Privacy Policy
On this page
Effective date: 4 October 2026
We think everyone should feel safe when they use the internet, so this policy explains in plain language what personal data DigitalTreed (digitaltreed.com) collects, why, how long we keep it, who we share it with and what you can do about it. The site is run by DigitalTreed (owned and operated by Aijaz Alam), DigitalTreed India, 117/P/28 Navin Nagar, Kanpur, Uttar Pradesh 208025, India ("DigitalTreed", "we", "us"). We act as the data fiduciary for the data described here, under India's Digital Personal Data Protection Act, 2023.
By using the site, you agree to the practices described here. Optional cookies need your separate consent in the cookie banner. If you have a question, write to [email protected].
1. The short version
- You can use the tools and read the site without an account.
- Analytics and advertising cookies load only if you agree in the cookie banner. You can change your mind at any time.
- We do not sell your personal data. Ever.
- Every newsletter and marketing email has an unsubscribe link.
- Signed-in users can download their data and ask for their account to be deleted from Privacy & cookies.
2. What we collect and why
| When you… | We collect | Why |
|---|---|---|
| Create an account | Name, email address, password (stored only as a one-way hash). If you ask to become a publisher or advertiser: your website or company name and website, niche, and a short note. | To run your account and review role requests. |
| Sign in | Time, IP address and browser (user agent) of each sign-in and active session. If you turn on two-factor authentication, its secret and recovery codes, stored encrypted. | Security: we email you about sign-ins from a new IP address, lock an account after repeated failed attempts, and show you your active sessions so you can sign them out. |
| Sign in with Google, GitHub or Facebook | Your name and email address from that provider, and the provider's ID for your account. | To link the provider to your account. We do not receive your password for that service. |
| Use the contact form | Your name, email address, subject and message, your browser (user agent) and a one-way code derived from your IP address (not the IP address itself). | To answer you and to block spam. |
| Email, call or message us, or ask for a quote | What you send us, and the email address or phone number you contact us from. This can include your company name and details of your project. | To answer you and, if you become a client, to provide the service. |
| Comment on a post | The name you give, your comment, and a one-way code derived from your IP address. We do not ask for your email address. | To publish and moderate comments. Every comment is reviewed before it appears. |
| Subscribe to the newsletter | Email address, optional name, the topics you choose, when and how you subscribed and confirmed, and a one-way code derived from your IP address. | To send the newsletter you asked for and to keep proof of your consent. We use double opt-in: nothing is sent until you confirm by email. |
| Turn on push notifications | The push address and keys your browser gives us, and the topics you chose. | To send the notifications you asked for. Push needs an account and your consent to marketing cookies. |
| Bookmark a post, tool or service | What you bookmarked and when. | To show your saved items in your dashboard. |
| Sell sponsored posts as a publisher | Your site details, and for payouts your legal name, PAN, GSTIN (if registered) and bank account (holder, number, IFSC). PAN and bank details are stored encrypted, and every time staff view them it is logged. | To verify publishers, pay earnings, deduct and report tax (TDS) and keep accounts as Indian law requires. |
| Buy sponsored posts or ads | Your order brief and target link, messages with the publisher, the ad you submit, and payment references from Razorpay. Your name and email address appear on the tax invoice. | To deliver the order or ad, issue invoices, handle disputes and refunds, and keep accounts. |
| Use the tools | Nothing that identifies you. Tools that check a web address fetch that address from our server; we do not store what you entered. | To give you the result. |
| Visit any page | Server logs: IP address, browser, date and time, the page requested and the page you came from. Logs do not contain your name or email address. | To keep the site running, find errors and block abuse. |
If you give us your email address or phone number, we may contact you by email or phone about the request you made. If you share personal data about someone else with us, please make sure you are allowed to.
We do not collect sensitive data such as health or religion. For marketplace orders and self-serve ads paid on this site, card and bank details are entered on Razorpay's checkout, not on our site. For services bought directly from us, you pay through the provider you choose (see section 4). You can always choose not to give us information by not using the feature that needs it.
Security note: we will never ask for your card PIN, OTP or net-banking password. If someone claiming to be DigitalTreed asks for them, do not share them, and report it to the police.
3. Cookies and similar technologies
Cookies are small text files stored in your browser. When you first visit, a banner asks which optional cookies you allow. Your choice is stored for 180 days. You can change it at any time from the banner or, if you are signed in, from Privacy & cookies. You can also block or delete cookies in your browser settings, though some parts of the site may not work without the essential ones.
| Category | Cookies and scripts | Without your consent? |
|---|---|---|
| Essential | digitaltreed-session (keeps you signed in during a visit), XSRF-TOKEN (protects forms), dt_consent (remembers your cookie choice, 180 days), locale (your language, 1 year), dt_voter (remembers your vote on "Was this helpful?", 1 year), remember_web_… (only if you tick "Remember me"). | Yes. The site cannot work without them. |
| Analytics | Google Analytics 4, which measures how pages are used: pages viewed, time spent, approximate location, device and where visitors came from. | No. Loaded only after you accept analytics. |
| Marketing | Google AdSense and Google Ads, the Meta (Facebook) Pixel, push notifications, and any other marketing scripts we add. These may be used to show ads based on your visits to this and other sites, and to measure our own ads. | No. Loaded only after you accept marketing. |
We keep a record of each cookie decision (what you chose, when, and which version of this policy) so that we can show your consent was given. Embedded YouTube videos use youtube-nocookie.com, and Vimeo videos are loaded with "do not track".
Advertising partners
If you accept marketing cookies, Google and other ad partners may use cookies (including Google's DoubleClick cookie), web beacons and similar technology to show ads that are more relevant to you, based on your visits to this and other websites, and to measure how ads perform. We do not control these cookies once they are set, and each partner follows its own privacy policy. You can read how Google uses data at policies.google.com/technologies/ads, and turn off personalised ads in Google's Ad Settings.
