Privacy Policy

NanoMarket is operated by Kanishk Goel. The legal name of the business is Kanishk Goel. We run a hyperlocal creator advertising network connecting creators and businesses in India. For privacy queries and data-deletion requests, contact info@nanomarket.in.

We collect information you give us, information we get from third parties (including Meta/Instagram when you connect an account), and information collected automatically when you use the site.

• Identity and contact data: name, email, phone, city, pincode, company name, password (stored as a one-way hash), and email/OTP verification records.
• Location data: approximate coordinates derived from the pincode you provide — used to match creators and businesses in the same area. We do not collect precise GPS from your device.
• Account and profile data you enter: bio, categories, languages, content formats, collaboration preferences, rates, UPI id (if you add it), portfolio URL, availability, and similar workspace fields.
• Instagram data (when you use Instagram Business Login): if you choose Connect Instagram, Meta provides us, via the Instagram API with Instagram Login, with data from the Instagram professional account you authorise. Depending on the permissions you grant and what Instagram returns, this may include: Instagram user id; username; display name; account type; biography; website; profile photo URL; follower, following, and media counts; posts, reels, and stories (including captions, media URLs, permalinks, timestamps, like and comment counts); and performance insights such as reach, views, profile views, website taps, engagement metrics, and (where Instagram makes them available, typically at 100+ followers) audience demographics such as age, city, country, and gender. We store an encrypted Instagram access token so we can refresh this data. We do not receive your Instagram password. With our current permissions we do not send messages from your account, publish to Instagram, or read private direct messages.
• Brand inquiry data: requirements, budget indications, and messages you submit.
• Technical and usage data collected automatically: IP address (as processed by hosting providers), device/browser type, pages viewed, referring URLs, cookies or similar storage needed for login/session, and event analytics we log (for example CTA clicks and form completions).
• Communications: emails and other correspondence with our team.
• Google account data (if you sign in with Google): email address, Google account id, and name, solely to authenticate you.

We do not knowingly collect data from children under 18. If you believe we have, contact us for deletion.

We process personal data only for the purposes below.

• To create and run your creator account — verify email, keep you signed in, and show your workspace.
• To display your Instagram-backed profile — show followers, following, posts, bio, and media (as Instagram provides them) to you and, where you have a public NanoMarket profile, to brands evaluating a collaboration.
• To match creators with nearby brands — using city, pincode, categories, and Instagram performance metrics.
• To suggest fair-pay rates and analytics — using follower counts and engagement insights from Instagram.
• To evaluate brand inquiries and run campaigns — including communicating with you about applications and deliverables.
• To operate, secure, and improve the Services — fraud prevention, debugging, usage analytics, and enforcing our terms.
• To comply with law and respond to lawful requests.

We do not sell your personal data. We do not use Instagram data to build unrelated advertising profiles for sale to third parties. We do not post on Instagram on your behalf unless you later grant a separate publishing permission and we tell you first.

Where applicable, we process personal data based on: (a) performance of a contract or steps prior to entering a contract (accounts, applications, and campaigns); (b) legitimate interests in operating a marketplace, preventing abuse, and improving the Services, balanced against your rights; (c) compliance with legal obligations; and/or (d) consent, including when you connect Instagram or Google.

We may share personal data with:

• Brands and agencies as needed to evaluate or run campaigns (for example handle, city, category, follower counts, and public-profile media you have already published on Instagram);
• Service providers that process data on our instructions: website hosting (Vercel), database hosting (Neon), email delivery (Resend), Google (sign-in and optional internal reporting), and Meta/Instagram (when you connect Instagram). They may only use the data to provide those services to us;
• Professional advisers and authorities where required by law or to protect rights, safety, and integrity;
• Successors in a merger, acquisition, or asset sale, subject to continued protection consistent with this Policy.

You can ask us to delete your personal data at any time. Email info@nanomarket.in from the address on your account with the subject line “Delete my NanoMarket data”. Tell us whether you want your whole account removed or only Instagram disconnected.

When we confirm the request, we will delete or irreversibly anonymise your account, application, stored Instagram access token, Instagram snapshots and insights, and profile content we hold, except limited records we must keep for legal, tax, fraud, or dispute purposes. We aim to complete deletion requests within 30 days of verifying your identity.

If you connected Instagram, you may also revoke NanoMarket's access in Instagram's app settings. That stops new data from Meta; email us if you also want copies we already stored removed. Accepted creators can manage optional email updates at /email-preferences.

Our infrastructure providers may process data in jurisdictions outside India (including where Vercel, Neon, Resend, Google, or Meta host systems). Where we transfer personal data internationally, we take steps designed to ensure an adequate level of protection consistent with applicable law.

We keep account, Instagram, inquiry, and campaign records for as long as your account is active and as needed afterwards to operate the Services, resolve disputes, enforce agreements, and meet legal, tax, and audit requirements. Encrypted Instagram tokens are kept only while Instagram remains connected or until the token expires and cannot be refreshed. Analytics events may be retained for shorter operational periods and then deleted or aggregated.

We implement technical and organisational measures designed to protect personal data, including encrypted storage of Instagram access tokens and hashed passwords. No method of transmission or storage is completely secure; you use the Services at your own risk with respect to residual security risks.

Subject to applicable law, you may also request access, correction, or an update of certain personal data, or withdraw consent where processing is consent-based (without affecting prior lawful processing). Contact info@nanomarket.in. We may need to verify your identity.

We and our providers may use cookies, local storage, and similar technologies for essential site function (including login sessions), security, and analytics. You can control cookies through browser settings; disabling some cookies may affect site functionality (for example staying signed in).

Instagram, Meta, and Google are independent controllers of data they hold on their own platforms. Their practices are described in their privacy policies. When you connect Instagram, Meta also processes data under Meta's terms. We are not responsible for processing that occurs on those platforms outside our instructions.

We may update this Policy by posting a revised version at this URL with a new effective date. Material changes may be communicated by email or site notice. Continued use after the effective date constitutes acknowledgment of the updated Policy.

Privacy and deletion requests: info@nanomarket.in. Website: https://nanomarket.in. Privacy Policy URL to list in the Meta App Dashboard: https://nanomarket.in/privacy.