Privacy Policy

This Privacy Policy explains how Krishnasyam Adtech Private Limited (“Krishnasyam Adtech”, “we”, “us”, “our”), which owns and operates the Adlly platform (“Adlly”, the “Platform”), collects, uses, stores, shares and protects your personal data when you use Adlly as a Influencer, an advertiser/brand, or a visitor. We are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

By creating an account, accepting our Terms, or submitting any information to us, you consent to this Policy. If you do not agree, do not use the Platform. This Policy is governed by Indian law and forms part of our Terms & Conditions.

1. Who We Are

Data Fiduciary: Krishnasyam Adtech Private Limited
Brand operated: Adlly (trademark applications pending, Classes 35 & 42)
Registered location: Indore, Madhya Pradesh, India
Grievance / Data Protection contact: admin@adlly.in (see Section 12)

2. The Information We Collect

2.1 Information you give us

Identity and contact details: name, mobile number, email, city.
Financial details required to pay you or invoice you: UPI ID, bank account details, PAN. (Collected only where needed for payouts, invoicing and statutory TDS compliance.)
Social media handles, profile links, follower information and the public timeline/account where you post campaigns.
Proof-of-posting submissions: campaign post links and screenshots you upload to claim payment.
Communications you send us (WhatsApp, email, support messages) and your campaign acceptance records.

2.2 Information we collect automatically

Device, app and usage data: IP address, device identifiers, app version, log/diagnostic data, and interaction data within the Platform.
Cookies and similar technologies on our web properties (you may control these through your browser settings).

2.3 Information from third parties

KYC/verification data from authorised verification providers (e.g. PAN and Aadhaar verification partners) to confirm your identity and eligibility for payouts.
Limited public data from social media platforms, only as permitted by those platforms’ own policies and APIs.

We do not knowingly collect more data than we need for the purpose stated. We do not collect data from children below 18 years; the Platform is intended only for adults.

3. Why We Use Your Data (Purposes)

We process your personal data for the following lawful purposes:

To create and manage your account and verify your identity.
To match you with brand campaigns and operate the Influencer Advertising marketplace.
To verify that campaign posts were made (the draft-and-notify / link + screenshot process) before releasing payment.
To process payouts to Influencers and to invoice advertisers, including TDS deduction and statutory reporting.
To detect, prevent and investigate fraud, fake posting, bot activity and misuse, and to calculate trust scores.
To provide customer support and respond to grievances.
To comply with Indian law, including tax, advertising-disclosure (ASCI), and DPDP obligations, and to respond to lawful requests from authorities.
To send you service communications and, where you have opted in, campaign opportunities and marketing.

4. The Legal Basis – Your Consent

Under the DPDP Act, we process your personal data primarily on the basis of the consent you give when you register and accept our Terms. Your consent is informed, specific and may be withdrawn at any time (see Section 9). We may also process data for “legitimate uses” recognised by law, such as complying with legal obligations and preventing fraud. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide the service to you.

5. How We Share Your Data

We are not in the business of selling your personal data. We share it only as follows:

With advertisers/brands: limited campaign-performance information (e.g. that a post was made, reach metrics, proof screenshots) necessary to confirm delivery. We aim to share aggregated or pseudonymised data where possible.
With payment, banking and KYC partners: to verify identity and make payouts.
With service providers (Data Processors): hosting, cloud, analytics, communication and support vendors who act on our instructions under contract.
With government / regulatory authorities: where required by law, court order, or to protect our rights and the safety of users.
On a business transfer: if Adlly or Krishnasyam Adtech is merged, acquired or reorganised, data may transfer to the successor, subject to this Policy.

Note on public posts: when you post a brand campaign on your own social timeline, that post and its contents are public by your own choice and are governed by the relevant social media platform, not by us.

6. Disclosure on Your Posts (Advertising Law)

Indian advertising rules (ASCI Guidelines and consumer-protection rules) require that paid or sponsored posts be clearly disclosed. As a condition of using Adlly, you agree to include the disclosure labels we specify (such as #Ad, #Sponsored, or “in paid partnership”) on every campaign post. You are responsible for this disclosure on your own timeline; we may withhold payment for posts that fail to disclose.

7. Data Storage, Security & Retention

We store data on secured servers and apply reasonable technical and organisational safeguards (access controls, encryption in transit where feasible, restricted internal access).
No system is perfectly secure; you share data at your own risk and must keep your login credentials confidential.
Retention: we keep personal data only as long as needed for the purposes above or as required by law (for example, tax and TDS records are retained for the periods mandated under Indian tax law). After that, we delete or anonymise it.
In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

8. Transfers Outside India

Some of our service providers may process data on servers located outside India. Where this happens, we do so in accordance with the DPDP Act and only with providers who offer adequate protection. By using the Platform you consent to such transfers.

9. Your Rights

Subject to the DPDP Act, you have the right to:

Access a summary of the personal data we hold about you and how it is processed.
Request correction, completion or updating of inaccurate data.
Request erasure of your data where it is no longer needed and not required to be retained by law.
Withdraw your consent at any time, with the consequences described in Section 4.
Nominate another person to exercise your rights in case of death or incapacity.
Grievance redressal – raise a complaint with us, and escalate to the Data Protection Board of India if unsatisfied.

To exercise any right, contact our Grievance Officer (Section 12). We may need to verify your identity before acting on a request.

10. Cookies

Our web properties may use cookies and similar technologies for functionality, analytics and security. You can disable cookies in your browser, though some features may not work properly as a result.

11. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date will change and, for material changes, we will give reasonable notice through the app, email or WhatsApp. Continued use after changes means you accept the updated Policy.

12. Grievance Officer & Contact

In accordance with the DPDP Act and the Information Technology Act, 2000 and its rules, our Grievance Officer is:

Name: Mr. Sudhir Rathi
Designation: Grievance & Data Protection Officer, Krishnasyam Adtech Private Limited
Email: admin@adlly.in
Address: 303 Konark Apartment, 16/2 Manoramaganj, Indore (M.P.) – 452001

We will acknowledge grievances within a reasonable time and aim to resolve them within the timelines prescribed by law.

By using Adlly, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described above.