This policy explains what Collectt collects, why, who we share it with, and what control you have. It covers the Collectt mobile app, collectt.in, our merchant portal, the Instagram giveaways that shops run through Collectt, and the WhatsApp messages that shops send through Collectt.
Collectt is operated by Cre8 Technologies, India. Contact us any time at support@collectt.in.
| Data | Why |
|---|---|
| Name | Identifying your account and showing you to shops when you redeem a voucher |
| Mobile number | Signing in, one-time passcodes, account recovery |
| Email address | Contest results, receipts, account notices |
| Password | Stored only as a cryptographic hash — we cannot read it |
| Date of birth | Optional; confirming eligibility where a contest has an age requirement |
| Profile photo | Optional; shown on your account |
| Identity document | Only if you apply to become a verified shop or post paid tasks |
| Shop details | Merchants only: shop name, address, category, logo |
Shops can run giveaways on their Instagram posts through Collectt. A shop connects its own Instagram professional account to Collectt using Instagram's official login. We then receive the following through Meta's Instagram API:
| Data | Whose | Why |
|---|---|---|
| Instagram account ID, username, name and profile picture | The shop | Showing which account a giveaway belongs to |
| Access token (stored encrypted) | The shop | Letting Collectt read comments and send replies for that shop's giveaway. Refreshed automatically; removed when the shop disconnects |
| Your Instagram ID and username | People who comment on a giveaway post | Creating your giveaway entry and making sure there is one entry per person |
| Your comment on the giveaway post | People who comment | Recognising your entry and sending you a private reply |
| Whether you follow the shop's account | People who reply to our message | Checking the follow requirement, if the giveaway has one |
If you reply to our Instagram message, we use your reply only to check your follow status and send you your personal entry link. We do not store the text of your replies. We only receive this data from a post's comments and from direct messages sent to the connected account, and only for giveaways that shop has started. We do not read your other messages, followers list or posts. To confirm your entry you open the link we send and sign in to Collectt, which connects your Collectt account to your giveaway entry.
Shops can send WhatsApp messages to their customers through Collectt, from the shop's own WhatsApp Business number. A shop connects that number using Meta's official sign-up flow. We then handle the following through Meta's WhatsApp Business Platform:
| Data | Whose | Why |
|---|---|---|
| WhatsApp Business account and phone number IDs, display number, business name, quality rating and sending limit | The shop | Showing which number the shop is sending from and keeping within WhatsApp's limits |
| Access token (stored encrypted) | The shop | Letting Collectt send messages and manage message templates for that shop. Removed when the shop disconnects its number or deletes its account |
| Your name and mobile number, and details of the voucher, contest or giveaway the message is about (such as a voucher code or prize) | The shop's customers | Sending you the message. Used only to fill in the message the shop chose to send you |
| Whether the message was sent, delivered, read or failed | The shop's customers | Showing the shop a delivery report and refunding messages that did not go out |
| Your reply "STOP", if you send it | The shop's customers | Adding your number to that shop's do-not-message list so you are not messaged again |
The messages are of two kinds: transaction messages such as a confirmation that you claimed a voucher, redeemed it, entered a giveaway or won, and marketing messages such as an offer from a shop you have taken part in a contest or giveaway with. We do not store the text of your replies. We read an incoming WhatsApp message only to see whether it is a request to stop, and we do not read your other WhatsApp conversations.
When you claim or redeem a voucher, the shop running that contest sees your name and mobile number alongside that voucher, so they can confirm it's you and hand over a prize if you win. They also see how many times you've redeemed with them. They do not see your email, wallet balance, documents, location, or your activity with any other shop.
The shop whose giveaway you enter sees your Instagram username, your comment, whether you follow them and, once you've confirmed your entry, your Collectt name and mobile number so they can contact you if you win. They do not see your Instagram password or any other Instagram data.
A WhatsApp message is sent by the shop, from its own number, using Collectt as the tool. The shop sees the delivery status of each message it sent to you (sent, delivered, read or failed) and your number, which it already holds as your contest or giveaway partner. It does not see any other data about you from WhatsApp. If you reply STOP, that shop will not message you again.
| Provider | Purpose | What they receive |
|---|---|---|
| Google Firebase | Sign-in and push notifications | Account identifier, device token |
| Google AdMob | Non-personalised advertising in the app | Coarse device and app data only — no advertising identifier, no tracking |
| Razorpay | Payments | Payment details, handled directly by them — we never store card numbers |
| Meta Platforms (Instagram API) | Reading giveaway comments, sending private replies and checking follow status | The messages and replies we send on a shop's behalf. Meta also processes this data under its own Instagram privacy policy |
| Meta Platforms (WhatsApp Business Platform) | Delivering the WhatsApp messages a shop sends and reporting their delivery status | Your mobile number and the message content. Meta also processes this under its own WhatsApp Business terms and WhatsApp privacy policy |
| Twilio / BhashSMS | Sending one-time passcodes | Your mobile number |
After a contest is drawn we publish a results page showing entrants with partially masked details — first name and last initial, and a partial mobile number (e.g. "Priya S. · 94476···776"). This lets entrants verify the draw was fair. Your full name, full number and email are never published.
We may disclose information where the law requires it, or to investigate fraud or protect someone's safety.
Collectt shows ads through Google AdMob. We do not track you across other companies' apps or websites. Collectt does not ask for tracking permission and does not use your device's advertising identifier, so the ads you see are not personalised from your activity elsewhere. We also never share your Collectt activity with advertisers or data brokers.
You can ask us to delete the Instagram data linked to you at any time. This covers your Instagram ID and username, your comment, your follow status and your giveaway entries.
Deleting your entry means you can no longer win that giveaway. Where a draw has already happened we may keep a record of the result, without your Instagram details, so the draw can still be verified.
You can ask us to delete the WhatsApp data linked to you at any time. This covers your mobile number, your name and the values sent to you (such as a voucher code) in the WhatsApp message records that shops keep through Collectt.
We keep your number on the do-not-message list of any shop you asked to stop, and WhatsApp (Meta) keeps its own records of messages under its own policies; see Meta's privacy policy for how to manage those.
Traffic is encrypted in transit with HTTPS. Passwords are hashed with bcrypt and are not recoverable by us or anyone else. Access to production data is restricted. No system is perfectly secure, but if a breach ever affects your data we will tell you.
Collectt is not for anyone under 18. We don't knowingly collect data from children. If you believe a child has given us information, email support@collectt.in and we'll delete it.
Our servers are in India. Some service providers listed above process data elsewhere, under their own safeguards.
If we make a significant change we'll notify you in the app or by email before it takes effect. The date below always shows the current version.
Questions, requests, or a complaint about how we handle your data:
support@collectt.in
Cre8 Technologies, India