Privacy Notice

This Notice explains how Mixout Technologies Private Limited, the legal operator of PostRank, processes personal data when you use the service. Operator contact details are available on the Contact page.

Data we process

We process account identifiers, email address, display name, handle, avatar information, authentication and session records, public posts, post-correction audit records, comments, replies, and profile content, destination URLs, reports and support correspondence, Fund, Boost, and promotional-credit ledgers, author and community contribution totals, payment references and status, moderation and security outcomes, and first-party product analytics. A correction audit records the original and corrected description, destination, category, author, safety-review outcome, and time. We do not receive plain-text passwords from Supabase or store complete card details handled by Razorpay.

Verified Visits and fraud prevention

Verified Visits are separate from ordinary page analytics. We transiently process browser, request, network, timing, and challenge signals to suppress repeats, bots, self-clicks, manipulation, and suspicious velocity. The visit ledger stores secret-keyed hashes derived from signed browser state, a coarse network prefix, and user-agent information, along with outcomes and timing; it does not store raw IP addresses or full user agents. Infrastructure and security providers may process raw request information in short-lived operational logs.

Analytics and device storage

First-party analytics records limited events such as page type, category and post interactions, share actions, outbound attempts, and fund-flow milestones. Product analytics excludes query strings, form contents, raw IP addresses, full user agents, and payment-instrument data. We use necessary cookies or local storage for authentication, signed browser state, security, fraud suppression, and payment idempotency. We do not sell personal data or use third-party behavioral advertising cookies in the MVP.

Purposes and legal grounds

We process data to provide accounts and the leaderboard; perform contracts and payment instructions; award and reconcile credit; secure the service; prevent fraud and abuse; moderate content; respond to reports and legal requests; keep financial, tax, and audit records; communicate service information; and improve reliability. Depending on the context, processing is based on your consent, performance of our agreement, compliance with law, or permitted legitimate uses. Where consent is required, you may withdraw it as easily as reasonably possible, without affecting earlier lawful processing.

Who receives data

We use service providers only as needed to operate PostRank, including Supabase for authentication, Neon for the relational database, Cloudflare and the hosting platform for delivery and security, Cloudflare Turnstile for bot detection, Razorpay and payment participants for checkout and settlement, Google's favicon service for destination icons, and reputation or content-safety providers for link review. Favicon requests are proxied by PostRank and contain only the destination hostname, not the visitor's IP address or the submitted URL path and query. We may also disclose data to professional advisers, a successor in a corporate transaction, or authorities and other persons when required or permitted by law or necessary to protect rights and safety. Public profiles, posts, comments, replies, ranks, archives, visit totals, and aggregate author-versus-community contribution information are visible to anyone. Individual community contributor identities are not displayed publicly by default.

International processing

Providers and users may be located outside your country. Data may therefore be processed in India and other jurisdictions, subject to applicable transfer restrictions and contractual or technical safeguards. Payment data is handled under the payment provider's own notices and regulatory obligations.

Retention

Ordinary behavioral analytics is normally deleted after 180 days. Session and security data is kept only as long as needed for access and protection. Public posts, correction events, comment threads, and rank history are designed to remain archived after retirement. Original and corrected post values may be retained in a non-public audit record for moderation, payment disputes, legal claims, and platform integrity. A comment deleted while its thread is active may leave a public tombstone, while moderation and abuse records may be retained separately. Financial, payment, credit, Verified Visit, fraud, moderation, and dispute records may be kept for the life of the relevant account or post and longer where needed for reconciliation, tax, audit, legal claims, abuse prevention, or a legal retention duty. We delete or anonymize data when its purpose and required retention end.

Your rights

Subject to applicable law, you may request access to a summary of your personal data and processing, correction, completion, erasure, withdrawal of consent, and grievance redressal. You may nominate another person where applicable. We may verify your identity and may retain data that law, fraud prevention, financial reconciliation, or legal claims require. Contact the privacy or grievance address on the Contact page. You may also complain to the competent data-protection authority when that right is available.

Children

PostRank accounts, Funds, and Boosts are for people aged 18 or older. We do not knowingly create accounts for children. Contact us if you believe a child has provided personal data.

Security and changes

We use reasonable administrative, technical, and organizational safeguards, but no system is perfectly secure. Please report suspected account or data compromise promptly. We may update this Notice and will show the new date; material changes may be communicated through the service or account email.