Influxtv

Important

This Privacy Policy applies to the full InfluxTV platform, including the website, mobile applications, Flint Shop, live streaming and interaction features, and the Creator Dashboard. It governs how Aignan Mediatech Private Limited collects, uses, discloses, and protects personal data under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

By creating an Account or using the Platform, you agree to the practices described in this Policy.

01Scope and Entity

This Policy is issued by Aignan Mediatech Private Limited, a company incorporated under the Companies Act, 2013, with its registered office at 3rd Floor, E52, TDI The Retreat, Sector 89, Faridabad, Haryana, 121002, India, trading as InfluxTV ("InfluxTV", "the Company", "we", "our", "us"). For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), InfluxTV acts as the Data Fiduciary in respect of personal data collected through the Platform.

This Policy replaces and supersedes any earlier privacy notice published on influxtv.in, including any version scoped only to a pre-launch landing page or waitlist. It applies to every person who creates an Account, whether as a Viewer or a Creator.

02Definitions

"Personal Data"

Any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act.

"Data Principal"

The individual to whom the personal data relates, i.e., you.

"Data Fiduciary"

InfluxTV, being the entity that determines the purpose and means of processing personal data.

"Data Processor"

Any person who processes personal data on behalf of InfluxTV, including our payment gateway and cloud hosting providers.

"Consent"

A clear, specific, informed, and unambiguous indication of agreement, given by an affirmative action, as required under Section 6 of the DPDP Act.

"KYC Data"

Know-your-customer information submitted by Creators for identity verification and payout eligibility, including PAN details, Aadhaar details, bank account information, and GSTIN.

"Processing"

Any operation performed on personal data, including collection, storage, use, disclosure, and erasure.

Terms not defined here carry the meaning given to them in the InfluxTV Terms and Conditions.

03Personal Data We Collect

3.1 Data Collected From All Users (Viewers and Creators)

—Name, email address, and mobile number provided at registration
—Age or date-of-birth declaration
—Account credentials (password is stored in encrypted/hashed form only)
—Profile information you choose to add (profile photo, bio, display handle)
—Transaction history: Flint purchases, Flint spend, pack selected, timestamps
—Chat messages, comments, and other content submitted on the Platform
—Device and browser information, IP address, approximate location (city/country level)
—Usage data: pages visited, streams watched, features used, session duration
—Cookies and similar tracking technologies (see Clause 9)

3.2 Additional Data Collected From Creators

Creators undergo KYC verification before payouts are enabled. This requires:

—PAN number and a copy of the PAN card
—Aadhaar number (only the last 4 digits are retained after verification is complete)
—Bank account number, IFSC code, and account holder name
—GSTIN, where the Creator is GST-registered (optional field)
—Payout history and Creator Wallet transaction records
—Stream recordings and associated metadata, where streams are recorded for platform operations

KYC Data is collected to comply with our obligations under the Income Tax Act, 1961 (including Sections 194-O and 206AA), the GST framework (including Section 52, Tax Collected at Source), and the RBI's Master Direction on Prepaid Payment Instruments. It is verified through our payment partner's verification services (see Clause 6) before any payout is processed.

3.3 Video Interaction Data

Where a Viewer wins a Bid Event and participates in a live video interaction with a Creator, that interaction is broadcast live as part of the Creator's stream, visible to other Viewers watching at the time, and is additionally recorded and stored by InfluxTV. This includes the Viewer's video, audio, and likeness during the interaction.

We collect and retain this data for the purposes of trust and safety moderation and to serve as evidence in the event of a grievance, complaint, or dispute raised by either party to the interaction, as described in Clause 5.6 of the Terms and Conditions. Recordings are retained for the period set out in Clause 7 of this Policy and may be accessed internally by personnel handling such grievances, disputes, or safety investigations.

3.4 What We Do Not Collect

InfluxTV does not collect, store, or process full payment card numbers, CVVs, net banking credentials, or raw UPI PINs at any point. Payment instrument data is handled exclusively by our PCI-DSS compliant payment gateway; we receive only transaction references, status, and masked identifiers for reconciliation.

