Privacy Policy

Qynko is operated by Procellence Technology, a sole proprietorship in West Bengal, India (proprietor: Mou Das Duya; GSTIN 19HKNPD4604R1ZF). For the personal data described in this policy, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023.

This policy covers creators who use Qynko, visitors to qynko.com, and buyers who purchase from a creator's storefront. A creator's storefront may also show the creator's own privacy notice; that notice explains how the creator uses your details, and this policy, including the section For Buyers, explains how Qynko processes them.

• Account and profile data: Your name, email address, phone number, profile photo, bio, experience, niche, what you tell us you want to use Qynko for, languages, social links, and the content of your storefront.
• KYC and payout data: Your legal name, PAN, an image of your PAN card, a selfie holding your PAN card, your payout account details (UPI ID, or bank account number and IFSC), the name registered on that account, for a bank account an image of a cancelled cheque or bank statement, and optional business details such as business name, GSTIN and business proof documents. Documents you send us may be uploaded to your KYC record by our team. If a verification call is needed, we keep a recording (only with your consent) or written notes.
• Content data: Courses, videos, recordings, digital products, community posts, pages and other material you upload or create, with their titles, descriptions and prices.
• Buyer and contact data you manage: Details of your buyers, of the people who download your free resources (lead magnets), and of contacts you import, with the consent each gave and the messages you send them through Qynko. Contacts collected beyond your plan's contact limit are stored and stay locked until your plan covers them.
• AI data: Your Qynko Manager conversations and the inputs you give to AI features, and the output they generate.
• Transaction data: Sales, commission, refunds, disputes, withdrawals, plan purchases and invoices.
• Usage and device data: Pages visited, features used, clicks and session recordings (with form inputs masked), and your IP address, browser, operating system and device type.
• Security logs: Where we record them, the IP address, device and browser details and time of sign-ins, payout-account changes, withdrawals, KYC actions and purchases.
• Attribution data: How you found Qynko, including the Qynko landing page you came from, ad-click identifiers and campaign parameters (such as gclid, fbclid and utm parameters), which we store with your account.
• Integration data: Data from services you connect, such as your Instagram account, Telegram community and Google Calendar.
• Support data: Messages and attachments you send to our support team.
• Enquiry form data: If you fill in an enquiry form on a Qynko page, we collect your name and WhatsApp number, plus what that form asks: on the Managed Ads page, your Instagram username, follower range and monthly ad spend; on the Own App page, what you teach and how many students you have. We also record the page you sent it from and the ad or link that brought you there. Our team uses them to reply to you about that service.

We use Google Firebase Authentication to sign you in, including by one-time password (OTP) to your phone and by Google sign-in. Firebase processes your phone number or Google account details and device information for this. We receive the verification result and a secure sign-in token; we do not store your OTP.

• We collect KYC data only to verify your identity before paying you once your total earnings pass ₹5,000 (or earlier, if you choose to verify), to meet tax and legal obligations, and to prevent fraud.
• KYC documents are stored with restricted access and are available only to authorised Qynko staff who review them.
• If we ask for a verification call, we keep the time and meeting link we share and any times or note you send us to reschedule it.
• If a submission is rejected and you submit again, we keep the earlier submission and its documents with your KYC record, so our team can review your full verification history if an issue comes up.
• Your payout account details are stored in full, because we need them to pay you. Access to them is restricted to authorised staff and the systems that process payouts. When you change your payout account, we send a one-time code to your registered mobile number to confirm it is you.
• We may check the name on your payout account with Razorpay and compare it with your PAN, and check whether your PAN or payout account is linked to another account.
• We do not collect your Aadhaar number.

We may record your IP address, device and browser details and the time of sensitive actions: sign-up and sign-in, changes to your payout account, withdrawals, KYC submissions and decisions, and purchases. We use these logs only for security, fraud prevention and investigations, and to respond to lawful requests. They are not shown to other creators or buyers.

• When you use Qynko Manager or AI generation, your inputs and relevant account context are sent to our AI providers (OpenAI, Anthropic and Google Gemini) to produce a response.
• To suggest your next steps, Qynko Manager reads how your account is set up: your plan and what is left on it, your published services, lead forms, coupons, campaigns, whether Instagram is connected, your availability and any Growth Review booking. It can prepare a coupon, a campaign, an Instagram automation or a lead form for you, but nothing is created until you press Confirm. A campaign is saved as a draft and an automation is saved switched off, so nothing is sent until you send it or turn it on yourself.
• We store your Qynko Manager conversations and AI inputs and outputs so that you can see your history and we can improve responses.
• The API terms of OpenAI and Anthropic do not permit them to train their models on the data we send them.
• Market insights are built from publicly available signals and aggregated platform data, not from your personal data.

We do not sell your personal data. We share it with service providers who process it for us, only as needed for the purposes below:

• Buyers and the public: Your storefront, profile and listings are public. Buyers see your name and the details you publish.
• Advertising partners: When you sign up, first open your dashboard or buy a plan, our advertising tags may send your name, email address, phone number and country to Google and Meta to match ads and measure conversions.
• Authorities and partners: Law enforcement agencies, regulators, courts, banks and payment partners, when the law requires it, on a lawful request, or where needed to prevent fraud or protect buyers.
• Business transfer: A successor business, if Qynko is sold or transferred, under protections equivalent to this policy.
• With your consent: Anyone else, when you ask us to or agree.

