Privacy Policy

1. Introduction & Overview

At Cointribute ("Cointribute", "we", "us", or "the Platform"), we are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, process, disclose, and safeguard your personal information when you use our web platform, donation pages, OBS stream overlay tools, chat integration software, and membership services during our Closed Beta.

This policy is prepared in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India.

2. Information We Collect

We collect information in the following categories:

3. How We Use Your Information

We process your personal information for the following lawful purposes:

• Providing Core Services: Generating donation links, rendering real-time OBS stream alerts, delivering Text-To-Speech audio, and updating live donation goals and battle leaderboards.
• Membership Management: Tracking recurring membership subscription statuses, granting digital perks, and verifying supporter entitlement.
• Financial Accounting & Payouts: Maintaining transparent payout ledgers, calculating creator earnings, and settling platform payouts to verified creators.
• Security & Abuse Prevention: Verifying HMAC signatures on incoming webhooks, screening against fraudulent payments, and preventing platform abuse.
• Communications: Sending critical transactional receipts, payout notifications, and platform system updates.

4. Payment & Financial Data Security

All monetary transactions are processed directly by our RBI-licensed Payment Aggregators (including Razorpay and Cashfree) in compliance with PCI-DSS (Payment Card Industry Data Security Standard) Level 1 standards. Cointribute only receives and stores tokenized reference identifiers (such as pay_... or sub_...) and payment status confirmations.

5. Third-Party Integrations & Data Sharing

To deliver our streaming tools, Cointribute integrates with trusted third-party service providers:

• Cloud Infrastructure & Database: Google Cloud Platform / Firebase (Firestore, Firebase Authentication) for encrypted data storage and secure authentication.
• Payment Gateways: Razorpay Software Private Limited and Cashfree Payments India Private Limited for payment link creation, subscription billing, and webhook processing.
• Broadcasting & Chat APIs: YouTube Data API v3 (Google LLC), Twitch API (Twitch Interactive, Inc.), Kick API (Kick Gaming), and Spotify Web API (Spotify AB).

We do not sell, rent, or trade your personal data to any third-party advertisers or data brokers.

6. Cookies & Local Storage

We use essential session tokens and local storage strictly to:

• Maintain your authenticated login session (Firebase Auth tokens).
• Preserve your theme, chat visibility filters, and widget preview preferences across visits.

We do not use invasive third-party cross-site advertising trackers.

7. Data Security & Storage Practices

We implement industry-standard technical and organizational security measures to protect your data, including:

• End-to-end encryption in transit via Transport Layer Security (TLS 1.3 / HTTPS).
• Data at rest encryption within Google Firebase enterprise infrastructure.
• Strict Firestore Security Rules and server-side token validation for all administrative and payout actions.
• Constant-time HMAC SHA-256 signature verification for all payment webhooks.

8. Data Retention & Deletion

We retain personal data only for as long as necessary to provide the Services and comply with statutory financial recordkeeping obligations under Indian law (e.g., GST and Income Tax records must be maintained for required statutory audit periods). Account metadata that is no longer required is permanently deleted upon user account termination.

9. Your Privacy Rights (DPDP Act)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access & Summary: Request a summary of your personal data processed by Cointribute.
• Correction & Update: Correct or update inaccurate or incomplete profile details via your account settings.
• Erasure: Request the deletion of your account and personal data, subject to statutory transaction record retention requirements.
• Grievance Redressal: Register a formal grievance with our designated Grievance Officer.

10. Children's Privacy

Cointribute does not knowingly collect personal information directly from individuals under 13 years of age. Minors between 13 and 18 years of age may only access the platform with the knowledge, supervision, and consent of a parent or legal guardian.

11. Changes to this Privacy Policy

As Cointribute evolves during and beyond the Closed Beta, we may update this Privacy Policy to reflect changes in our features, legal standards, or operational practices. We will notify you of material changes by updating the "Last Revised" date and posting an announcement on the Platform.

12. Contact & Grievance Officer

If you have any questions, data requests, or privacy concerns regarding this policy, please reach out to our team: