Privacy Policy

1. Introduction and Overview

Welcome to ChunavPoster ("we," "our," "us," or the "Company"). ChunavPoster is a digital design service platform operated under Awesome Innovators, specializing in providing professional election campaign poster designs, social media creatives, video content, and related graphic design services for candidates participating in local body elections, panchayat elections, municipal elections, and other democratic processes across India. This Privacy Policy explains in comprehensive detail how we collect, use, store, process, share, protect, and dispose of your personal information and data when you access or use our website located at chunavposter.com (the "Website"), our mobile applications, our design services, our payment processing systems, and any other services we provide (collectively, the "Services").

This Privacy Policy is designed to comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDPA) of India, and other applicable data protection laws and regulations. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must immediately discontinue use of our Services.

We are committed to protecting your privacy and ensuring the security of your personal data. This document outlines our practices regarding information collection and usage, and we encourage you to read it carefully to understand our views and practices regarding your personal data and how we will treat it. We take our obligations regarding the protection of personal data extremely seriously and have implemented comprehensive technical and organizational measures to ensure compliance with applicable data protection legislation.

2. Information We Collect

2.1 Personal Information Provided Directly by You

When you use our Services, we collect various categories of personal information that you voluntarily provide to us. This information is essential for us to deliver our design services, process payments, communicate with you about your orders, and maintain the security and integrity of our platform. The personal information we collect includes but is not limited to:

• Identity Information: Your full name as provided during the purchase process, which is used to personalize your campaign designs, communicate with you about your orders, and maintain accurate records of our transactions.
• Contact Information: Your mobile phone number, which serves as your primary identifier on our platform and is used for OTP-based authentication, order notifications, delivery updates, customer support communications, and account recovery purposes. We may also collect your email address if voluntarily provided.
• Campaign Information: Details about your election campaign including your political party affiliation, constituency details, election symbols, slogans, biographical information, photographs, and any other content you provide for inclusion in your campaign designs. This information is collected solely for the purpose of creating customized designs as per your order specifications.
• Payment Information: Transaction details including the amount paid, payment reference numbers, transaction IDs, payment status, and payment method used. We do not directly store your credit card numbers, debit card numbers, UPI PINs, or banking credentials as these are handled securely by our payment gateway partner PhonePe.
• Communication Data: Records of your communications with us including customer support inquiries, feedback, complaints, and any other correspondence through our contact forms, email, or other communication channels.

2.2 Information Collected Automatically

When you visit or interact with our Website, we automatically collect certain technical and usage information through various technologies. This information helps us understand how our Services are being used, improve user experience, detect and prevent fraud, and maintain the security of our platform:

• Device Information: Type of device used to access our Website, operating system and version, browser type and version, screen resolution, device identifiers, and hardware configuration details.
• Network Information: Your Internet Protocol (IP) address, Internet Service Provider (ISP), approximate geographic location derived from your IP address, connection type, and network speed.
• Usage Data: Pages visited on our Website, time spent on each page, click patterns, navigation paths, search queries, features used, the date and time of your visits, referring URLs, and exit pages.
• Session Information: Session duration, frequency of visits, visitor identification using cookies and similar technologies, and interaction patterns with our pricing and discount systems.

3. Cookies and Tracking Technologies

3.1 What Are Cookies

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit our Website. They are widely used to make websites work more efficiently, provide a better user experience, and give website operators information about how the site is being used. Cookies can be "session cookies" which are deleted when you close your browser, or "persistent cookies" which remain on your device until they expire or you delete them manually.

3.2 Types of Cookies We Use

We use the following categories of cookies and similar tracking technologies on our Website:

• Essential Cookies (Strictly Necessary): These cookies are required for the basic operation of our Website. They enable core functionality such as session management, authentication (keeping you logged in), CSRF protection, shopping cart functionality, and secure payment processing. Without these cookies, our Website cannot function properly. These cookies do not collect any personally identifiable information for marketing purposes.
• Functional Cookies: These cookies allow our Website to remember choices you make such as your language preference, display settings, and visitor session information for our time-limited pricing system. They provide enhanced, more personal features and help us customize content for you.
• Analytics and Performance Cookies: We use these cookies to understand how visitors interact with our Website by collecting and reporting information about page visits, traffic sources, click behavior, and user journeys. This data helps us improve our Website's performance, identify popular content, and optimize user experience. We may use third-party analytics services that set their own cookies for this purpose.
• Visitor Tracking Cookies: We use persistent cookies to identify returning visitors for our early-bird discount pricing system. These cookies record your first visit timestamp to determine whether you qualify for time-limited promotional pricing on our packages. This is essential for operating our dynamic pricing model fairly and consistently.

