Privacy Policy

This policy explains how Gyankaar Technologies Private Limited (“we”, “us”, or “our”) handles information when you use the Postr mobile application, website, APIs, and related services (together, the “Service”).

By using the Service, you acknowledge the practices described here. If you do not agree, please do not use Postr.

1. Information we collect

Information you provide

• Account information: mobile number, OTP authentication records, name, and email address when supplied.
• Business profile: business name, category, logo, contact number, address, website, and the content categories relevant to your business.
• Creation content: images you upload, instructions, selected templates, custom poster fields, language, and branding details.
• Support communication: messages and supporting material you send when asking for help or a refund.

Information collected through use

• App version and flavour, IP address, request time, security and diagnostic logs, and feature activity.
• Credit balances, creation status, subscription status, and transaction history.
• Payment references and confirmation status received from PhonePe or Razorpay. We do not receive or store your full card, bank-account, or UPI credentials.

2. How we use information

• Create and secure your account, send OTPs, and detect abuse or fraud.
• Recommend relevant feed designs and personalize Postr for your business category.
• Generate posters, apply your branding, store your creations, and let you retrieve or share them.
• Process subscriptions, one-time credit purchases, cancellations, refunds, and payment reconciliation.
• Provide support, operate the Service, diagnose failures, improve performance, and meet legal obligations.

3. Images and AI processing

Your uploaded images, selected template, prompt, and branding details may be sent to our contracted AI processing services to generate the requested poster. AI output may contain errors or unexpected elements, so review it before publishing.

We use submitted content to provide, secure, troubleshoot, and improve the Service. Third-party processors handle content under their applicable service terms and our arrangements with them.

4. Service providers and disclosures

We share only the information reasonably needed for providers to perform services for Postr. Current categories include:

• Cloud hosting and media delivery: Amazon Web Services.
• AI image processing: Google Gemini and Vertex AI services.
• OTP delivery: MSG91 and ValueFirst.
• Payments: PhonePe for subscriptions and Razorpay for one-time purchases.

We may also disclose information when required by law, to protect users or the Service, to investigate misuse, or as part of a merger, reorganization, financing, or sale subject to appropriate safeguards.

5. Permissions

The app may request access to photos, media, or the camera so you can choose or capture images. You can deny or withdraw device permissions in your settings, although the related feature may stop working. Postr does not access media you do not select for use with the Service.

6. Retention

We retain account and business-profile information while your account remains active and for a reasonable period afterward where needed for security, dispute resolution, legal compliance, or backup recovery. Creations and uploaded media may remain available until deleted under our product controls or retention process.

Payment and audit records may be retained for statutory, tax, fraud-prevention, and accounting periods. OTPs expire quickly; security logs are retained only as reasonably necessary for their purpose.

7. Security

We use access controls, encryption in transit, restricted infrastructure access, logging, and other reasonable safeguards. No storage or transmission method is completely secure, and we cannot promise absolute security.

8. Your choices and rights

Subject to applicable law, you may ask to access, correct, update, or delete your personal data, withdraw consent where processing relies on consent, or raise a grievance. We may need to verify that the request relates to your account before acting on it.

To make a privacy request, email privacy@bharataiworks.com. Some records may be retained where law permits or requires it.

9. Children

Postr is intended for adults who can enter a binding agreement. We do not knowingly create accounts for children. Users are responsible for having appropriate permission before uploading an image of another person, including a child.

10. Cookies and website data

Our website may use essential local storage or cookies for security and session functionality. If analytics or optional cookies are introduced, we will provide any notice or choice required by applicable law.

11. International processing

Our providers may process information in India or other countries where they operate. When information is transferred, we take steps appropriate to the nature of the data and applicable law.

12. Changes to this policy

We may update this policy as Postr changes. We will post the revised version here and update the date above. Where required, we will provide additional notice or seek consent.

13. Contact us