Privacy Policy

Effective Date: 3 September, 2026

Last Updated: 3 September, 2026

At Tagcash Global LLP (“Tagcash Global,” “TagCash,” “Company,” “we,” “our,” or “us”), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use our Platform and Services. By using the Platform, you agree to the practices described in this Policy.

TagCash is a cashback platform. Creators connect their Instagram professional account, submit a post or reel they have published about a partner venue or brand, and receive a partial refund on their bill based on how that content performs.

1. Information We Collect from Instagram

We access your Instagram data only through the official Instagram API with Instagram Login, operated by Meta Platforms, Inc. Access is granted by you through Instagram’s OAuth consent screen and can be withdrawn by you at any time.

We request two permissions, and no others:

  • instagram_business_basic — your profile and media list
  • instagram_business_manage_insights — performance metrics on your own content

Through these permissions we collect:

  • Profile Information: Instagram account ID, username, display name, account type, profile picture, follower count, following count, and total post count
  • Content Data: Post and reel URLs, captions, media type, thumbnail images, and publication timestamps
  • Performance Metrics: Views, reach, likes, comments, shares, saves, and total interactions on content you submit to TagCash
  • Story Metrics: Views, reach, replies, and navigation data on stories you submit, collected within 24 hours of publication

What we never access: We do not read, store, or have any technical ability to access your direct messages, your Instagram password, your comment threads, the content of other users’ accounts, or any advertising or payment data. We do not post, comment, or take any action on your behalf.

2. How We Use Your Data

  • Ownership verification: To confirm that content submitted for cashback was published by your connected account, which prevents fraudulent claims on other people’s posts
  • Cashback calculation: To determine your refund amount against published performance milestones
  • Eligibility: To assign your membership tier based on follower count
  • Your dashboard: To show you the metrics we recorded for each submission and the refund they produced
  • Dispute resolution: To retain a record of the exact figures a payment was calculated from
  • Platform improvement: To analyse aggregate, de-identified usage patterns

We do not use your Instagram data for advertising, and we do not sell it.

3. How Long We Keep Your Data

  • Active accounts: Retained while your TagCash account remains active
  • On disconnection: Your access token is invalidated immediately and your Instagram data is deleted within 7 days
  • Expired connection: If your access token expires and you do not reconnect within 60 days, your Instagram data is scheduled for deletion
  • Transaction records: Refund amounts, bill references, and the metric snapshots those refunds were calculated from are retained for up to 8 years where required by Indian tax and accounting law, after which they are deleted

You can request immediate deletion at any time. See Section 5.

4. Your Rights

  • Right to access: Request a copy of the Instagram data we hold about you
  • Right to correct: Update your profile information at any time
  • Right to delete: Request deletion of your data
  • Right to disconnect: Withdraw Instagram access at any time, from TagCash or from Instagram directly
  • Right to object: Ask us to stop processing your data for a specific purpose

We respond to all requests within 7 days. Disconnecting Instagram does not delete your TagCash account or affect cashback already paid.

5. Data Deletion Instructions

Method 1: Disconnect from TagCash

  1. Log in to your TagCash account
  2. Go to Settings → Connected Accounts
  3. Select Disconnect Instagram and confirm
  4. Your access token is revoked immediately and your Instagram data is deleted within 7 days

Method 2: Remove access from Instagram

  1. Open Instagram and go to Settings and privacy
  2. Select Website permissions → Apps and websites
  3. Find TagCash and select Remove
  4. Instagram notifies our deauthorization endpoint, we revoke your token on receipt, and your Instagram data is deleted within 7 days

Method 3: Email us

Write to zaynmehra@tagcashglobal.com with the subject Data Deletion Request, from the email address registered to your TagCash account. We process these within 7 days and confirm by email when complete.

6. Access Tokens and Session Management

Instagram access tokens have limited validity:

  • Short-lived token: Valid for 1 hour, issued during the OAuth flow and immediately exchanged
  • Long-lived token: Valid for 60 days, refreshed automatically before expiry

Tokens are encrypted at rest and are never exposed to your browser, to brands, or to any third party. If you revoke access, the token is invalidated and cannot be refreshed.

7. Information We Share with Brands

Cashback is funded by the partner brand or venue. To approve a claim, that partner needs to see evidence of the content you published and how it performed. By submitting a post for cashback, you consent to us sharing the following with that specific partner, for that specific submission:

  • Your Instagram handle and profile picture
  • Follower count
  • The permalink and thumbnail of the submitted post
  • The performance metrics recorded for that post — views, reach, likes, comments, shares and saves

Please note: some of this information, including views, reach and saves, is not publicly visible on Instagram. It is private data from your account insights, and we share it only because you have submitted that post for cashback and consented to this disclosure. We share it only with the partner funding that claim, never with unrelated brands.

We do not share your email address, phone number, bank details, UPI ID, or any post you have not submitted for cashback.

8. Service Providers

We use the following processors to operate the Platform:

  • Amazon Web Services: Application hosting and storage of profile images
  • MongoDB Atlas: Database hosting
  • Meta Platforms, Inc.: Source of Instagram data, accessed via the official Instagram API

These providers process data on our instructions only and may store it on servers outside India. Where data is transferred internationally, we rely on the provider’s standard contractual safeguards. We do not sell, rent, or trade your personal information to anyone.

9. Security of Your Information

Our security measures include:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of access tokens and financial details at rest
  • Role-based access controls and authenticated sessions
  • Restricted internal access to production data

No method of transmission or storage is entirely secure, and Tagcash Global cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

10. Age Requirement

TagCash is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that we hold data belonging to someone under 18, we delete it. Instagram separately requires users to be at least 13.

11. User Responsibilities

You are responsible for ensuring the information you provide is accurate and does not infringe the rights of third parties. You must not impersonate another person or entity, connect an Instagram account you do not own, or submit content you did not publish. Submissions are automatically verified against your connected account; content published by another account will be rejected.

12. Deauthorization

When you remove TagCash from your Instagram settings, Instagram sends a signed deauthorization request to our endpoint. On receipt we invalidate your access token, mark your connection revoked, stop all further data collection, and begin deletion of your Instagram data, completing within 7 days.

13. Compliance

Our use of Instagram data complies with the Meta Platform Terms and the Instagram Platform Policy. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made thereunder.

14. Changes to this Privacy Policy

Tagcash Global may amend this Privacy Policy to reflect changes in law, regulatory requirements, or our business practices. Updates are posted on the Platform with a revised effective date. Where changes materially affect how we handle your Instagram data, we will notify you by email before they take effect.

15. Contact Us

For privacy-related questions, contact us at zaynmehra@tagcashglobal.com