to us, we will say so directly to the people it affects rather than relying on them to re-read this page.