Privacy Policy

Social Mint is a marketing agency providing digital marketing, graphic design, and social media management services. This Privacy Policy applies to everyone who interacts with us — website visitors, people who submit an inquiry or lead form, and businesses who become our clients — and explains what information we collect, how we use it, and how we protect it across every stage of working with us.

By using our website, submitting a form, messaging us, or engaging us for services, you consent to the practices described in this policy.

1. Who This Policy Covers

This policy applies to three groups of people, since each interacts with us differently:

• Visitors & prospects — people browsing our website or submitting a lead form/audit request

• Clients — businesses who have engaged us for digital marketing, graphic design, or social media management services

• Client's audiences — where relevant, we note how we handle data belonging to our clients' followers/customers (e.g., if we manage a client's Instagram DMs or run ads on their behalf)

2. Information We Collect

From visitors and prospects

• Name, phone number (including WhatsApp), email address

• Business/brand name, type of business, Instagram handle

• Answers to qualifying questions on our lead forms

• Records of our WhatsApp, Instagram, email, or phone conversations with you

From clients (once you engage our services)

• Business information: brand guidelines, logos, product/service details, business registration details where needed for invoicing

• Account access: login credentials or access tokens for social media accounts (Instagram, Facebook, etc.), ad accounts (Meta Ads Manager), and any other platform we're asked to manage on your behalf

• Creative assets: photos, videos, brand assets, and files you share with us for content or design work, and the drafts/deliverables we create for you

• Billing information: invoicing details and payment records (we do not store full card numbers — payments are handled through the payment processor you pay via, not stored on our systems)

• Performance data: analytics, insights, and reporting data from the accounts/campaigns we manage for you

• Communication records: emails, WhatsApp messages, and call notes related to your account and campaigns

From our clients' audiences (only where applicable)

If part of our service involves managing a client's social media account, we may, on the client's behalf, see or respond to messages, comments, or data from that client's followers/customers. We only access this in the course of delivering the service the client has hired us for, and we do not use it for our own purposes.

We do not knowingly collect information from anyone under the age of 18.

3. How We Collect Information

• Meta Lead Ads (Instagram/Facebook Instant Forms) and other paid ad forms

• Website contact forms

• Direct messages on Instagram, Facebook, or WhatsApp

• Phone or video calls

• Onboarding documents and account-access handovers once you become a client

• Tools we use to deliver services — e.g., Meta Business Suite, Meta Ads Manager, Google Ads, Canva, Adobe Creative Cloud, scheduling/content-calendar tools, and cloud storage (Google Drive/Dropbox) used to exchange files with you

4. How We Use Your Information

• Prospects: to respond to your inquiry, assess fit, and provide the free audit/consultation you requested

• Clients: to plan, create, schedule, and manage your digital marketing campaigns, graphic design deliverables, and social media accounts; to report on performance; to invoice you; and to communicate with you about your account

• All: to improve our services and internal processes

We do not sell your personal information to third parties. We do not use client account access, creative assets, or business data for anything beyond delivering the services you've engaged us for, without your explicit permission.

5. Account Access & Credentials (specific to social media management)

Because part of our work involves managing client social media and ad accounts directly, we handle this with particular care:

• We request the minimum level of access needed to perform the agreed service (e.g., admin/editor access to a Page, rather than full account ownership, wherever the platform allows this distinction)

• Credentials and access tokens are stored securely and are not shared with anyone outside the team members actively working on your account

• Upon termination of our services, we will revoke our own access to your accounts and, on request, confirm this has been done. We do not retain standing access to a former client's accounts.

• We do not post, message, or make changes on your accounts outside the scope you've agreed to.

6. Sharing of Information

We may share information with:

• Meta Platforms, Inc. (Facebook/Instagram), as the platform through which lead ad forms are submitted and through which we deliver social media/ad management services, per Meta's Data Policy

• WhatsApp Business (Meta), for contacting you if you provide a WhatsApp number

• Other platforms/tools used to deliver your service (e.g., Google Ads, Canva, Adobe, scheduling tools, cloud storage), strictly for the purpose of that service

• Payment processors, for invoicing — we don't store your full payment details ourselves

• Legal authorities, if required by applicable law

We do not share client business data, creative assets, or account access with unrelated third parties, and we do not share any data for third-party marketing purposes.

7. Data Retention

• Prospect/lead data: retained only as long as needed to follow up on your inquiry; deleted or anonymized if you don't proceed and request removal

• Client data: retained for the duration of our engagement, plus any period required for invoicing, accounting, or legal record-keeping after the engagement ends

• Creative assets and deliverables: retained for a reasonable period after project completion for revisions/reference, unless you request earlier deletion

• Account access/credentials: not retained after your engagement with us ends (see Section 5)

8. Your Rights

Under India's Digital Personal Data Protection Act, 2023, and other applicable law, you may have the right to:

• Request access to the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request erasure of your information, subject to legal, contractual, or accounting-record exceptions

• Withdraw consent to future processing at any time

• Raise a grievance about how your data or account access has been handled

To exercise any of these rights, contact us using the details in Section 11.

9. Data Security

We take reasonable technical and organizational measures to protect personal information, business data, and account credentials against unauthorized access, alteration, disclosure, or destruction — including limiting internal access to only team members working on your account. However, no method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

10. Cookies & Website Analytics

If your website uses cookies, analytics, or the Meta Pixel (e.g., for retargeting ads), describe what's used and why here, and how visitors can manage cookie preferences. Fill this in once you confirm what's actually running on the site — don't leave it as a placeholder if something is live, since Meta's ad review can check that the policy matches the site.

11. Contact Us

Social Mint Email: [Insert business email] WhatsApp: [Insert business WhatsApp number]

For any privacy question, data request, or concern about how your account access or business data has been handled, reach out here and we'll respond within a reasonable time.

12. Changes to This Policy

We may update this Privacy Policy as our services, tools, or legal requirements change. The "Last updated" date at the top will reflect the most recent revision. If we add a new service line (e.g., a new platform we manage, or a new tool we use), we'll update the relevant section rather than replace the whole document.