3.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to block all cookies, accept all cookies, or notify you when a cookie is being set. However, please note that if you choose to block essential cookies, some parts of our Website may not function properly, and you may not be able to complete purchases or access your account. You can manage cookie preferences through your browser settings or by clearing your browser data. For specific instructions, please consult your browser's help documentation.

3.4 Third-Party Cookies

Some cookies on our Website may be set by third-party services that we use, including our payment gateway provider (PhonePe), analytics services, and content delivery networks. These third parties have their own privacy policies governing the use of cookies they set, and we encourage you to review those policies. We do not control third-party cookies and are not responsible for information collected through them.

4. Payment Processing and Financial Data

4.1 Payment Gateway - PhonePe

We use PhonePe Payment Gateway, a product of PhonePe Private Limited (a licensed entity regulated by the Reserve Bank of India), as our exclusive payment processing partner for all online transactions. When you make a payment on our platform, you are redirected to PhonePe's secure checkout environment where your payment credentials are collected and processed. PhonePe is PCI DSS (Payment Card Industry Data Security Standard) compliant, which means they adhere to the highest security standards for handling payment card information.

During the payment process, PhonePe collects and processes your payment instrument details (such as UPI ID, credit/debit card numbers, CVV, expiry dates, net banking credentials, or wallet information). This sensitive payment data is collected directly by PhonePe on their secure servers and is never transmitted to or stored on our servers. We only receive transaction confirmation details including the transaction status (success, failure, or pending), transaction reference numbers, payment method type used (UPI, Card, Net Banking), and the confirmed amount.

4.2 Payment Data We Store

On our servers, we store the following payment-related information for order management, accounting, reconciliation, and customer support purposes:

• Unique merchant transaction ID generated by our system for tracking purposes
• PhonePe order ID assigned to each transaction by the payment gateway
• Payment status (pending, completed, failed, or refunded)
• Payment reference number provided upon successful completion
• Amount paid including base price, priority charges, and applicable GST at 18%
• Whether the customer opted for standard or priority (fast lane) processing
• Timestamp of payment initiation and completion

4.3 GST and Tax Information

All payments processed through our platform include Goods and Services Tax (GST) at the applicable rate of 18% as mandated by the Government of India. The GST amount is calculated on the total service value (including any priority processing charges) and is clearly displayed to you before payment confirmation. GST invoice details are maintained in our records for compliance with Indian tax regulations and may be shared with tax authorities as required by law.

4.4 No Refund Policy

All payments made on ChunavPoster are final and non-refundable. Due to the nature of our services (custom digital design work that begins immediately upon payment confirmation), we do not offer refunds under any circumstances. This includes but is not limited to situations where you are dissatisfied with the design output, you no longer need the campaign materials, you have made a duplicate payment, the election has been postponed or cancelled, or you have changed your mind about the purchase. By making a payment, you acknowledge and agree to this no-refund policy. In rare cases of duplicate charges caused by technical errors on our payment processing system, we will investigate and may process a reversal at our sole discretion within 30 business days of the reported issue.

4.5 Payment Security

We implement industry-standard security measures to protect payment-related data including encrypted HTTPS connections for all data transmission, secure session management, server-side validation of all payment amounts, idempotency controls to prevent duplicate charges, and regular security audits of our payment integration. Our payment flow is designed such that sensitive payment credentials never touch our servers, significantly reducing the risk of data breaches involving financial information.

5. Use of Data for Artificial Intelligence and Machine Learning Training

5.1 AI Training Data Usage

By using our Services and submitting content to our platform, you expressly acknowledge and consent that your data, including but not limited to campaign content, design preferences, uploaded photographs, text content, design customization choices, and interaction patterns, may be used for the training, development, improvement, and refinement of our artificial intelligence (AI) and machine learning (ML) systems.

