Privacy policy

Last updated 19 August 2026

Blubanana provides software that helps content creators manage brand collaborations. This policy explains what we collect, why, who it goes to, and what you can require of us. It is written to India’s Digital Personal Data Protection Act, 2023.

Who is responsible

Blubanana Marketing is the Data Fiduciary for the personal data described here. Questions, requests and complaints: hello@blubanana.in.

What we collect, and why

• Your account: name, email address, phone number. To create your workspace, sign you in, and contact you about your account.
• Your business details: niche, follower count, GSTIN, address, UPI ID and bank account details. Used to produce your invoices and your tax figures. We never initiate a payment to or from these.
• Your work: brand deals, rates, deadlines, payments, invoices, expenses and the notes you write.
• Contacts at brands you work with: names, phone numbers and email addresses you record. This is personal data about other people, and we process it only to provide the service to you.
• Files you upload: contracts, briefs, screenshots and profile photographs.
• Device tokens: so reminders can reach your phone.
• Social account data: only if you connect Instagram: your handle, your follower and engagement figures, and view counts on posts you have linked to a deal.

What we do not do

• We do not sell your data, and we do not share it for anyone else’s advertising.
• We do not use your deals, rates or contacts to train AI models.
• We never touch money moving between you and a brand. An invoice and its UPI QR are documents; the payment goes directly into your account.
• We cannot see your card or UPI credentials when you pay us. Those go to our payment gateway and never reach our servers.

Who processes it for us

• Supabase: database, authentication and file storage.
• OpenAI: reading a screenshot or voice note you choose to submit, and suggesting a rate for a format you have never sold. Only the content of that specific request is sent.
• Razorpay: collecting your subscription payment.
• Expo: delivering push notifications to your device.
• Meta: only if you connect Instagram, and only to read your own figures.

How long we keep it

For as long as your account exists. When you delete your account, your workspace and everything in it is permanently deleted, including uploaded files. This is a real deletion path rather than a deactivation flag.

One exception: the tax invoices we issue to you for your subscription are retained for six years, as Indian GST law requires. Those carry your name and GSTIN and nothing else about your work.

Your rights

• Access and portability: Settings → Export my data gives you everything as CSV and JSON, at any time. This works even after a plan has ended.
• Correction: every field is editable in the app.
• Erasure: Settings → Delete my account. Or write to us and we will do it.
• Grievance: write to hello@blubanana.in with “Grievance” in the subject.

Children

Blubanana is not intended for anyone under 18, and we do not knowingly create accounts for children.

Security

Every workspace is isolated at the database level, not by application code: one creator’s deals, rates and contacts are unreachable from another account even through a direct API call. Where you invite a manager, the limits you set on what they can see are enforced the same way. A withheld rate is not hidden on screen, it is never sent.

Changes

If this policy changes in a way that affects you, we will tell you by email before it takes effect. The date at the top always reflects the current version.

Contact

Blubanana Marketing · WeWork, HSR Layout, Bengaluru 560102
hello@blubanana.in · +91 78000 39987