04How We Use Your Personal Data

We process personal data for the following specified purposes:

— Creating and administering your Account
— Processing Flint purchases and Platform Interactions
— Verifying Creator identity and processing payouts, including statutory tax withholding
— Computing XP, levels, and leaderboard rankings
— Displaying stream-scoped viewer engagement data to Creators for their own streams (see Clause 6.3)
— Recording and retaining video interactions won through Bid Events, for trust and safety moderation and as evidence in the event of a grievance or dispute (see Clause 3.3)
— Detecting and preventing fraud, abuse, and manipulation of the Flint economy or XP system
— Responding to support requests, complaints, and grievances
— Complying with legal obligations, including tax filings (Form 26Q, Form 16A, GSTR-8) and requests from law enforcement or regulatory authorities
— Improving Platform performance, reliability, and features
— Sending transactional communications (purchase confirmations, payout notifications, security alerts) and, where you have consented, product updates

We do not sell personal data to any third party

05Legal Basis for Processing

Under the DPDP Act, InfluxTV processes personal data on the following bases:

Consent: for account creation, marketing communications, and any processing not otherwise covered below. Consent is collected through a clear affirmative action, is specific to the purpose stated, and may be withdrawn at any time as described in Clause 8.

Legitimate uses under Section 7 of the DPDP Act: including processing necessary for the performance of a contract with you (e.g., delivering the Platform Interaction you paid for), and processing necessary to comply with a legal obligation.

Legal obligation: where processing is required under the Income Tax Act, 1961, the GST framework, the Prevention of Money Laundering Act, 2002, or any other applicable law.

06Disclosure of Personal Data

We share personal data only as described below. We do not sell personal data, and we do not share it for third-party advertising purposes.

6.1 Payment and Verification Partners

We share transaction data, and, for Creators, KYC Data, with our payment gateway and payout processing partner for the purposes of processing Flint purchases, processing Creator payouts, and verifying PAN, bank account, and GSTIN details before payout eligibility is granted. This partner acts as a Data Processor on our instructions and is contractually bound to protect this data and use it only for the stated purpose.

6.2 Regulatory and Tax Authorities

We disclose Creator payout and tax data to the Income Tax Department (TDS returns, Form 16A) and GST authorities (GSTR-8, TCS records) as required by law. We disclose data to law enforcement or regulatory authorities where required by a valid legal process.

6.3 Creator Access to Viewer Engagement Data

Creators can view engagement data for viewers on their own streams, for example, chat activity, bid participation, and XP earned during that Creator's stream, for the purpose of stream analytics. This access is scoped to a Creator's own stream sessions only, a Creator cannot access data from another Creator's streams, and cannot access a Viewer's payment instrument details, full transaction history across the Platform, or KYC-equivalent identity data.

6.4 Internal Access

Authorised InfluxTV personnel may access individual account and transaction data for the purposes of platform security, fraud prevention, dispute resolution, and financial reconciliation. Such access is limited to personnel with operational necessity and is governed by internal access controls. The Platform's super admin dashboard displays aggregated, platform-level metrics only and does not provide individual user drill-down.

6.5 Cloud Infrastructure

Platform data is hosted on cloud infrastructure operated by reputable third-party providers. Where such infrastructure involves storage or processing outside India, this is carried out subject to the cross-border transfer provisions of the DPDP Act. As of the effective date of this Policy, the Central Government has not notified any countries to which transfer of personal data is restricted under Section 16 of the DPDP Act; we will comply with any such restriction from the date it takes effect.

6.6 Business Transfers

Where InfluxTV is party to a merger, acquisition, or sale of assets, personal data may be transferred to the successor entity, subject to that entity being bound by terms no less protective than this Policy.