We are continuously investing in AI and ML technologies to improve our design capabilities, automate aspects of the design process, enhance design quality, develop new design templates, improve content recommendations, optimize our service delivery, and create more effective campaign materials for future customers. Your data plays a crucial role in this process as it helps our systems learn and understand design preferences, regional campaign aesthetics, effective visual communication strategies, and local election campaign requirements specific to various regions of India.

5.2 What Data Is Used for AI Training

The following categories of data may be used for AI/ML training purposes:

• Visual Content: Photographs, images, graphics, and visual elements submitted as part of your design orders may be used to train our image processing, face detection, background removal, color correction, and design composition algorithms.
• Text Content: Slogans, campaign messages, biographical text, and other textual content provided for designs may be used to train natural language processing models for generating campaign text suggestions, detecting language patterns, and improving translation capabilities.
• Design Preferences: Your choices regarding color schemes, layouts, fonts, style preferences, design modifications, and feedback may be used to train recommendation systems and improve automated design generation.
• Campaign Metadata: Information about election types, constituency characteristics, political party affiliations, and campaign strategies (in anonymized form) may be used to develop models that better understand regional campaign requirements.
• Usage Patterns: How you interact with our platform, which designs you view, what modifications you request, and how you use our services may be used to optimize our platform's user experience through AI-driven personalization.

5.3 AI Training Data Protection Measures

While we use your data for AI training, we implement the following protective measures:

• Personal identifiers (name, mobile number, email) are stripped from training datasets wherever technically feasible
• Training data is stored in secure, access-controlled environments separate from production databases
• AI models are designed to learn general patterns rather than memorize specific individual data points
• We regularly audit our AI systems to prevent unintended disclosure of personal information through model outputs
• Access to raw training data is restricted to authorized personnel on a need-to-know basis

5.4 Your Rights Regarding AI Training

Under applicable data protection laws, you may have certain rights regarding the use of your data for AI training. However, please note that due to the technical nature of machine learning (where individual data contributions are aggregated and transformed into mathematical model weights), it may not be technically feasible to remove your specific data contribution from an already-trained model. If you do not consent to your data being used for AI training purposes, you should not use our Services. Your continued use of our Services constitutes your ongoing consent to this data usage.

6. How We Use Your Information

We use the information we collect for the following purposes, each of which we consider to be a legitimate business interest or a necessary step for performing our contract with you:

• Service Delivery: To create, customize, and deliver campaign design packages as per your order specifications; to communicate with you about your order status; to provide customer support and respond to your inquiries.
• Payment Processing: To initiate and confirm payments through PhonePe; to calculate applicable taxes (GST at 18%); to generate invoices and receipts; to reconcile transactions; and to handle any payment-related disputes.
• Account Management: To authenticate your identity through OTP verification; to maintain your order history; to allow you to track your orders and download completed designs; and to manage your account preferences.
• Platform Improvement: To analyze usage patterns and improve our Website's performance, design quality, and user experience; to develop new features and services; to conduct research and development.
• AI and Machine Learning: To train, develop, and improve our AI/ML systems for automated and semi-automated design generation, quality improvement, recommendation systems, and service optimization as detailed in Section 5.
• Security and Fraud Prevention: To detect, prevent, and respond to fraudulent activities, unauthorized access, or other illegal activities; to monitor for suspicious behavior patterns; to protect the rights, property, and safety of our users and our Company.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and government requests; to establish, exercise, or defend legal claims; to comply with tax obligations and financial reporting requirements.
• Communication: To send you transactional notifications about your orders; to respond to your customer support requests; to send you important updates about changes to our Services, terms, or policies. We do not send unsolicited marketing communications without your explicit opt-in consent.
• Dynamic Pricing: To operate our time-limited early-bird pricing system fairly by tracking visitor sessions and ensuring promotional pricing is applied consistently within the designated discount window.

