Loading page…
Secure connection · rekonio.comBrands and creators, connected
Connecting brands and creators…
Secure connection · rekonio.comBrands and creators, connected
Connecting brands and creators…
Loading page…
How Rekonio collects, uses, shares, protects and deletes your personal data — and the rights you have under Indian law.
BYMJK Enterprises ("Rekonio") ("we", "our", "us") operates an influencer–brand marketplace for the Indian market. Our registered office is at Village Mirzapur, Mandi Ateli, Mahendragarh, Haryana 123021, India. For the personal data described here we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") — we decide why and how it is processed.
This policy applies to rekonio.com, our apps and our emails. It is written to meet the DPDP Act and the rules made under it, the Information Technology Act, 2000 and its rules on sensitive personal data, and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
Rekonio is for people aged 18 and over. Where we rely on your consent, we ask for it separately and clearly, and you can withdraw it at any time.
What we collect, and where it comes from
Why we process your data, and the lawful ground for each purpose
| Purpose | Legal basis |
|---|---|
| Create and run your account; match creators and brands; deals, messaging, milestone payments and payouts | Your consent when you sign up and use the service |
| Identity verification (PAN) for creators | Your specific consent on the Verification page, and compliance with tax law for TDS |
| Invoices, TDS and accounting records | Compliance with law (DPDP Act s.7) |
| Fraud prevention, security, preventing duplicate or fake accounts | Your consent, and compliance with law where it requires it |
| Responding to courts, regulators and law enforcement | Compliance with law or a court order (DPDP Act s.7) |
| Product analytics | Your consent through the cookie banner — off unless you opt in |
| Product updates and marketing emails | Your consent — you can unsubscribe any time |
We do not sell your personal data, and we do not use it for purposes you would not reasonably expect from the descriptions above.
Creators verify their identity with their PAN before unlimited withdrawals. We collect only legal name, date of birth, PAN and one PAN card image, and only after showing a separate notice and asking for your consent.
Your PAN is encrypted before it is stored. Only authorised compliance staff can view it or your PAN card image, and every view is logged. Brands see only the Verified badge. We delete the PAN card image 30 days after review. You can withdraw consent from the Verification page at any time.
Full details: Identity Verification & Your Data.
Your public profile is visible to other users. Deal details, messages and deliverables are visible only to the parties to that deal. Identity verification data is never shared with other users.
These providers process data only on our instructions, under contracts that require confidentiality and reasonable security safeguards:
We share data with the Income Tax Department for TDS filings, and with courts, regulators or law enforcement when required by law or a valid order — and only what is required.
If Rekonio is merged or acquired, your data may move to the new owner, who must keep honouring this policy. We will tell you before that happens.
Some of our processors store or process data on servers outside India. We transfer data abroad only as the DPDP Act allows — never to a country the Government of India has restricted — and require the same level of protection wherever it is processed.
We delete data once it is no longer needed for its purpose, unless the law requires us to keep it
| Data | Retention |
|---|---|
| Account and profile data | While your account is open. Deleted within 30 days of a verified deletion request, except the records below. |
| Deals, messages and deliverables | While your account is open, and afterwards only as long as needed to resolve disputes or legal claims. |
| Payments, invoices, payouts and TDS records | Up to 8 years after the end of the relevant financial year, as Indian tax and accounting laws require. |
| PAN card image (KYC) | Deleted 30 days after our review decision; never-submitted uploads after 7 days. |
| Full PAN (encrypted) | Erased 30 days after a rejection or when you withdraw consent — unless you have been paid, when it stays with your tax records for the period above. |
| Consent records, security, access and audit logs | At least 1 year, and as long as needed to show lawful processing or investigate misuse. |
| Analytics data (only if you opted in) | Kept for a limited period by our analytics provider, then deleted or aggregated. |
Rekonio is not for anyone under 18. We do not knowingly collect personal data from children, and we do not track, profile or target advertising at children. If we learn that an account belongs to someone under 18, we will close it and delete their data. If you believe a child is using Rekonio, contact dpo@rekonio.com.
Under the DPDP Act, 2023
Withdrawing consent does not affect processing that already happened, and some features (for example unlimited withdrawals) need the data to work. Under the DPDP Act you also have duties: provide accurate information, don't impersonate anyone, and don't file false or frivolous complaints.
Our Grievance Officer handles privacy requests and complaints.
Grievance Officer
BYMJK Enterprises
Village Mirzapur, Mandi Ateli, Mahendragarh, Haryana 123021, India
dpo@rekonio.comWe acknowledge grievances within 24 hours and aim to resolve them within 15 days — and always within the time the law allows. If you are not satisfied with the outcome, you can complain to the Data Protection Board of India.
We will post any change here with a new version number and date. For material changes we will notify you by email or in the app before they take effect, and ask for your consent again where the law requires it.
This Privacy Policy (version 2.0) is effective from October 2026.