Privacy Policy

• Waitlist. Your email address and when you joined.
• Accounts. Your name, email address and password. We store passwords only as a one-way hash and can never see them.
• Sessions. A login cookie and a matching session record so you stay signed in.
• Usage analytics. Pages you visit, buttons you click, your browser and device type, and approximate location derived from your IP address.
• Payments (when they launch). Tips will be processed by a licensed payment partner. We will receive the amount, the message you attach and a payment reference. We never see or store your card, UPI PIN or bank login.

• To let you know when early access opens and to onboard founding creators.
• To run your account, keep it secure and prevent abuse such as repeated failed logins.
• To understand which parts of the site work and improve them.
• To meet legal, tax and accounting obligations once payments are live.

We do not sell your personal data and we do not use it for third-party advertising.

We use one essential cookie, bmac_session, which keeps you logged in and expires after 7 days. Our analytics provider also sets cookies and local storage to recognise returning visitors. You can block these in your browser; the site will still work, but you will need to log in again each visit.

We share data only with service providers that help us run the site:

• PostHog for product analytics.
• Our database and hosting providers, which store data on our behalf.
• Our payment partner, once payments launch.

Some of these providers process data outside India. We may also disclose data if the law requires it or to protect our users and service from fraud or abuse.

Waitlist emails are kept until you ask us to remove them or you create an account. Account data is kept while your account is open and deleted when you close it, except for records we must keep by law, such as payment records. Expired sessions are no longer valid and are cleaned up periodically.

You can ask us to access, correct or delete your personal data, or withdraw consent to us using it, in line with India’s Digital Personal Data Protection Act, 2023. Email hello@buymeachijji.com and we will respond within 30 days. If you are unhappy with our response, you can complain to the Data Protection Board of India.

We use HTTPS everywhere, hash passwords, and keep sessions server-side so they can be revoked. No system is perfectly secure, so please use a password you do not reuse elsewhere.

Buy Me a Chijji is not meant for children under 18. If you believe a child has given us personal data, contact us and we will delete it.

If we change this policy we will update the date above, and tell account holders by email about significant changes. Questions? Write to hello@buymeachijji.com.