Creator Privacy Notice

This Notice describes how OGROTI, a sole proprietorship based in Bengaluru, Karnataka, India ("OGROTI", "we", "us"), handles the personal data of content creators on OGROTI, representatives of creator businesses, and people who contact us about creator participation.

OGROTI runs creator pages, discovery, and collaborations between creators and brands it has onboarded, with OGROTI coordinating each collaboration. OGROTI does not employ creators, guarantee paid collaborations or process payments between brands and creators.

Contact for privacy questions and grievances: hello@ogroti.net. This Notice sits alongside the OGROTI Content Creator Onboarding, Platform Participation & Content Licensing Terms and Conditions and the general OGROTI Privacy Policy at https://ogroti.net/privacy.

• Account details: name, email address, and your name and photo if you sign in with Google.
• Page details: channel name and links, category, location, biography, milestones, photos and other material on your page.
• Public channel data: channel statistics and public videos from your YouTube channel (see section 3 and section 8).
• Verification: proof that you control a channel (for example a code added to your channel description); identity or authority documents only when reasonably necessary.
• Collaboration records: requests from brands, your answers and any terms you send, emails about the collaboration, and photos of collaboration products taken when they reach us.
• Delivery details: for a collaboration with a product, the name, delivery address and phone number you give us for the parcel.
• Acceptance records: the versions of the Terms and this Notice you accepted, the checkbox wording, the date and time, your account email, IP address and browser.
• Technical data: IP address, browser and device information, error reports, and analytics on how pages are used.

We do not ask for Aadhaar, PAN or bank details.

We receive data from you or your authorised representative, from your use of OGROTI, and from information publicly available on your YouTube channel.

Before a creator joins, OGROTI may prepare a page from their public YouTube channel, including an automatically written introduction, and invite them by email to claim it. An unclaimed page is not shown publicly. If you don't want a page, tell us and we will delete it.

• To create, run, display and remove your creator page.
• To verify that you control the channels you list.
• To run collaborations: pass requests and answers between you and brands, arrange visits, and check and deliver products.
• To keep records of what you accepted, and to handle complaints and enforce the Terms.
• To detect impersonation, fraud, unauthorised access, abuse and other risks, and to fix errors.
• To understand how OGROTI is used, so we can improve it.
• To comply with legal obligations and respond to lawful requests.

Accepting the Terms is not consent to unrelated marketing, to sharing your contact details with brands, or to new commercial uses of your content.

Brands see your public page and the answers you give to their requests. OGROTI handles all communication between you and a brand, and never gives a brand your email address, phone number or postal address.

Public page content can be viewed, indexed and cached by others, including search engines. We remove it from OGROTI when you delete it, but cannot guarantee removal of copies outside our control.

We share only what is needed for each purpose, with:

• Our database and sign-in provider, website hosting and content-delivery provider, and transactional email provider.
• Our product analytics provider and error monitoring provider.
• Our AI language model provider, which writes page introductions from public channel data.
• Our courier partner, which receives only the delivery name, address and phone number for a product collaboration, never anything else and never via the brand.
• Brands, limited to your public page and your answers to their requests.
• Professional advisers under confidentiality duties, a lawful successor to the OGROTI business, and courts, regulators or authorities where legally required.

We do not sell personal data and do not share it with advertisers. You can ask us which providers we use.

We process personal data on the grounds permitted by the law in force at the time, including your consent where it is required. Where we rely on consent, you can withdraw it; withdrawal may stop a feature that depends on it, such as showing your page, and does not affect processing already done.

OGROTI uses the YouTube API Services to read public channel statistics and videos. By using OGROTI you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of data is described in the Google Privacy Policy (https://policies.google.com/privacy).

If you connected a Google account, you can revoke OGROTI's access at any time at https://myaccount.google.com/permissions. We delete stored YouTube data within 7 days of a request, and refresh it regularly while your page is active.

OGROTI uses cookies and similar browser storage that are needed to keep you signed in, and a product analytics service that records how pages and features are used. We also use an error monitoring service that records technical errors. Analytics data is kept for no longer than thirteen (13) months.

Linked social-media sites and other third-party services have their own privacy practices.

• Account and page data: while your account exists. Deleting a page or your account removes it, subject to the backups below.
• Unclaimed pages prepared from public channel data: deleted on request.
• Collaboration requests, answers and product photos: two (2) years after the collaboration is closed.
• Delivery address and phone number: deleted within ninety (90) days of the product being delivered.
• Verification documents, if any were needed: ninety (90) days after participation ends.
• Acceptance and consent records: retained for five (5) years, even after an account is deleted, as proof of what was accepted.
• Complaints and dispute records: three (3) years after final resolution.
• Analytics: thirteen (13) months.
• Backups: a rolling cycle of thirty (30) to ninety (90) days.

Where the law requires a different period, or information is needed for a legal claim, investigation or security incident, we keep it as long as required and no longer. When a period ends we delete or irreversibly anonymise the data.

We use safeguards proportionate to the data and risks, including access restriction, secure credentials, encrypted connections, vendor controls, backups and incident response. No online system is completely secure. We will handle personal-data breaches and notifications as the law requires.

Subject to the law in force, you can ask us for a summary of your personal data and how we use it, ask us to correct, complete or delete it, withdraw consent, nominate someone to act for you, and raise a grievance. Write to hello@ogroti.net. We may verify your identity before acting, and will respond within the period the law requires. You may escalate an unresolved complaint to the competent authority or board.

OGROTI creator accounts are for people aged 18 or over. If we learn that a minor has an account, we will suspend it and handle the data as the law requires. Representatives of creator businesses must be authorised to give us the information they provide.

Several providers we use store or process data outside India. We choose providers with appropriate safeguards and comply with any transfer restrictions under Indian law.

We may update this Notice to reflect changes in law, services or data practices. Each version has its own version number and date and stays available unchanged. Where a change needs fresh notice or consent, we will ask before the changed processing starts.

Before accepting the Terms, you are asked to acknowledge, through a separate unticked checkbox, that this Notice has been made available to you. Acknowledging it is not consent to every processing activity described; where the law requires consent for a purpose, we ask for it separately. We record the version acknowledged, the wording and the date and time.