Privacy Policy

Listeners Connect is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information, in compliance with the Information Technology Act, 2000, IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

Effective Date: 1 January 2026

1. Data We Collect

Account Data: Name, phone number, email, profile photo, gender, date of birth, marital status.
Payment Data: Transaction IDs, wallet balance, recharge history via Razorpay. We do NOT store card/UPI credentials.
Session Data: Duration, type (chat/audio/video), timestamps, ratings, and anonymized feedback.
Device Data: Device model, OS version, app version, IP address, push notification tokens (FCM).
KYC Data (Listeners only): Aadhaar number, PAN number, and document images for payout verification.

2. Purpose of Processing

Account creation, authentication (OTP via phone), and identity verification.
Facilitating session bookings and real-time communication between users and listeners.
Processing wallet recharges, session billing, gift transactions, and listener payouts.
Sending booking confirmations, session reminders, and safety alerts via push notifications.
Fraud detection, abuse prevention, and enforcing community standards.
Anonymized analytics to improve Platform features and user experience.

3. Data Storage & Security

Data is stored on AWS servers in the Asia Pacific (Mumbai) region, complying with data localization norms.
Encryption: AES-256 at rest, TLS 1.3 in transit. Phone numbers are stored as SHA-256 hashes.
Access is restricted via role-based controls with comprehensive audit logging.
OTP codes are stored only in Redis with automatic expiry — never in the database.

4. Data Sharing

We do NOT sell, rent, or trade your personal data.
Limited sharing with: Razorpay (payments), AWS (hosting), Firebase (push notifications), Agora (audio/video calls).
Disclosure to law enforcement only when required by court order or Indian law.

5. Your Rights (DPDPA 2023)

Right to Access: Request a copy of your personal data.
Right to Correction: Update inaccurate information anytime via profile settings.
Right to Erasure: Request account and data deletion (subject to legal retention).
Right to Grievance Redressal: Contact our Grievance Officer for concerns.
Right to Nominate: Designate someone to exercise your rights in case of incapacity.

6. Data Retention

Active accounts: Data retained throughout membership.
Deleted accounts: Personal data purged within 90 days, except where legally required.
Financial records: Retained for 8 years per Income Tax Act, 1961 and Companies Act, 2013.

7. Grievance Officer

For privacy concerns or data requests under DPDPA 2023:

Email: privacy@listenersconnect.com
Response time: Within 72 hours.
Listeners Connect Pvt. Ltd., New Delhi, India