Offlyn for Brands
Privacy Policy
Last updated 14 October 2026
1. Who we are
Offlyn Exp Labs Private Limited, Bengaluru ("Offlyn") runs Offlyn for Brands, where brands partner with hosts at offline events. This policy explains what personal data we collect from brands, hosts and guests for these partnerships, why, and the choices you have.
We process personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the IT Act, 2000. For this data, Offlyn is the Data Fiduciary.
2. What we collect
| Who | What we collect | Where it comes from |
|---|---|---|
| Brands | Name, work email, phone, company name, GSTIN, billing details, Wallet top-ups and transactions, Offers and messages | You, and our payment provider |
| Hosts | Name, phone, email, bank account for payouts, PAN where needed for tax, Instagram handle and follower count, event details, delivery address, Proof (photos, posts, headcount) | You, and public social profiles you link |
| Guests | Name, phone, email, check-in at events, whether you agreed to receive brand follow-ups, clicks on brand links we send | You, when you book or check in on Offlyn |
| Everyone | Device and log data, IP address, app usage, cookies | Your device and browser |
We don't collect sensitive data such as health, religion or financial passwords for this product. Card and UPI details are handled by our payment provider, not stored by us.
3. How we use it
| Purpose | Data used | Basis |
|---|---|---|
| Running accounts and signing you in | Name, phone, email, login codes | Your use of the service |
| Matching brands with events | Event details, host audience and reach, brand preferences | Your use of the service |
| Pricing events in Credits | Guest count, ticket price, host reach, brand profile | Your use of the service |
| Holding funds and paying hosts | Wallet, transactions, bank details | Your use of the service; tax law |
| Counting results | Check-ins, Proof, post reach, link clicks | Your use of the service |
| Sending guests brand follow-ups | Guest name, phone, email | Guest consent |
| Invoices, GST and TDS | Business and tax details | Legal obligation |
| Preventing fraud and fake Proof | Logs, device data, Proof | Legitimate use under the DPDP Act |
| Improving the product | Usage data, aggregated results | Legitimate use; aggregated where possible |
We do not sell personal data. Brands see results as counts and totals, not who individual guests are.
4. Brand follow-up messages to guests
If you're a guest and agreed at sign-up to hear from brands, Offlyn may send you one WhatsApp message and one email the day after an event, with an offer or link from a brand that partnered with it.
- Offlyn sends these messages. The brand does not get your phone number or email.
- We count clicks on the link for 30 days and show brands the total, not who clicked.
- You can stop these anytime: reply STOP on WhatsApp, use the unsubscribe link in the email, or turn it off in your Offlyn settings.
- Saying no doesn't affect your bookings or anything else on Offlyn.
5. Who we share it with
- Between brands and hosts in a Deal. Brands see the host's name, public profile, event details and Proof. Hosts see the brand's name and Offer. A host's delivery address is shared with the brand only after a Deal is agreed.
- Service providers who work for us under contract: cloud hosting, payment gateway, WhatsApp and email delivery, analytics and customer support. They may use the data only to provide their service.
- Authorities when the law requires it, for example tax authorities or a valid court order.
- A buyer or successor if Offlyn is merged or acquired, with this policy continuing to apply.
Some providers may store data outside India. We only transfer data to countries the Indian government has not restricted, with safeguards in our contracts.
6. How long we keep it, and how we protect it
| Data | How long |
|---|---|
| Account details | While your account is open, then 12 months |
| Wallet, invoices and payouts | 8 years, as required by tax and accounting law |
| Deals, Proof and results | 3 years after the event |
| Guest follow-up consent and click counts | Until you withdraw consent, then 90 days |
| Logs and device data | 180 days |
After these periods we delete the data or make it anonymous. We use encryption in transit, access controls on a need-to-know basis, and regular security reviews. If a breach affects your data, we'll inform you and the Data Protection Board as the DPDP Act requires.
7. Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and who we've shared it with
- correct, complete or update it
- ask us to delete it, unless we must keep it by law
- withdraw consent you gave, such as for brand follow-ups
- name someone to act for you if you die or can't act yourself
- complain to our Grievance Officer, and then to the Data Protection Board of India
Email brands@offlyn.club or use the settings in the app. We respond within 30 days.
Children. Offlyn for Brands is for adults. We don't knowingly collect data from anyone under 18 for brand partnerships, and we don't send brand follow-ups to guests under 18.
8. Cookies, changes and contact
Cookies. We use essential cookies to keep you signed in and secure, and analytics cookies to see how the site is used. You can turn analytics cookies off in your browser or our cookie banner.
Changes. If we change this policy in a way that matters, we'll tell you by email or in the app before it applies.
Contact. Offlyn Exp Labs Private Limited, 235, Binnamangala, 2nd Floor, 13th Cross Road, 2nd·Stage, IndiraNagar, Bengaluru,Karnataka - 560038. Privacy questions: brands@offlyn.club.