Some of our service providers process data outside India, for example in the United States or the European Union. We transfer data only as permitted under Indian law, and our providers are bound by their terms to protect it.

• Strictly necessary: Sign-in sessions and security (Firebase, reCAPTCHA). Qynko does not work without them.
• Preferences: Settings such as theme and language, stored in your browser.
• Analytics: Google Analytics 4 and Microsoft Clarity, which record how pages are used; Clarity masks form inputs.
• Advertising: Google Ads and Meta Pixel, loaded through Google Tag Manager, which measure the results of our ads and may be used to show you our ads on other sites.
• Attribution: Ad-click identifiers and campaign parameters from the link you arrived by, and the Qynko landing page you last viewed (a cookie on qynko.com and its subdomains, kept for 30 days), kept in your browser and saved with your account when you sign up.

This section explains how we handle Instagram data if you use Instagram Automation.

• What we access: Through Meta's official API: your Instagram user ID, username, account type and profile picture; comments on posts you select; and the ability to reply to those comments and send direct messages to commenters who use your keywords.
• How we use it: Only to run the automations you configure. We read comments to detect keywords, post the public reply you configured where you enabled it, and send a direct message on your behalf. Automated messages include a disclosure ("🤖 Automated message") and an opt-out ("Reply STOP to opt out").
• Opt-outs: When a commenter replies STOP, we record their ID and stop sending them automated messages. The opt-out list is kept while your Qynko account exists, including after you disconnect Instagram, and is deleted when your account deletion is completed.
• Retention: Access tokens are encrypted and cleared when you disconnect or Instagram revokes access; disconnecting also pauses your automations. Comment-processing records and opt-out lists stored under your account are kept until your account deletion is completed.
• Revoking access: Disconnect at any time from Settings → Integrations → Instagram → Disconnect, or remove Qynko under Instagram Settings → Apps and Websites. Meta tells us and we disconnect automatically, which clears your access token and pauses your automations.
• Data deletion requests: When a data deletion request is submitted through Meta for an Instagram account, we delete the records in which that account appears as a commenter (processed comments and opt-outs) and, if it is the Instagram account you connected, your access token, integration and automation settings, and we return a confirmation code, as Meta's policies require. Comment-processing records and opt-out lists stored under your account are not deleted by such a request; they are deleted when your account deletion is completed.
• Meta's role: Instagram and the Instagram API are products of Meta Platforms, Inc. Our use of the API is governed by Meta's Platform Terms, and Meta's own practices by Meta's Privacy Policy.

• Data is encrypted in transit using HTTPS/TLS and stored with our cloud providers, who encrypt it at rest.
• Access to personal data is limited to authorised staff who need it for their work.
• We review sensitive actions such as payout changes and withdrawals.
• No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

We keep personal data only as long as we need it for the purposes in this policy or as the law requires:

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you have the right to:

• Information: Get a summary of the personal data we process about you, how we process it, and who we have shared it with.
• Correction and erasure: Have inaccurate or incomplete data corrected or updated, and have data erased when it is no longer needed, subject to the retention periods above.
• Withdraw consent: Withdraw consent you have given, such as for marketing, at any time. This does not affect processing already done, or processing we must do by law or to provide the service.
• Grievance redressal: Complain to our Grievance Officer about how we handle your data.
• Nomination: Nominate another person to exercise your rights if you die or become unable to do so.

If you buy from a creator on Qynko, the creator is the seller and Qynko runs the storefront, checkout and access for them. This section explains how Qynko handles your data as a buyer. The rest of this policy, including Service Providers, Cookies and Similar Technologies, Your Rights and Grievance Officer, applies to you too.

• What we collect: Your name, email address and phone number; what you bought, when, the amount paid, invoices, refunds and support tickets; course progress, session attendance and community activity; and your device and browser details. Card and bank details for payments are handled by our payment partner, Razorpay; we do not receive your full card number. If we refund a buyer or pay out their Qynko balance by bank transfer, we collect the bank account details they give us for that transfer.
• Why we use it: To complete your purchase, give you access, send confirmations, reminders and refund updates by email, WhatsApp and in-app notification, handle refunds and support, prevent fraud, and meet our legal obligations.
• What the creator receives: Your name, email address, phone number and purchase details. Buying adds you to the creator’s contacts, and the creator may send you updates and marketing about their services by email or WhatsApp. The creator is responsible for how they use your details.
• Opting out: To stop a creator’s marketing, contact the creator or write to support@qynko.com. Messages about a purchase you made continue while they are needed.
• How long we keep it: Your account data is kept while your account is active. Purchase, payment, refund and invoice records are kept for 8 years, as the Income-tax Act and GST law require.

Qynko is only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, write to privacy@qynko.com and we will delete the account.

• Name: Akshoy Duya
• Designation: Founder
• Email: grievance@qynko.com
• Address: Procellence Technology, 116B Digha Road, Nandakumar, West Bengal 721632, India

We will tell you about material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page shows the latest version.

• Privacy requests: privacy@qynko.com
• Grievances: grievance@qynko.com
• Support: support@qynko.com
• Operator: Procellence Technology (sole proprietorship; proprietor Mou Das Duya), 116B Digha Road, Nandakumar, West Bengal 721632, India. GSTIN 19HKNPD4604R1ZF.