GV Mediatech
Privacy
Last updated 10 September 2026. GV Mediatech, Bengaluru, India.
This describes what we actually hold, where it sits and what you can do about it. It covers four things we run: the creator account at gvmediatech.com/creator, the free invoice tool at /invoice-generator, the GV Mediatech app for iPhone and Android, and our internal campaign desk, which creators never see but which holds records about them.
What we collect, and why
If you have a creator account
- Who you are and what you do — name, Instagram handle, city, follower count, email, WhatsApp number, the languages you create in, the categories you cover, your rate card, brands you have worked with, and whether you take barter. We use this to decide who to cast on a campaign and what to pay.
- How to pay you — account name, bank account number, IFSC, UPI ID and PAN. We ask for these only so we can pay you, and the PAN only because TDS has to be deducted above ₹30,000 in a year. We ask for them on the site and nowhere else: we will never ask for them over WhatsApp or email.
- Your work with us — the campaigns you were cast on, the fee agreed, the deliverable, the deadline, what you posted and what we paid.
If you use the invoice tool
Everything you put into it saves to your GV Mediatech account: your own details, your clients, your invoices and your payout bank accounts. This is deliberate — it is what lets the tool follow you to another device. Our team can read what you save, bank details included. That is how we pay you and how we help when something goes wrong. We do not share it with anyone else, and we do not use it to sell you anything.
Setup also lets you upload two documents, both optional and neither of them ever printed on an invoice or shown to a brand: a photo of your PAN card, which is what lets a brand deduct TDS against your PAN instead of the higher no-PAN rate, and an invoice you already use, so we can match the format you are happy with. They are stored in your account like everything else, our team can see them for those two reasons only, and you can remove either one from Setup at any time — which deletes it, rather than hiding it.
If you use the app
The app is the phone version of the same account, and it was built so it works with no account at all. If you never sign in, everything you type stays in the app's private storage on your own phone and reaches no server of ours.
Signing in turns on sync. Your profile, campaigns and invoices are copied to the same Supabase database described below, so the same account works on the website and on a replacement phone. Signing out stops it. That is the only way what you type in the app reaches us.
Payment reminders are scheduled on your own phone as ordinary notifications. Nothing is sent to a server to make them fire and we do not hold a push token for you. Declining the notification permission costs you the reminders and nothing else.
Invoices are generated on your phone. When you send one, the app hands the PDF to your own WhatsApp or mail app and stops there — we do not send it and we get no copy of the message. What happens after that is between you and WhatsApp or your email provider, under their terms rather than ours.
On launch the app downloads a small file of wording, client names and tax settings from this site, so copy can be corrected without a store update. It is a plain download and carries nothing about you.
What the app does not collect: no advertising identifier, no location, no contacts, no photos unless you pick one, no record of what you tap, and no tracking across other companies' apps or websites. There is no analytics or advertising SDK in it at all.
When you add a brand to bill — a contact name, a WhatsApp number, a finance email — you are giving us someone else's details. We hold them only to address your invoice and send your reminder. We do not market to them and we do not add them to any list.
If you are a brand or you contact us
Whatever you send us in an enquiry, and the contact details of the person we deal
with. When you use a form on this site — the launch brief, the launch readiness
check, the playbook guide or the partner referral form — we keep a copy of what you
entered, the page you sent it from, and the campaign link you arrived by (for example a
utm_ tag), so the enquiry reaches the right person and we know which of our
pages are useful. We store a one-way scrambled form of your internet address, used only
to stop spam; it cannot be turned back into the address. Only the GV Mediatech team can
read enquiries, and we never share or sell them. If you ask for the playbook guide, we
email it to you once; we don't add you to a mailing list.
Everyone who visits
We use Vercel Web Analytics, which is first-party and cookieless. It counts page views. It does not follow you across other websites and there is no advertising tracker anywhere on this site.
Where it is stored, and who can reach it
The site is hosted on Vercel. The data sits in a Supabase Postgres database in the Mumbai region, so it stays in India. Access is enforced by the database itself, not by the website: every table has row-level security, and every rule requires a signed-in user.
- You can read and change your own record. Nobody else's.
- Named GV Mediatech staff can read the roster and the campaign desk.
- Bank details go to whoever handles payments, and are checked by a person before they are used.
We do not sell your data, and we do not share it with advertisers or data brokers. The only third parties involved are the ones that run the infrastructure above, and a brand we cast you for, who is told who you are and what you are delivering — which is the point of the job.
How long we keep it
| What | How long | Why |
|---|---|---|
| Your profile and rate card | Until you delete your account | It is only useful while you want work from us |
| Bank details and PAN | Deleted as soon as you close your account | We only ever needed them to pay you |
| Campaigns, fees and payments | Kept after you leave, with your personal details stripped out | They are the other side of payments already made, and we have to be able to show them for tax and audit |
| Invoices you made in the tool | Until you delete them or your account | They are yours |
| PAN card or sample invoice you uploaded | Until you remove it, or your account goes | TDS has to be deducted against a real PAN, and we bill in a format you have already agreed to. Optional, and never shown to a brand |
| The copy held on your phone by the app | Until you delete your account in the app, or delete the app | It is on your device, not ours. Deleting the app removes it, but leaves any synced account standing — use Delete account if you mean to close it |
What you can do
- See it — everything we hold about you as a creator is on your account page.
- Take a copy — "Download my record" on that page gives you a spreadsheet of your details and every campaign you have done with us.
- Correct it — edit it yourself on the same page. Changing your rate there is what we cast from next time.
- Delete it — "Delete my account" on that page. Your bank details, PAN, phone and email are removed outright and your login goes with them. The campaigns stay on our books as described above, with nothing on them pointing back to you.
In the app, the same four things live under Setup. Delete account is there too: it removes your profile, rate card, PAN, GSTIN and bank details from your phone and from our servers, straight away and for good. You never have to email anyone to close your account.
If you would rather we did any of this for you, or you want something the page does not offer, write to nivedithg@gvmediatech.com and we will do it.
Security, honestly stated
Sign-in is by email and password through Supabase Auth, and addresses are confirmed. Every request to the database is checked against row-level security. The campaign desk is additionally behind its own passcode and locks itself after thirty minutes idle.
What we will not claim: your invoice data is stored so that our team can read it, which is a deliberate trade for being able to pay you and fix things. If you would rather we could not, do not put it in the tool.
Children
This is not for anyone under 18. We do not knowingly cast or hold records on children, and if you tell us we have, we will delete them.
Changes
If this changes in a way that matters, we will say so on this page and change the date at the top. We will not quietly widen what we do with what you have already given us.
Contact
GV Mediatech, Bengaluru, India
nivedithg@gvmediatech.com
Under India's Digital Personal Data Protection Act, 2023 you can ask us for access to your data, correction of it, or its erasure, nominate someone to act for you if you cannot, and complain to the Data Protection Board if we do not deal with you properly.
Our grievance officer is Nivedith Gajapathy. Write to him at nivedithg@gvmediatech.com and we will acknowledge it and resolve it within 90 days, and usually a great deal sooner. If personal data we hold is ever breached, we will tell the people affected in plain language and report it to the Data Protection Board of India within the time the law allows, currently 72 hours.