ReSnap
Sell Log in

Privacy Policy

Last updated: 26 October 2026

This policy explains how ReSnap handles your personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000. ReSnap is the “Data Fiduciary”.

1. What we collect

  • Instagram login: your Instagram account ID, username, name, profile picture, account type, follower and post counts, and (for sellers, once, for verification) your bio and recent post captions. We store an access token, encrypted, so we can refresh this public profile data. We cannot read your messages and we never post for you.
  • Google login: your Google account ID, name and email, plus the Instagram username you type in.
  • Listings: what you write, voice notes and photos you send in the sell chat, and the item's serial number if you give it. Serial numbers are encrypted and never shown publicly; we use them only to catch duplicate or stolen gear.
  • Photos: we re-save every photo, which removes hidden data such as GPS location and camera details.
  • Activity: when you tap “Message on Instagram” we record it so the seller can see who is interested. We also keep security logs (IP address, browser, login times) and notification subscriptions.

2. Why we use it (purposes)

  • To run your account, show listings and tell sellers who is interested.
  • To check that sellers are media professionals, and to review listings (an AI service may read the profile or chat to make a draft or suggestion; a person decides).
  • To keep ReSnap safe: stop fraud, stolen gear, spam and abuse, and meet legal duties.

We use your data only with your consent, which you give when you log in and agree to these terms, or where the law allows (for example to follow a court order). We do not sell your data and we do not show ads.

3. Who we share it with

  • Other users: your Instagram username, profile picture, seller type, “member since” date and your listings are public. When you tap “Message on Instagram”, the seller sees your Instagram username.
  • Service providers who process data for us: our hosting provider in India; Meta (Instagram login); Google (Google login); Anthropic (AI drafting and verification help, if switched on); a speech-to-text provider (if switched on); our email provider. Some of these may process data outside India, as allowed by the DPDP Act.
  • Authorities when the law requires.

4. How long we keep it

We keep your data while your account is active. Sold or expired listings stay in your dashboard until you remove them. After you delete your account we remove your profile details and token straight away and take your listings offline; we keep minimal records (for example that a deletion happened, and reports about fraud) for up to 180 days or longer if the law requires.

5. Your rights

  • Get a summary of your data, and correct or update it.
  • Withdraw consent and delete your data at any time: Account & privacy › Delete my account, or see Delete my data. Removing ReSnap from your Instagram “Apps and websites” settings also sends us a deletion request.
  • Nominate another person to act for you, as allowed by the DPDP Act.
  • Complain to our Grievance Officer, and then to the Data Protection Board of India.

6. Security

We use HTTPS everywhere, encrypt access tokens and serial numbers, keep uploads private, require two-factor login for our staff and keep an audit log of admin actions. No system is perfect; if a breach affects you we will tell you and the Board as the law requires.

7. Children

ReSnap is for adults (18+). We do not knowingly collect data of children.

8. Contact

Grievance Officer: [Name to be announced], [email to be announced]. See Grievance Officer.