4. Who we share data with
We share personal data only with service providers that help us run the site, and only what they need:
- Razorpay: processes marketplace orders and self-serve ad payments made on this site. Card and bank details are entered on Razorpay's checkout and never reach our servers.
- The payment provider you choose for services bought directly from us (PayPal, Payoneer, Cashfree, Razorpay, your bank, or a cryptocurrency network): it receives the payment details you give it, under its own privacy policy. We receive confirmation that you paid.
- Google: Analytics, AdSense and Google Ads (only with your consent), reCAPTCHA on sign-up and forms (it sees your IP address and how you use the page, to tell people from bots), and Sign in with Google if you use it.
- Meta: the Meta Pixel (only with your consent), Facebook sign-in if you use it.
- GitHub: only if you sign in with it.
- Your browser's push service (Google, Mozilla, Microsoft or Apple): delivers push notifications you turned on.
- GTranslate and Google Translate: only if you choose a language in the footer's translate menu, your browser loads GTranslate's script and the text of that page is sent to Google to be translated. Your choice is kept in your browser. Sign-in, account and payment pages do not offer translation.
- Our web hosting, email delivery and backup providers: store the site and its encrypted backups, and send account, order and newsletter emails.
- The other party to a marketplace order: the publisher sees your brief, target link and messages, and the buyer sees the publisher's site and the published post. Neither sees the other's payment or KYC details.
Some of these providers may process data outside India. We also disclose data when the law requires it, for example to tax authorities or under a valid order of a court or government agency, or when we believe in good faith that it is needed to prevent fraud or to protect the rights, property or safety of our users or the public.
Affiliate and third-party links
Some articles contain affiliate links. If you click one and buy something, we may earn a small commission at no extra cost to you, and the affiliate network may set its own cookies to record the referral. We only recommend products and services we have used, researched or trust. Other websites we link to have their own privacy policies, and we are not responsible for them.
5. How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires. Then we delete or anonymise it.
- Account data: while your account exists. It is deleted when your deletion request is completed.
- Contact form messages: deleted automatically after 365 days.
- Newsletter: until you unsubscribe. After that, we keep only a record that you unsubscribed, so that we do not email you again.
- Sign-in sessions: expire after 2 hours of inactivity, or up to about 400 days with "Remember me".
- Orders, invoices, payouts, tax and KYC records: for as long as Indian tax and accounting laws require us to keep them (generally at least 8 years), even if you delete your account.
- Server logs: 14 days. Backups: rotated, and the oldest kept for up to 2 years. Deleted data disappears from backups as they rotate.
6. Your rights
- Access and download: signed-in users can download a copy of their account data from Privacy & cookies. For anything not in that file (for example orders or comments), write to us.
- Correction: update your profile in your dashboard, or ask us to correct anything else.
- Deletion: request account deletion from Privacy & cookies or by email. We complete it after checking that the request is yours. Records we must keep by law (see section 5) are kept until that period ends.
- Withdraw consent: change your cookie choices, unsubscribe using the link in every newsletter, turn off push notifications, or turn off order emails in your notification settings. For anything else, see "Withdrawing consent" below.
- Nominate someone to exercise these rights on your behalf if you die or become unable to, by writing to us.
- Complain: to our Grievance Officer (below), and if you are not satisfied, to the Data Protection Board of India.
Withdrawing consent
You can withdraw your consent to our processing of your personal data at any time by writing to our Grievance Officer at [email protected], with the subject line "Withdrawal of consent for processing personal data". Withdrawal does not affect processing that happened before it. If a service needs that data, we may no longer be able to provide it to you.
Visitors in the EU and UK (GDPR)
If the GDPR applies to you, you have the right to access the data we hold about you, correct it, have it deleted, restrict or object to how we process it, and receive it in a portable format. You can also complain to your local data protection authority. To use any of these rights, contact us using the details below.
California residents (CCPA)
If you live in California, you have the right to know what personal information we collect, use and disclose, to ask us to delete it, to opt out of its sale, and not to be treated differently for using these rights. We do not sell your personal information, as "sale" is defined in the CCPA. We may need to verify your identity before acting on a request, and you can make a request to know up to twice in any 12-month period.
7. Emails from us
If you subscribe to the newsletter or become a client, we may send you marketing tips, industry news, service announcements, offers or selected articles. Every marketing email includes an unsubscribe link: one click and you are off the list. If you have an account or an order, you may still receive emails about it (such as security alerts, receipts and order updates) after you opt out of marketing emails.
8. Children
The site is not directed to children under 13, and we do not knowingly collect personal data from them. Accounts are for people aged 18 or over, so please do not create one if you are under 18. If we learn that a child has given us personal data, we delete it promptly. If you are a parent or guardian and think your child has given us personal data, write to [email protected].
9. Security
The site is served over HTTPS. Passwords are hashed, and two-factor secrets, PAN and bank details are encrypted at rest. Staff accounts must use two-factor authentication, and staff access to sensitive records is logged. Backups are encrypted. No system or internet transmission is perfectly secure; if a breach affects your personal data, we will tell you and the Data Protection Board as the law requires.
10. Changes to this policy
We may update this policy when our practices or the law change. We will post the new version here with a new effective date. If a change affects your choices, we will also ask for your cookie consent again.
11. Contact and Grievance Officer
Aijaz Alam, Grievance Officer
DigitalTreed (owned and operated by Aijaz Alam)
DigitalTreed India, 117/P/28 Navin Nagar, Kanpur, Uttar Pradesh 208025, India
Email: [email protected]
We acknowledge complaints within 24 hours and aim to resolve them within 15 days. For general questions, see our contact page.