Privacy Policy

Account Information:

• Name, email address, and profession (provided during registration).
• Profile information such as bio, skills, avatar, and username.
• Authentication data (hashed passwords, OTP codes).

Transaction Data:

• Coin purchase history, message transactions, and withdrawal requests.
• Payment processing is handled entirely by Razorpay. We do not store credit card numbers, CVVs, or banking credentials.

Usage Data:

• Browser type, device information, IP address, and access timestamps.
• Pages visited, features used, and interactions with the platform.

• To create and maintain your account.
• To process transactions, including coin purchases, message payments, and withdrawals.
• To send important notifications such as OTP codes, payment confirmations, and message alerts.
• To improve platform performance, security, and user experience.
• To detect and prevent fraud, abuse, and policy violations.
• To comply with legal obligations and respond to lawful requests.

We do not use your data for targeted advertising or sell it to third-party advertisers.

• Message content between senders and experts is private. Only the sender and the recipient can see the message content.
• Acrota staff do not read message content unless a dispute is filed or a Trust & Safety investigation is required.
• Messages are stored securely using encryption at rest and in transit (TLS/SSL).
• Metadata (timestamps, message IDs, transaction amounts) is retained for platform operation and dispute resolution.

We use trusted third-party services for specific functions:

• Razorpay — Payment processing (PCI DSS Level 1 certified). Razorpay Privacy Policy
• Cloudinary — Profile image storage and delivery.
• Email Service Providers — For sending OTPs, notifications, and support communications.

These providers only receive the minimum data necessary to perform their function and are bound by their own privacy policies.

• Account data is retained as long as your account is active.
• Message content is retained for up to 12 months after delivery for dispute resolution purposes.
• Transaction records are retained for up to 7 years for legal and financial compliance.
• If you delete your account, personal data is removed within 30 days. Some anonymized data may be retained for analytics.

• We use essential cookies for authentication (session tokens, refresh tokens).
• We use local/session storage for user preferences (theme, UI state).
• We do not use third-party tracking cookies or advertising pixels.

You have the right to:

• Access — Request a copy of the personal data we hold about you.
• Correction — Update or correct inaccurate information in your profile.
• Deletion — Request deletion of your account and associated personal data.
• Portability — Request an export of your data in a machine-readable format.
• Objection — Object to specific uses of your data where applicable.

To exercise any of these rights, contact us at support@acrota.com.

We may update this privacy policy from time to time. When we make significant changes, we will notify you via email or a prominent notice on the platform. Continued use of Acrota after changes constitutes acceptance of the updated policy.

For questions about this policy, contact us at support@acrota.com.