This Data Processing Policy explains, in more technical detail than our
Privacy Policy, how EarnMudra processes personal data — including our role, legal basis, processors, and retention practices.
1 Purpose & Scope
This policy sets out how EarnMudra collects, uses, stores, shares, and disposes of personal data in connection with our cashback and rewards platform. It applies to all users, and should be read together with our Privacy Policy and Terms of Service.
2 Our Role: Controller & Processor
Depending on the activity, EarnMudra acts in different capacities:
- As a data controller — when we determine why and how your account, transaction, and browsing data is used to run the platform and pay cashback
- As a data processor — when advertisers or affiliate networks instruct us to track and report offer completions on their behalf
3 Categories of Data We Process
Identity & contact data
Name, email, mobile number
Account data
Login credentials, account status, KYC where applicable
Financial data
UPI ID, bank account details for payouts
Transaction data
Offer clicks, completions, cashback and payout history
Technical data
IP address, device ID, browser type, cookies
Usage data
Pages visited, referral activity, session logs
4 Purposes & Legal Basis for Processing
Creating and managing your account
Performance of contract
Tracking offer completions and crediting cashback
Performance of contract
Processing payouts and instant payments
Performance of contract
Fraud detection and prevention
Legitimate interest
Sending offer and promotional communications
Consent / legitimate interest
Complying with legal and tax obligations
Legal obligation
5 How We Collect Data
We collect personal data:
- Directly from you, when you register, complete your profile, or contact support
- Automatically, through cookies, tracking pixels, and affiliate tracking parameters
- From advertisers and affiliate networks, who confirm transaction status and amounts
- From payment partners, when confirming payout or instant payment status
6 Third-Party Processors & Sub-Processors
We share limited data with parties who process it on our behalf or as part of completing your transaction:
- Hosting and infrastructure providers, to run and secure the platform
- Affiliate networks and advertisers, to validate offer completions
- Payment gateways, UPI providers, and banking partners, to process payouts
- Email and SMS/notification providers, to send account and transactional messages
- Analytics and fraud-prevention tools, to detect abuse and improve the platform
Processor Obligations
Every processor we work with is required to use your data only for the purpose we specify, apply appropriate security safeguards, and delete or return data when the engagement ends.
7 International Data Transfers
Some of our hosting, analytics, or communication providers may process data on servers located outside India. Where this happens, we take reasonable steps to ensure such providers maintain a comparable standard of data protection through contractual safeguards.
8 Data Retention
We retain personal data only as long as necessary for the purposes described in this policy:
- Account data — for as long as your account remains active, plus a reasonable period after closure
- Transaction and payout data — retained to meet accounting, tax, and audit requirements
- Fraud and dispute records — retained to protect against repeat abuse and for legal defense
- Marketing consent records — retained until you withdraw consent or unsubscribe
Once data is no longer required, we securely delete or anonymize it.
9 Data Security Measures
We apply technical and organizational measures appropriate to the sensitivity of the data we hold, including:
- Encryption of data in transit
- Access controls limiting data access to authorized personnel only
- Regular monitoring for suspicious account or transaction activity
- Secure storage of financial and payout information
⚠️
No System Is Fully Secure
While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10 Automated Processing & Fraud Checks
We use automated rules and scoring systems to flag potentially fraudulent transactions or accounts, such as duplicate registrations, self-referrals, or abnormal transaction patterns. Where an automated flag significantly affects your account, you may contact us to request a manual review, as described in our Dispute Resolution Policy.
11 Your Rights Regarding Processing
Subject to applicable law, you may:
- Request a copy of the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data, subject to legal and accounting retention requirements
- Object to or restrict certain processing, such as marketing communications
- Withdraw consent where processing is based on consent
12 Data Breach Notification
If we become aware of a data breach that is likely to result in a risk to your rights, we will take reasonable steps to contain it and notify affected users and, where required, relevant authorities, in line with applicable law.
13 Children's Data
EarnMudra is not intended for individuals under 18 years of age, and we do not knowingly process personal data belonging to minors. If we become aware that we have collected data from a minor, we will take steps to delete it.
14 Changes to This Policy
We may update this Data Processing Policy from time to time to reflect changes in our processing activities or legal requirements. The revised version will be posted on this page with an updated "Updated" date above.
📌
Your data, handled responsibly
By using EarnMudra, you acknowledge that your personal data will be processed as described in this policy and our Privacy Policy.
EarnMudra
© 2026 All Rights Reserved.
Data Processing Policy Version 1.0