Effective date: June 8, 2026

Who Operates Cravgen

Cravgen is operated by HASHMARK (PRIVATE) LIMITED ("we", "us", "our"). HASHMARK (PRIVATE) LIMITED provides the Cravgen software platform for influencer–brand collaboration, social publishing, analytics, automation, and lead engagement.

Marketing website: https://www.cravgen.com
Application: https://admin.cravgen.com
Company: HASHMARK (PRIVATE) LIMITED

This Privacy Policy describes how we collect, use, store, share, and delete information when you visit our website, create an account, connect social platforms, publish content, run campaigns, or use marketplace and automation features. By using Cravgen you agree to this policy and our Terms & Conditions.

1. Information We Collect

• Account data: name, email address, organization, role, login credentials, subscription and billing details you provide when registering or upgrading a plan.
• Connected social accounts: platform identifiers, Page or profile names, usernames, profile images, follower counts, permissions you grant, access tokens (stored securely), and metadata returned by platforms you authorize.
• Collaboration and influencer data: campaign briefs, creator profiles, marketplace listings, brand–creator communications, performance metrics, and eligibility information needed for collaborations you participate in.
• Content and campaign data: posts, captions, media, schedules, drafts, comments, insights, and lead-form submissions you create or import.
• Usage and technical data: IP address, device/browser type, logs, cookies, session identifiers, and product analytics used for security, reliability, and improvement.
• Communications: messages you send to our support team or through in-product contact flows.

2. Third-Party Platforms and APIs

Cravgen may access information from third-party platforms when you authorize integrations. We use this information solely to provide the functionality you request— not for unrelated advertising or resale.

Platforms we may connect to include:

• Meta (Facebook and Instagram)
• YouTube
• TikTok
• LinkedIn
• WhatsApp Business
• Google (where sign-in or maps features are enabled)

Each platform's own terms and privacy policies apply to your use of that platform. We only receive data that you (or your organization administrator) explicitly authorizes through OAuth or similar connection flows.

3. Meta Platform Data (Facebook & Instagram)

Because Cravgen is an influencer and brand collaboration platform, connecting Facebook or Instagram is optional and used for features you choose — such as campaign management, collaboration workflows, publishing, analytics, comment management, and automation.

When users connect their Facebook or Instagram accounts, Cravgen may access profile information, Pages, business or creator account information, permissions granted by the user, and related data necessary to provide campaign management, collaboration, analytics, and automation features. We do not use Meta Platform Data for purposes unrelated to these features.

Permissions we request and why:

• public_profile: Identify your connected Facebook personal account (name and profile picture) and associate Facebook Pages and Instagram accounts with the correct Cravgen user.
• pages_show_list: List Facebook Pages you manage so you can choose which Page to connect to Cravgen.
• pages_manage_posts: Publish posts, images, and videos to Facebook Pages you authorize, including scheduled and AI-assisted publishing workflows.
• pages_read_engagement, pages_read_user_content: Read Page engagement metrics and content needed to display performance analytics, comments context, and publishing status in Cravgen.
• instagram_basic: Access Instagram Business/Creator profile information (username, profile picture, account identifiers) for connected accounts.
• instagram_content_publish: Publish photos, reels, stories, and other media to Instagram accounts you connect and authorize.
• instagram_manage_comments: Read and reply to comments on Instagram content published through or monitored by Cravgen.
• instagram_manage_insights: Retrieve Instagram insights and follower metrics to power analytics dashboards and campaign reporting.

We do not sell Meta Platform Data. We do not use it to build unrelated user profiles for third-party advertising. Access is limited to personnel and subprocessors who need it to operate the service under confidentiality obligations, in compliance with Meta Platform Terms.

4. How We Use Information

• Authenticate users and maintain secure sessions.
• Connect and manage social accounts you authorize.
• Publish, schedule, and monitor posts and campaigns on your behalf.
• Facilitate brand–creator collaborations and marketplace workflows.
• Display analytics, insights, comments, and workflow status.
• Power AI-assisted content, automation, and lead features.
• Provide customer support, billing, fraud prevention, and legal compliance.
• Improve performance, reliability, and product experience.

5. Legal Basis for Processing

Where applicable law requires a legal basis (for example, in the European Economic Area or United Kingdom), we process personal information on one or more of the following grounds:

• Consent: when you connect a social account, accept cookies, or opt in to optional features.
• Contractual necessity: to provide the service you signed up for, including publishing, analytics, and collaboration tools.
• Legitimate interests: to secure our platform, prevent abuse, improve products, and support customers, balanced against your rights.
• Legal obligations: to comply with law, respond to lawful requests, and meet tax or regulatory requirements.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, measure product usage, and protect against abuse. You can control cookies through your browser settings; some features may not work if cookies are disabled.

7. How We Share Information

We do not sell personal information. We may share limited data with:

• Service providers (hosting, email, analytics, payment processors) under contractual safeguards.
• Platforms you connect (such as Meta) when you direct us to publish or sync content.
• Collaboration participants (brands, creators, team members) when you use shared campaign or marketplace features.
• Authorities when required by law or to protect rights, safety, and security.

8. Data Retention

We retain information while your account is active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal obligations. Connected-account tokens are removed when you disconnect an account or request deletion. Aggregated or de-identified data may be kept longer for analytics and security.

9. Your Choices & Data Deletion

You may request deletion of your account and associated personal data at any time. Upon verification of your identity, we will process the request within 30 days unless a longer retention period is required by law (for example, billing records or fraud prevention).

You can delete or limit your data as follows:

• Account settings: sign in at https://admin.cravgen.com/users/user-account-settings to update profile information, disconnect integrations, or delete your account where that option is available.
• Disconnect social accounts: in Cravgen go to Connections and disconnect Facebook or Instagram. This revokes our access to publish and read data from those accounts going forward.
• Remove Meta app authorization: in Facebook Settings → Apps and Websites, remove Cravgen. Meta may notify us through their data-deletion callback.
• Email a deletion request: send a message to privacy@cravgen.com from the email address associated with your account with the subject line "Data deletion request". Include your full name and, if applicable, connected Facebook/Instagram account names.
• Meta data-deletion callback: Meta-initiated deletion requests are processed at https://api.cravgen.com/api/oauth/facebook/data-deletion. User instructions for data deletion are published at https://www.cravgen.com/privacy-policy/#data-deletion. After processing, users receive a confirmation code and status URL on this page.

10. Security

We use administrative, technical, and organizational measures—including access controls, encryption in transit, and monitoring—to protect data against unauthorized access, loss, or misuse. No online service is completely risk-free; please use strong passwords and protect your account credentials.

11. Your Rights

Depending on your location, you may have rights to access, correct, export, restrict, or delete personal information, or to object to certain processing. Contact privacy@cravgen.com to exercise these rights. We may need to verify your identity before fulfilling a request.

12. Children's Privacy

Cravgen is not intended for individuals under the age of 13 (or the applicable minimum age in their jurisdiction, such as 16 in some regions). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact privacy@cravgen.com and we will take steps to delete it.

13. International Transfers

Your information may be processed and stored in countries other than where you live, including countries where our servers, cloud hosting providers, and subprocessors operate. Those locations may have different data-protection laws than your country. Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

14. Policy Updates

We may update this policy to reflect legal, product, or operational changes. We will post the revised version on this page and update the effective date. Continued use after changes constitutes acceptance where permitted by law.

15. Contact

Questions about this Privacy Policy or your data: privacy@cravgen.com, support@cravgen.com, or Contact Us.