Privacy policy

Who we are

BigDawg runs BigDawg, a service that gives independent creators a page to sell calls, webinars, digital products, personalised videos and paid messages. For data about creators and their own accounts, we are the data controller (data fiduciary under India's DPDP Act). For data about buyers, we and the creator each use it for our own purposes, as described below.

What we collect

• Account details: your email address, and your name and profile picture if you sign in with Google.
• Creator profile: display name, handle, headline, bio, photo, social links, category, country, currency, time zone, availability and offers.
• Payout details (creators): legal name, PAN, GSTIN if given, and the bank account (name, account number and IFSC) your withdrawals are sent to.
• Orders (buyers): name, email, WhatsApp number if given, time zone, answers to a creator's booking questions, messages and video requests, files you choose to attach, and what you bought.
• Payments: payment status, amounts, fees and provider reference ids. Card and UPI details go straight to Razorpay; we never see or store card numbers.
• Content: reviews you leave, replies, videos and files creators deliver, and testimonials and offers a creator imports from their own public Topmate profile.
• Technical data: a session cookie that keeps you signed in, short-lived cookies used during sign-in and referral tracking, and standard server logs (IP address, browser, time) used for security and debugging. We don't use advertising or third-party analytics cookies.

Google user data

If a creator connects Google Calendar, we ask Google for two permissions: to see when their calendar is busy (calendar.freebusy) and to create and cancel events (calendar.events).

• Busy times are used only to hide booking slots that clash with the creator's existing events. We read free/busy blocks, not event titles, descriptions or attendees, and we don't store them.
• Event access is used only to add each booking to the creator's calendar with a Google Meet link (or their own meeting link), invite the buyer, and remove the event if the booking is cancelled. We store the id of each event we create so we can cancel it.
• We store a Google refresh token, encrypted at rest by our database provider, so bookings can be added while the creator is offline. Disconnecting the calendar in Availability deletes it, and you can also revoke access at any time at myaccount.google.com/permissions.
• If you sign in with Google, we receive your name, email address and profile picture, and use them only to create and identify your account.

BigDawg's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, we don't use it to train AI models, and no person at BigDawg reads it except to fix a problem you've asked us to look at, for security, or where the law requires it.

How we use data

• To run your account, your page, bookings, deliveries, refunds and payouts.
• To send booking confirmations, reminders, receipts and account emails.
• To calculate fees, keep statements and meet tax and accounting rules.
• To prevent fraud and abuse, and to enforce our terms (for example, blocked words and blocked buyers).
• To improve the product using aggregated, non-identifying usage figures.

We rely on performing our contract with you, our legitimate interests in running a safe service, your consent where we ask for it (such as connecting Google Calendar), and legal obligations.

Who we share it with

• The creator you buy from, who sees your name, email, phone if given, answers, messages and files so they can deliver.
• Razorpay (payments, payouts and creator verification).
• Supabase (sign-in, database and file storage).
• Google (Calendar and Meet, if a creator connects them, and Google sign-in).
• Resend (sending emails).
• Our hosting provider, and professional advisers or authorities where the law requires it.

We don't sell personal data. Our providers only process it on our instructions. Some of them store data outside India or the UK; where that happens we rely on their standard contractual safeguards.

How long we keep it

We keep account data while your account is open. Order, payment and statement records are kept for 8 years to meet tax and accounting law. Delivered files and attachments are kept while the order is active and then deleted on request. If you delete your account, we delete or anonymise the rest within 30 days, apart from what the law requires us to keep.

Your rights

You can ask to see, correct, export or delete your data, withdraw consent, or object to how we use it. Creators can edit most of their data in the dashboard and export their buyer list. For anything else, email support@bigdawg.io and we'll reply within 30 days. You can also complain to your data protection authority (in the UK, the ICO; in India, the Data Protection Board).

Security

Data is sent over HTTPS, stored with providers that encrypt it at rest, and private files are only reachable through short-lived signed links. Access inside BigDawg is limited to people who need it to run the service.

Children

BigDawg is for people aged 18 or over. We don't knowingly collect data from children; if you think we have, email us and we'll delete it.

Changes

If we change this policy in a way that matters, we'll update the date above and tell signed-in creators by email or in the dashboard.

Contact

BigDawg
Email: support@bigdawg.io