Welcome to Cop&Drop's Seller Panel. This Privacy Policy explains how Cop&Drop ("we," "us," "our," or "Company") collects, uses, protects, and shares your personal information when you use our seller portal and services.
1Information We Collect
1.1Personal Information
We collect the following types of information from sellers:
- Account Information:
- – Full name and contact person details
- – Business name and registration details
- – Email address and phone number
- – Username and password
- – Profile photograph (if provided)
- Business Information:
- – Business registration documents (Certificate of Incorporation, Partnership Deed, etc.)
- – GST registration number and certificate
- – PAN card details
- – Trade license and other regulatory permits
- – Bank account details for payments
- – Business address and operating locations
- Product Information:
- – Product descriptions, images, and specifications
- – Pricing and inventory information
- – Category and brand information
- – Product compliance certificates (if applicable)
- Transaction Data:
- – Order details and sales history
- – Payment and commission information
- – Shipping and logistics data
- – Customer feedback and ratings
1.2Technical Information
- – IP address and device information
- – Browser type and version
- – Operating system
- – Access dates and times
- – Pages visited and actions taken
- – Cookies and similar tracking technologies
1.3Communication Records
- – Customer service interactions
- – Email communications
- – Chat logs and support tickets
- – Survey responses and feedback
1.4Connected Instagram Account Data
When you voluntarily connect an Instagram professional account to Cop&Drop, we may receive and process limited information from Meta's Instagram Platform, subject to the permissions you approve.
- – Instagram username, professional account identifier, and associated account or Page identifier
- – Instagram account type and basic professional account information
- – Information about media, posts, reels, or stories submitted or reviewed for completion of a Cop&Drop promotional task
- – Media identifiers, captions, publication times, permalinks, media type, and other limited task-verification information made available through the Instagram Platform
- – Connection status, permissions granted, token-related metadata, token expiry information, and the date on which the account was connected or disconnected
- – Verification results, task completion status, and Cop&Drop credits awarded in connection with the verified activity
Cop&Drop does not request your Instagram password. Your Instagram login and authorization are handled by Meta. We only receive information permitted by you through Meta's authorization process.
We do not access or use Instagram information that is unrelated to the Cop&Drop feature for which the account was connected.
2How We Use Your Information
2.1Service Provision
2.2Business Operations
2.3Improvement and Development
2.4Instagram Task Verification and Credits
Where you connect an Instagram professional account, we use the permitted Instagram information only for purposes connected with Cop&Drop's Instagram task and rewards functionality, including:
- – Connecting and identifying the Instagram professional account selected by you
- – Confirming that the connected account remains authorized and eligible to participate
- – Verifying whether a required post, reel, story, mention, tag, or other promotional task was completed
- – Preventing duplicate, invalid, manipulated, or fraudulent task submissions
- – Recording task completion and calculating, approving, or reversing Cop&Drop credits
- – Displaying the connection and verification status within your Cop&Drop account
- – Troubleshooting account connection, permission, token, or task-verification issues
- – Maintaining security, audit records, and compliance with Meta Platform requirements
Instagram information is not used to publish content, modify content, send messages, or perform actions on your behalf unless Cop&Drop separately requests the relevant permission and clearly explains that functionality before you authorize it.
3Legal Basis for Processing
Under Indian law and GDPR (where applicable), we process your information based on:
5Data Retention
We retain your personal information only for as long as:
- – Your Cop&Drop account remains active
- – Required by law, including applicable retention periods for financial and taxation records
- – Necessary for legitimate business, fraud-prevention, security, audit, dispute-resolution, and legal purposes
For a connected Instagram professional account, active connection and token metadata may be retained while the Instagram connection remains enabled. Access tokens may be refreshed, replaced, invalidated, or deleted as required to operate and secure the connection.
When you disconnect Instagram, revoke Cop&Drop's permission through Meta, or request deletion, we will delete or de-identify stored Instagram access tokens and active connection metadata within 30 days, unless a shorter period is required by applicable platform rules.
Task-verification records, such as the Instagram account identifier, media identifier, verification result, date of completion, and credits awarded, may be retained for up to 12 months after the relevant task for fraud prevention, account reconciliation, customer support, and dispute resolution.
Limited records may be retained for longer where necessary to comply with law, establish or defend legal claims, investigate misuse, or maintain financial and rewards-ledger integrity. Where possible, such records will be minimized or anonymized.
After the applicable retention period, information will be securely deleted or anonymized.
6Data Security
6.1Technical Measures
- – SSL encryption for data transmission
- – Secure database storage with access controls
- – Regular security audits and vulnerability assessments
- – Backup and disaster recovery procedures
6.2Organizational Measures
- – Employee training on data protection
- – Access controls and authorization procedures
- – Confidentiality agreements with staff and vendors
- – Regular review of security policies and procedures
8Your Rights and Choices
8.1Access and Correction
8.2Control, Disconnection and Deletion
Disconnecting Instagram stops future access through the connection but does not automatically remove credits already awarded or records that Cop&Drop must retain for fraud prevention, rewards reconciliation, legal compliance, or dispute resolution.
8.3Exercising Your Rights
To exercise these rights or request deletion of data associated with a connected Instagram account, contact us at privacyofficer@copdrop.in or contact@copdrop.in with:
- – Your full name and Cop&Drop account email address or phone number
- – Your connected Instagram username, where the request concerns Instagram information
- – A clear description of whether you want to disconnect the account, delete Instagram data, or delete your Cop&Drop account
- – Proof of account ownership or identity where reasonably required for security
After verifying the request, we will disconnect the relevant integration and delete eligible Instagram connection data within 30 days. We will inform you if any information must be retained for legal, security, fraud-prevention, financial, rewards-reconciliation, or dispute-resolution purposes.
We will respond to your request within 30 days as required by applicable law.
9International Data Transfers
- – Standard contractual clauses approved by Indian authorities
- – Data transfer agreements with adequate safeguards
- – Compliance with applicable data protection laws
10Children's Privacy
Our seller panel is intended for business use only and not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.
11Third-Party Links
Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to such external sites; please review their privacy policies separately.
12Updates to This Policy
We may update this Privacy Policy periodically to reflect:
- – Changes in our practices or services
- – Legal and regulatory requirements
- – Industry best practices and standards
12.1Notification of Changes
- – Email notification to registered sellers
- – Prominent notice on the seller panel
- – Updated “Last Modified” date on this policy
Continued use of our services after changes constitutes acceptance of the updated policy.
13Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of India, including:
- – The Information Technology Act, 2000
- – The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- – The Personal Data Protection Bill (when enacted)
- – Other applicable Indian laws and regulations
Any disputes will be subject to the exclusive jurisdiction of courts in Bengaluru, India.
14Contact Information
For privacy-related questions, concerns, or requests, contact us at:
14.1Privacy Officer/Data Protection Officer
14.2Response Time
We aim to respond to all privacy inquiries within 7–10 business days.
*This Privacy Policy was last updated on 30 June 2026. Please review it periodically for any changes.*