1. Introduction
Udgam Labs LLP ("we", "us", or "our") operates dm2.chat. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We process personal data to run the Service, under India's Digital Personal Data Protection Act, 2023.
2. Information We Collect
Account and profile
- Email address (required to sign in with a magic link)
- Username, display name, bio, and avatar (optional)
- Social links you add: Instagram, LinkedIn, YouTube, X, Facebook (optional)
- UPI ID (only if you want payouts)
- Verified phone number (private, 10-digit Indian mobile). When you verify a number through WhatsApp, we may securely prefill it in Razorpay checkout as +91XXXXXXXXXX so you do not have to enter it again. We do not use an unverified contact value for this. It is not shown on your public profile.
- WhatsApp authentication: When you choose WhatsApp sign-in, we use your mobile number to send a one-time authentication code through Meta's WhatsApp Cloud API. We store a hashed code challenge, its expiry, attempt count, and the IP address used for rate limiting. Authentication delivery is separate from WhatsApp account-message consent.
- WhatsApp notifications about new messages, replies, and one reminder when a reply is still pending are optional. A new account can choose them during signup OTP verification, or you can manage them in Settings; we record an enabled choice, time, and notice version. You can untick or withdraw them in Settings without affecting access to DM2.chat, and existing preferences are not reset. Authentication codes are separate from this preference. Account-message notifications are disabled until their provider templates and sending budget are configured.
Activity and records
- Follows (who you follow and who follows you)
- Credit purchases and credit balance
- Paid messages you send or receive
- Payout requests, payout records, and creator earnings records
Automatically collected
- IP address, browser, and device information typical of web use
- Usage data via Google Analytics
3. How We Use Your Information
- To provide and maintain the Service (sign-in, profiles, messages, credits, payouts)
- To process payments and send related emails
- To send account, transaction, and Service emails
- To respond to your questions and requests
- To understand usage and improve the Service
- To detect, prevent, and address technical issues and fraud
- To comply with legal obligations
4. Information Sharing
We may share your information in the following situations:
- Public profile: Your username, display name, bio, avatar, and any social links you add are publicly visible. Your phone number is not.
- Messages: In the inbox, the other person sees your display name, username, and avatar. When you send a paid message, we also email the recipient that a message arrived; that email includes your email address.
- Follows: Other users can see that you follow them, and your public follower count.
- Service providers: Meta (WhatsApp authentication and, if you opt in, account-message delivery), Razorpay (payments and verified checkout-contact prefill), Resend (email), Vercel (hosting), Supabase (database and authentication), and Google Analytics.
- Legal requirements: We may disclose information if required by law or to protect our rights.
5. Third-Party Services
We use the following third-party services:
- Meta: WhatsApp authentication and optional account-message delivery
- Supabase: Database and authentication
- Razorpay: Payment processing
- Resend: Transactional emails
- Vercel: Hosting and deployment
- Google Analytics: Site usage analytics
Each of these services has their own privacy policy governing the use of your information.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes.
8. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Opt out of marketing communications
To exercise these rights, or for a grievance, email support@dm2.chat.
9. Cookies
We use cookies and similar storage for authentication and session management. These are needed for the Service to work. We also use Google Analytics cookies to understand how the site is used.
10. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.