This Privacy Policy explains how Chutta & Chutti collects, uses, stores, and protects information when you visit our website, submit a collaboration inquiry, create or access a client account, view invoices, use invoice share links, communicate with us, or interact with our services.

By using this website or contacting us through it, you agree that your information may be handled as described in this Privacy Policy.

We may collect information you voluntarily submit through contact forms, signup forms, invoice-related forms, or direct communication channels. This may include your name, email address, phone number, brand or business name, budget range, inquiry details, campaign requirements, messages, and other information you choose to provide.

If you create or request a client account, we may store account details such as your name, email address, phone number, brand or business name, account role, approval status, account creation date, login activity, and account security status.

If you sign in using Google, we may receive basic account information from Google, such as your name and email address, only as needed to authenticate your account and connect it with your Chutta & Chutti client profile.

When invoices are created for customers, we may store invoice-related information such as client details, invoice number, invoice items, due date, notes, terms, total amount, paid amount, balance amount, payment request type, payment method, payment records, invoice activity records, and invoice status.

We may also collect limited website interaction data, such as clicks on important buttons, WhatsApp buttons, package buttons, social links, portfolio links, invoice actions, navigation links, and the page path where the action happened. This helps us understand how visitors use the website and improve the user experience.

We use collected information to:

• Respond to collaboration inquiries and business messages.
• Discuss food review campaigns, packages, pricing, and deliverables.
• Create, send, manage, and track invoices.
• Provide client dashboard access to approved clients.
• Record manual payment updates and invoice statuses.
• Send invoice emails, password reset emails, and service-related messages.
• Protect accounts using login security and two-factor authentication features.
• Review and approve client account requests.
• Improve our website, services, packages, content, and user experience.
• Maintain business, invoice, communication, and security records.
• Protect the website, admin area, moderator area, and client area against misuse or unauthorized access.

Client accounts are intended for approved Chutta & Chutti clients so they can access their dashboard and view invoices related to their account. Client account requests may require owner approval before the account becomes active.

Account access may be protected using passwords, Google sign-in, password reset links, two-factor authentication, backup-code verification, session checks, and account approval status checks.

Security-related account information may include login attempt records, password reset token records, two-factor authentication setup status, verification timestamps, backup-code records, and session-related information needed to keep accounts secure.

Our website includes an invoice system that allows Chutta & Chutti to create invoices for collaborations and make them available to approved clients. Normal invoice pages are intended for the relevant client account or authorized staff users.

Clients may be able to create temporary guest invoice share links. These links are intended only for people the client chooses to share them with. Guest links may include expiry settings, active/revoked status, view counts, and last viewed timestamps. Anyone with a valid active guest link may be able to view the related invoice until the link expires or is revoked.

Manual payment records may include payment amount, payment purpose, payment method, payment status, and payment date. These records are used to keep invoice balances and payment statuses accurate.

If online payment gateway features are enabled in the future, payment processing may be handled by a third-party payment provider. We do not intend to store full card numbers, banking passwords, or sensitive payment authentication details on our own website.

When you submit an inquiry, create an account, request a password reset, receive an invoice, or work with us, we may contact you by email, phone, WhatsApp, or other contact methods you provide.

We may use an email delivery provider to send invoice emails, password reset emails, account-related emails, security alerts, and service-related communication. We do not sell your contact details to third parties.

To protect the website and manage content safely, Chutta & Chutti uses owner, moderator, and client account roles. Moderator actions may be stored as approval requests so the owner can review changes before they affect the live website, invoices, payments, emails, or public content.

To protect the admin and account areas, we may store security-related records such as failed login attempt information, attempted email address, IP address, browser or device user-agent, attempt result, and security reason. This helps detect repeated failed login attempts, rate-limit suspicious activity, and protect the website from unauthorized access.

We use internal click tracking to understand which website actions are useful, such as package clicks, contact clicks, WhatsApp clicks, social clicks, navigation clicks, invoice-related clicks, and portfolio clicks. This data is used for business improvement and does not intentionally collect sensitive personal information.

Click tracking may be protected with basic rate limiting to reduce spam, abuse, and excessive automated requests.

Chutta & Chutti may upload and store media such as images, videos, portfolio visuals, hero media, and worked-with brand logos for website display and portfolio management purposes.

Uploaded media may be stored using third-party media storage or upload services. When media is deleted through the admin panel, we aim to remove related storage files where technically possible.

Worked-with brand logos are used only to show past or current collaboration relationships, subject to the details explained in our Brand Logo Policy.

Our website may use trusted third-party services for hosting, database storage, authentication, Google sign-in, email sending, file and media storage, analytics or click tracking, communication, and future payment processing. These services may process limited information only as needed to provide their services.

Examples may include website hosting providers, database providers, authentication providers, email delivery providers, media upload or storage providers, Google authentication services, payment gateway providers, and communication platforms such as WhatsApp.

We keep inquiry records, account records, invoice records, payment records, approval records, security records, and related communication only for as long as reasonably necessary for business, record keeping, customer support, legal, accounting, or security purposes.

Internal click tracking records may be cleaned periodically, such as after 30 days, to reduce unnecessary database storage.

Some invoice, payment, account, or approval records may need to be retained for longer periods for business, accounting, legal, security, audit, or dispute-resolution reasons.

We take reasonable steps to protect information submitted through the website, including authentication, account approval, role-based access controls, two-factor authentication features, password reset protections, rate limiting, moderator approval controls, and controlled admin access.

However, no internet-based service is completely secure, and we cannot guarantee absolute security.

You may contact us to request access, correction, or deletion of personal information you have submitted to us, subject to legal, accounting, invoice, security, audit, or business record-keeping requirements.

Approved clients can contact us if they need help with account access, invoice visibility, guest share links, or account-related details.

We may update this Privacy Policy from time to time as our website, services, account features, invoice system, email features, security controls, or payment features change. The updated version will be posted on this page with the latest update date.