Privacy Policy

YaarLink operates theyaar.com, a marketplace that helps brands and local businesses discover creators, meme pages and communities, and helps creators find campaign opportunities.

For privacy questions or grievances, contact YaarLink support using the email address or contact page shown at the end of this policy. YaarLink is based in Punjab, India.

YaarLink does not intentionally collect card, bank-login or UPI PIN details through this website. Do not put passwords, one-time codes or payment credentials in contact, campaign, profile or application fields.

• Account information: your name, email address, optional phone number, account role (brand or creator), email-verification status, account dates, and a hashed password. We do not store your plain-text password.
• Pending-signup information: the details submitted before email verification and a hashed one-time verification token. A usable account is created only after verification.
• Profile and campaign information: business or creator names, contact details, social profile links, category, languages, location, audience or follower information, campaign descriptions, budget, verification codes, and moderation status.
• Application and communication information: the application name, contact and message you enter, application status and decision notes, notifications, contact-form messages, and listing reports.
• Technical and security information: session identifiers, browser/device user-agent information, sign-in and activity times, IP addresses used for rate limits, security and admin audit logs, and limited hosting or email-delivery logs.
• Preferences: your selected site language is stored in your browser's local storage.

• Create, verify, authenticate and secure accounts and sessions.
• Review and moderate creator profiles and campaigns before they become public.
• Display approved public listings and operate search, applications, decisions and notifications.
• Send transactional emails such as signup verification, password reset, email-change, application-status and account-security messages.
• Respond to support messages, listing reports and privacy requests.
• Prevent spam, fraud, impersonation, misuse and security incidents; enforce our Terms; debug and maintain the service.
• Comply with applicable law and respond to lawful requests.

• An approved and verified creator profile may publicly show the creator or page name, social links, platform, verified follower count, category, languages, location, content types and bio. Creator phone numbers and email addresses are not included in the public listing response.
• An open and verified campaign may publicly show the business name, campaign title and description, promotion type, category, location, language, target audience, format and website. Campaign budget, phone and email are not included in the public listing response.
• Anything you place in a public profile or campaign field can be viewed, copied or indexed by others after the listing is approved. Do not put private personal information in public fields.

When you apply to a campaign, only the name, contact and message entered in that application form are shared with that campaign's brand. YaarLink does not automatically substitute your account phone number or account email address. You must enter the exact contact you want the brand to use and confirm the sharing before submission.

• The campaign brand and authorised YaarLink administrators can view application details needed to operate and moderate the marketplace.
• Brands are instructed to use an applicant's contact only for that campaign application and related work, not for unrelated marketing, sale, sharing or spam.
• Withdrawing an application stops its active use on YaarLink, but it cannot recall screenshots, notes or messages that a recipient already copied outside YaarLink.
• We use service providers for hosting, database storage, transactional email and security. They process information only as needed to provide those services.
• We may disclose information when required by law, to protect people or the service, to investigate fraud or abuse, or as part of a business transfer subject to appropriate safeguards.
• We do not sell or rent personal information.

• Essential, signed session cookies keep users and administrators signed in and help protect accounts. Disabling them can prevent login and account features from working.
• Server-side session records store limited browser/device information and activity times so you can review and revoke devices in Account & security.
• Your language choice is saved in local storage. We do not use that preference to build an advertising profile.
• External services you open—such as WhatsApp, Instagram, YouTube or a brand/creator website—have their own privacy practices.

We keep information while an account, listing, application, support request or security purpose remains active, and for a reasonable period afterwards where needed for dispute handling, fraud prevention, accounting, legal compliance or service security. One-time signup and account-action tokens expire, and sessions expire or can be revoked.

We use measures such as hashed passwords, hashed one-time tokens, access-controlled admin tools, private API responses for account data, and database access restrictions. No online service can guarantee absolute security, so please use a unique password and contact us if you suspect unauthorised access.

• View and download your account data from Account & security.
• Correct account email or phone, edit your profile or campaign, and edit or withdraw eligible applications from your dashboard.
• Revoke signed-in devices and delete your account from Account & security.
• Ask us for access, correction, deletion, consent withdrawal or grievance help through the Data Rights page, especially for contact messages or reports that are not controlled from an account.
• We may need to verify your identity and may retain limited information where necessary for security, fraud prevention, disputes or legal obligations.

• YaarLink is intended for people who can legally agree to the Terms, or who use it with parent/guardian permission where required. Contact us if you believe a child's information was submitted without appropriate permission.
• Our hosting, database and email providers may process information in India or other countries where they operate, subject to their safeguards.
• We may update this policy as the service or law changes. The new version will be posted here with a revised date; significant changes may also be announced on the website or by email where appropriate.