Legal
Privacy Policy
1. Who we are & what this covers
OVERDUE (overdue.in) is operated by Fairrate Technologies Private Limited, an influencer-marketing marketplace for creators and brands in India. This policy covers all personal data processed on the platform, including data we receive from Google and from Meta (Instagram) when you choose to connect those accounts. Last updated: 29 August 2026.
2. What we collect
Account data (name, email, password stored only as a salted scrypt hash), creator/brand profile and storefront information you provide, KYC details for payouts (PAN and bank account, encrypted — see Protection below), deal, payment and invoice records, in-app notifications and standard usage logs.
3. Google user data we access
If you sign in with Google, we receive your name, email address and profile picture (Google's basic OpenID scopes). If you connect your YouTube channel, we access — through the read-only youtube.readonly scope — your channel's statistics (subscriber, view and video counts) and the public like, comment and view counts of your recent uploads. We never access private videos, comment text, messages, watch history or anything beyond these read-only statistics, and we cannot post, upload, edit or delete anything on your Google or YouTube account.
4. How we use Google user data
Sign-in data is used solely to authenticate you and create your OVERDUE account. YouTube statistics are used to (a) display verified metrics on your own dashboard and your public creator storefront, (b) compute your engagement rate and your engine-priced rate card, and (c) refresh those numbers roughly nightly while the connection is active. We do not use Google user data for advertising and we do not sell it. No human reads it except with your permission to support you, for security or abuse investigation, or where the law requires.
5. Instagram data we access & how it's used
If you connect a professional Instagram account (via Instagram's own login), we access your username and follower count, the like and comment counts of your recent media, and aggregated follower demographics (age bands, gender split, top locations). It is used exactly like YouTube data: your storefront, your engagement rate and your rate card — nothing else.
6. Who we share platform data with
Connected-platform statistics appear where you put them to work: on your public storefront and to brands browsing the marketplace — only the metrics listed above, never your tokens or raw account access. Beyond that, we share Google and Instagram user data with no one: it is never sold, never given to data brokers or advertisers, and never transferred to third parties. Our infrastructure provider, Amazon Web Services (Mumbai, India region), stores all platform data on our behalf as a data processor. We disclose data only if validly required by law, and we notify you where legally permitted.
7. How we protect sensitive data
All traffic is encrypted in transit (HTTPS/TLS). OAuth access tokens for Google and Instagram, and KYC identifiers (PAN, bank account number), are encrypted at rest with AES-256-GCM; passwords are stored only as scrypt hashes. Access to production systems is key-based and restricted to platform administrators, every payment movement is recorded in a double-entry ledger, and platform endpoints are rate-limited.
8. Retention & deletion of Google user data
Your Google and Instagram access tokens and every statistic derived from them are deleted immediately when any of these happens: you disconnect the platform (Connected accounts → Disconnect), you revoke OVERDUE's access from your Google Account security settings (myaccount.google.com/permissions) or Instagram's Apps and Websites settings, or you delete your OVERDUE account. While a connection is active we retain only the current statistics and the history needed to show your metrics. Financial records (invoices for completed deals) are kept for statutory retention periods and then purged. Full steps are on our Data deletion page (overdue.in/legal/data-deletion).
9. YouTube API Services
OVERDUE uses YouTube API Services to read the channel statistics described above. By connecting your YouTube channel you also agree to the YouTube Terms of Service (youtube.com/t/terms). Google's handling of your data is described in the Google Privacy Policy (google.com/policies/privacy). You can revoke OVERDUE's access to your Google data at any time via your Google security settings (myaccount.google.com/permissions).
10. Your rights (DPDP)
You can access and correct your data from your profile at any time, and delete your account (with everything that entails — see Retention above) from account settings. For any privacy request or grievance, contact us and we will respond within the timelines of India's Digital Personal Data Protection Act.
11. Contact
Data & privacy questions: info@overdue.in. We'll confirm what we hold, and what was deleted and when.