07Data Retention

— Transaction and Account records: retained for 36 months from the date of the transaction or Account closure, for reconciliation, dispute resolution, and fraud investigation purposes.
— Video interaction recordings: retained for 36 months from the date of the recording, for the purposes described in Clause 3.3, unless a longer period is required to resolve an active grievance, dispute, or legal proceeding, in which case the recording will be retained until that matter is resolved.
— KYC and payout records: retained for the period required under applicable tax and financial record-keeping law, which may exceed 36 months. [Exact minimum retention period for KYC and payout records is under confirmation with InfluxTV's tax advisor and will be updated in this Policy once finalised.]
— Aadhaar data: only the last 4 digits are retained post-verification; full Aadhaar numbers are not stored.
— Upon Account deletion, personal data is deleted or anonymised in accordance with this Clause, except where retention is required by law or for the establishment, exercise, or defence of legal claims.

08Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

—Access a summary of the personal data we hold about you and the processing activities carried out
—Correction and completion of inaccurate or incomplete personal data
—Erasure of personal data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations under Clause 7
—Grievance redressal, by raising a complaint with our Grievance Officer (Clause 11) and, if unresolved, with the Data Protection Board of India
—Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
—Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, write to us using the contact details in Clause 14. We will verify your identity before acting on a request and will respond within the timelines prescribed under applicable law.

09Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, understand usage patterns, and improve Platform performance. You can control or disable cookies through your browser settings; disabling cookies may affect certain Platform features, including staying logged in.

10Data Security

We implement reasonable security safeguards appropriate to the sensitivity of the data processed, including encryption of data in transit, access controls limiting internal data access to personnel with operational necessity, and secure handling of KYC Data. No payment card or raw UPI credential data is stored on InfluxTV's own systems, this is handled exclusively by our PCI-DSS compliant payment gateway. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act and the DPDP Rules, 2025.

11Grievance Officer

In accordance with the DPDP Act, InfluxTV has appointed a Grievance Officer to address complaints regarding the processing of your personal data.

Name: Parth Nangia

Designation: Grievance Officer, Aignan Mediatech Private Limited

Email: legal@influxtv.in

Address: 3rd Floor, E52, TDI The Retreat, Sector 89, Faridabad, Haryana, 121002, India

We will acknowledge your complaint within 24 hours and aim to resolve it within 30 days. If you are not satisfied with the resolution, you may approach the Data Protection Board of India.

12Children and Minors

The Platform is intended for users 18 years of age or older, as set out in the Terms and Conditions.

Where a Viewer uses a Parent-Authorized Payment Instrument as described in the Terms and Conditions, the parent or legal guardian is the contracting party for that transaction, but is not, by virtue of that fact alone, the Data Principal for all data generated by the Platform's use. Personal data generated through the minor's own activity on the Platform, including usage data, chat content, and viewing history, relates to the minor, who remains the Data Principal for that data under the DPDP Act, regardless of who is the contracting party for payment purposes.

[This paragraph is pending a compliance decision and must be finalised before this Policy is published.]

Where InfluxTV knowingly permits use of the Platform by a minor under a Parent-Authorized Payment Instrument, Section 9 of the DPDP Act requires verifiable parental consent specifically for the processing of that minor's personal data, and prohibits processing likely to cause harm to the minor, tracking or behavioural monitoring of the minor, and targeted advertising directed at the minor. InfluxTV must either (a) implement a verifiable parental consent mechanism and the processing restrictions required under Section 9 for this user category, or (b) restrict Platform access to users who are personally 18 or older, with no minor-user pathway, and remove the Parent-Authorized Payment Instrument provision from the Terms and Conditions accordingly. This is a product and legal architecture decision, not a wording choice, and should be resolved with counsel before this Policy is finalised.

If we become aware that we have collected personal data from a minor outside whatever pathway is finalised above, we will take steps to delete it and may suspend the associated Account.

13Changes to This Policy

We may update this Policy from time to time. Material changes will be notified through a prominent notice on the Platform, an email to your registered address, or a prompt requiring acknowledgment on your next login. Continued use of the Platform after such notice constitutes acceptance of the revised Policy.