7. Data Sharing and Disclosure

7.1 Third-Party Service Providers

We may share your personal information with the following categories of third-party service providers who assist us in operating our business and delivering our Services:

• PhonePe Payment Gateway: Your payment transaction details are shared with PhonePe for payment processing. PhonePe's use of your data is governed by their own privacy policy available at phonepe.com/privacy.
• SMS/OTP Service Providers: Your mobile number is shared with our SMS gateway provider for the purpose of sending one-time passwords (OTPs) for authentication, order notifications, and delivery updates.
• Cloud Hosting Providers: Your data is stored on secure cloud infrastructure provided by our hosting partners who maintain appropriate security certifications and data protection measures.
• Design Team and Freelancers: Your campaign content (photographs, text, design specifications) is shared with our design team members who create your custom campaign materials. Design team members are bound by confidentiality agreements.
• Analytics Providers: Anonymized usage data may be shared with analytics service providers to help us understand Website usage patterns and improve our Services.

7.2 Legal and Regulatory Disclosure

We may disclose your personal information when required by law, including but not limited to:

• Compliance with any applicable law, regulation, legal process, or enforceable governmental request
• Enforcement of our Terms of Service or other agreements
• Response to claims that any content violates the rights of third parties
• Protection of the rights, property, or personal safety of ChunavPoster, our users, or the public
• Detection, prevention, or addressing of fraud, security, or technical issues
• Compliance with Election Commission of India regulations or directives related to campaign materials
• Response to requests from tax authorities including GST compliance verification

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you through a prominent notice on our Website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

8. Data Retention

8.1 General Retention Period

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The specific retention periods vary depending on the type of data:

• Order and Transaction Data: Retained for a minimum of 8 years from the date of transaction for compliance with Indian tax laws (GST record-keeping requirements) and accounting standards.
• Account Data: Retained for the duration of your active relationship with us, plus an additional 2 years after account deletion or last activity for legal compliance and dispute resolution purposes.
• Design Files: Completed designs and associated source files are retained for 1 year after delivery to facilitate re-downloads and customer support. After this period, designs may be archived or deleted at our discretion.
• Communication Records: Customer support communications and feedback are retained for 3 years for quality assurance and dispute resolution purposes.
• Visitor/Analytics Data: Anonymized analytics data may be retained indefinitely for statistical purposes. Identifiable visitor session data is retained for 1 year.
• AI Training Data: Data used for AI training may be retained in training datasets indefinitely as removing specific data points from trained models is not technically feasible.

8.2 Deleted Accounts

When you request deletion of your account, we mark your account as deleted and restrict further access. However, your data is retained in our systems for a minimum of 2 (two) years from the date of deletion request for legal compliance, regulatory purposes, fraud prevention, and to comply with any government or law enforcement requirements. After the 2-year retention period, data may be permanently deleted or anonymized at our discretion, subject to any ongoing legal obligations that may require further retention.

9. Data Security

We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include but are not limited to:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS) to prevent interception.
• Secure Authentication: We use OTP-based authentication with time-limited codes, session management with secure cookies, and protection against brute-force attacks through rate limiting and attempt-counting mechanisms.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. Administrative access requires separate authentication credentials.
• Database Security: Our databases are protected by firewalls, access control lists, encrypted connections, and regular backup procedures.
• Application Security: We implement input validation, parameterized queries to prevent SQL injection, CSRF protection, secure session handling, and other application-level security controls.
• Regular Updates: We regularly update our software dependencies, apply security patches, and conduct periodic security reviews of our codebase.
• Incident Response: We maintain an incident response plan for handling potential data breaches, including procedures for containment, assessment, notification, and remediation.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data but are committed to employing industry-standard protections appropriate to the sensitivity of the information.

10. Your Rights

Depending on applicable laws (including the Digital Personal Data Protection Act, 2023), you may have the following rights regarding your personal data:

• Right to Access: You may request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data that we hold about you.
• Right to Erasure: You may request deletion of your account and personal data, subject to our data retention obligations described in Section 8. Account deletion requires OTP verification of your registered mobile number.
• Right to Grievance Redressal: You have the right to file a complaint with our Grievance Officer or with the Data Protection Board of India if you believe your data protection rights have been violated.
• Right to Nominate: You may nominate another individual to exercise your data protection rights on your behalf in the event of your death or incapacity, as provided under applicable law.

To exercise any of these rights, please contact us using the information provided in Section 14 (Contact Information). We will respond to your request within 30 days of receipt. We may need to verify your identity before processing your request.

