Privacy Policy

Last updated: April 14, 2026

Qmoon ("we", "us", "our") operates the qmoon.in platform — a programmatic DOOH (Digital Out-of-Home) advertising platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

1. Information We Collect

We collect the following personal information:

• Account information: Email address, display name, and phone number (if provided). This is collected during registration.
• Payment information: UPI ID for payouts (screen owners). We do not store credit/debit card numbers.
• Usage data: Login timestamps, IP addresses, device information (browser user-agent). This is collected automatically for security and service improvement.
• Screen data: Screen location (city, locality), venue type, and device identifiers for registered screens.
• Creative content: Images and videos uploaded for advertising campaigns.

2. How We Use Your Information

• Authentication: To verify your identity via OTP (email or phone).
• Service delivery: To run ad campaigns, manage screens, process earnings and payouts.
• Communication: To send OTPs, platform notifications, and service updates.
• Security: To detect fraud, prevent abuse, and protect platform integrity.
• Improvement: To analyze usage patterns and improve our services.

3. Data Storage and Security

• Your data is stored on Google Cloud Platform (GCP) servers in Mumbai, India (asia-south1 region).
• All data is encrypted in transit (HTTPS/TLS) and at rest (GCP default encryption).
• Passwords are hashed using bcrypt. OTPs are hashed using SHA-256. We never store plain-text credentials.
• Access to production systems is restricted to authorized personnel only.

4. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers: Google Cloud Platform (hosting), Resend (email delivery). These providers process data on our behalf under their own privacy policies.
• Legal requirements: If required by Indian law, court order, or government authority.

5. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate data via your profile settings.
• Deletion: Request deletion of your account and all associated personal data. You can do this from your profile page or by emailing privacy@qmoon.in.
• Withdraw consent: You may stop using the platform at any time. Deleting your account removes your personal data.

6. Data Retention

• Account data is retained as long as your account is active.
• When you delete your account, your personal data (name, email, phone) is permanently removed within 30 days.
• Financial transaction records are retained for 7 years as required by Indian tax and accounting regulations.
• Anonymized usage statistics may be retained indefinitely.

7. Cookies

We use essential cookies and local storage for authentication (JWT tokens). We do not use third-party tracking cookies or analytics services.

8. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification. The "Last updated" date at the top indicates the most recent revision.

10. Contact

For privacy-related questions or data deletion requests:

• Email: privacy@qmoon.in