Privacy Policy
Last updated: 2026-05-09 · PlaceOrder OTT activation service
1. What we collect
- Activation mobile number — required. This is the number we activate the OTT plan on. Stored against your order row so support can resolve issues later.
- Name (optional) — used on the receipt and admin notification.
- Email (optional) — used for receipt + support contact only.
- WhatsApp messages — if you message our bot, the message is processed to fulfill your order. We don't sell or share message content.
- Payment metadata — UPI transaction reference, amount, and timestamp. We don't see or store your bank account number, card details, or UPI PIN. The match between your payment and your order happens via our admin's own Gmail inbox (where the bank's notification email lands).
- IP + user-agent — logged briefly for rate-limiting and fraud-detection. Auto-purged after 30 days.
2. What we don't collect
- Your OTT account password. Activation runs through the platform's own automated tools — we never see or need it.
- Card numbers / UPI PIN / bank credentials. UPI runs entirely inside your bank's app.
- Government ID, address, or KYC data. Not required to activate an OTT plan.
3. How we use your data
- Activate your order on the chosen OTT platform.
- Send you the order confirmation, payment confirmation, and activation confirmation on WhatsApp / email.
- Resolve disputes, process refunds, and answer your support messages.
- Comply with legal requests (rare; only in response to formal Indian-jurisdiction requests).
We never use your data to send unsolicited marketing. The WhatsApp bot will only contact you about orders you actively placed (or in response to messages you sent it).
4. Who we share data with
- OTT platforms — we share the activation mobile number with the platform's official activation tool. That's the entire point of the service.
- Play Box TV (combo plans only) — combo subscriptions are delivered through the Play Box TV app. Your activation mobile number is shared with their service to activate the bundle.
- Our payment processor (UPI) — UPI is a peer-to-peer system; no third-party processor is involved beyond your bank and ours.
- Our hosting provider — server infrastructure stores order rows in encrypted form. No third-party analytics, no Facebook pixel, no Google Analytics on the checkout flow.
5. Data retention
- Order rows are retained for 7 years for tax / accounting compliance.
- WhatsApp message history is retained for 90 days for support follow-up, then deleted.
- IP + user-agent logs are retained for 30 days.
- You can request deletion of your name + email at any time (we cannot delete the order row itself due to tax law, but the personal identifiers can be redacted).
6. Cookies
We use one session cookie (my_token) only when you log in to the customer portal — required for the portal to know who you are. No third-party tracking cookies, no advertising cookies.
7. Children
This service is not directed at children under 13. We don't knowingly collect data from minors. If you believe we have, contact us and we'll delete it.
8. Your rights (DPDP Act 2023)
- Access — request a copy of all data we hold on you.
- Correction — fix any incorrect data (e.g. wrong mobile number on a recent order).
- Erasure — request deletion of personal identifiers (subject to tax-retention exceptions).
- Grievance — write to our grievance officer (contact on the main site) for any unresolved concern.
9. Changes to this policy
Material changes are highlighted at the top of this page. Continued use after a change implies acceptance.
10. Contact
WhatsApp / email support details are listed on the main site. For privacy / data-rights matters, please mention "Privacy" in the subject so it reaches the right team.
© 2026 PlaceOrder · India-based · DPDP Act 2023 compliant