11. Account Deletion and Suspension

11.1 Account Deletion

You may request deletion of your account at any time through our Account Deletion page accessible from your account settings. The account deletion process requires mandatory OTP verification of your registered mobile number to prevent unauthorized deletion requests. Upon successful verification and confirmation, your account will be marked as deleted and you will no longer be able to log in to the platform or access your order history through our customer portal.

Important considerations regarding account deletion:

• Account deletion is irreversible. Once deleted, you cannot recover your account or its associated data.
• Your data will be retained for a minimum of 2 (two) years from the date of deletion for legal, regulatory, and government compliance purposes as described in Section 8.2.
• Any ongoing orders at the time of deletion will still be processed and delivered as per our service commitment.
• You will not be entitled to any refund for services already rendered or in progress at the time of deletion.
• If you wish to use our Services again after deletion, you will need to create a new account and place fresh orders.

11.2 Account Suspension

We reserve the right to suspend your account at any time, with or without prior notice, if we reasonably believe that:

• You have violated our Terms of Service or this Privacy Policy
• You have engaged in unauthorized, fraudulent, or illegal activities on our platform
• You have submitted content that violates applicable laws, including election laws, intellectual property rights, or obscenity laws
• You have attempted to exploit vulnerabilities in our system, conduct automated scraping, or interfere with our platform's operation
• You have harassed or threatened our staff, other users, or third parties through our platform
• You have attempted multiple fraudulent payment transactions or chargebacks
• Your account has been flagged by our security systems for suspicious activity
• We are required to do so by law enforcement, regulatory authorities, or court order

If your account is suspended, you will not be able to log in to the platform or place new orders. Existing completed orders and their associated designs may still be accessible depending on the reason for suspension. We will make reasonable efforts to notify you of the suspension and the reason therefor, unless we are prohibited from doing so by law or if notification could compromise an ongoing investigation.

12. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you are under 18, you may only use our Services with the involvement and consent of a parent or legal guardian. If we learn that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly. If you believe we might have any information from or about a child under 18, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will notify you by posting the updated policy on our Website with a revised "Last Updated" date. For significant changes that materially affect your rights, we may also provide additional notice through prominent Website banners or direct communications where feasible. Your continued use of our Services after the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy, our data practices, or wish to exercise your data protection rights, please contact us through the following channels:

• Company Name: Awesome Innovators (operating as ChunavPoster)
• Email: privacy@chunavposter.com
• Support Email: support@chunavposter.com
• Website: chunavposter.com
• Grievance Officer: For complaints related to data protection, you may contact our designated Grievance Officer at grievance@chunavposter.com. The Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 30 days of receipt.

15. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023. Any disputes arising out of or relating to this Privacy Policy or your use of our Services shall be subject to the exclusive jurisdiction of the courts located in Uttar Pradesh, India. By using our Services, you consent to the jurisdiction and venue of these courts and waive any objection to such jurisdiction or venue.

16. Severability

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable for any reason by a court of competent jurisdiction, such provision shall be eliminated or limited to the minimum extent such that the remaining provisions of this Privacy Policy will continue in full force and effect. The invalidity of any provision shall not affect the validity of the remaining provisions.

17. Entire Agreement

This Privacy Policy, together with our Terms of Service and any other policies referenced herein, constitutes the entire agreement between you and ChunavPoster regarding the processing of your personal data in connection with your use of our Services. This Privacy Policy supersedes any prior agreements, representations, or understandings between you and us regarding data privacy and protection.

18. Language

This Privacy Policy is drafted in English. While we may provide translations or summaries in Hindi or other regional languages for your convenience, the English version shall prevail in case of any inconsistency or dispute between the English version and any translated version.

19. Consent

By accessing our Website, creating an account, placing an order, making a payment, or otherwise using our Services, you confirm that you have read and understood this Privacy Policy in its entirety and that you freely and expressly consent to the collection, use, processing, storage, sharing, and transfer of your personal data as described herein, including but not limited to the use of your data for AI and machine learning training purposes, the retention of your data for the periods specified, and the application of our no-refund policy. If you do not consent to any part of this Privacy Policy, you must immediately cease using our Services and contact us to request deletion of any data already collected.