Legal

Privacy Policy

Last updated: March 1, 2026 · Effective: March 1, 2026

1. Introduction

This Privacy Policy describes how flipprr and its products — ParcelPal (parcelpal.in), Frilpp (frilpp.com), and ChaosBird (chaosbird.app) — collect, use, store, and share your personal information.

All products are operated by OneFinexus Private Limited, a company registered under the Ministry of Corporate Affairs, Government of India (hereinafter referred to as "we," "us," or "the Company").

By using any of our products, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

2. Information we collect

Each product collects different types of data based on its function. We follow a principle of minimal data collection — we only collect what is necessary for the product to operate.

2.1 ParcelPal

ParcelPal is a cross-border shopping marketplace and requires identity verification for trust and regulatory compliance.

  • Identity data: Name, email address, phone number, and government-issued identification (Aadhaar, PAN, Passport) for KYC verification.
  • Financial data: UPI IDs and payment details, processed through our licensed payment partners. We do not store full payment credentials on our servers.
  • Trip data: Flight PNR, travel dates, and route details for travelers registering upcoming trips.
  • Transaction data: Product requests, offers, connection fees, delivery confirmations, and dispute records.
  • Communication data: Messages exchanged between buyers and travelers through the platform's messaging system.

2.2 Frilpp

Frilpp is a product marketing platform connecting brands with creators.

  • Account data: Email address, authentication tokens, and session identifiers.
  • Creator profile data: Name, shipping address (for product fulfillment), and phone number (optional).
  • Social account data: With your explicit consent via OAuth, we access your social media username, follower count, and recent media metadata. This is used solely for deliverable verification. We never store social media passwords.
  • Offer and deliverable data: Barter offers created by brands, claims by creators, fulfillment status, and verified deliverables.
  • Attribution data: Click tracking and conversion data (e.g., order totals) for campaign ROI measurement.
  • Usage data: IP address and device data for security, rate limiting, and fraud prevention.

2.3 ChaosBird

ChaosBird is an anonymous messaging platform. By design, it collects the absolute minimum data possible.

  • Username: A self-chosen, pseudonymous username with no link to any real-world identity.
  • Password (optional): If you choose to set a password, it is hashed using bcrypt and cannot be read by us or anyone else.
  • Message content: The content of messages you send, stored encrypted at rest.
  • Timestamps: When messages are sent.
  • File attachments: Files you upload, encrypted at rest and automatically deleted after 7 days.

ChaosBird does NOT collect: email addresses, phone numbers, IP addresses, device fingerprints, geolocation data, browsing behavior, contact lists, or advertising identifiers.

3. How we use your information

  • Operate our products: Process transactions, fulfill orders, verify deliverables, deliver messages, and provide platform functionality.
  • Verify identity: Conduct KYC verification on ParcelPal to comply with Indian regulations and prevent fraud.
  • Validate pricing: Check product listings against market prices to prevent price manipulation and ensure fair pricing on ParcelPal.
  • Verify content: Use social media APIs to confirm that creators on Frilpp have posted agreed-upon deliverables.
  • Provide analytics: Deliver campaign performance data and ROI metrics to brands on Frilpp.
  • Send transactional messages: Authentication codes, order confirmations, dispute notifications, and delivery updates.
  • Maintain security: Detect and prevent fraud, abuse, and unauthorized access across all products.
  • Comply with law: Meet legal obligations including anti-money laundering regulations, customs compliance, and law enforcement requests.

We do not sell your personal information. We do not use your data for advertising. We do not build behavioral profiles for ad targeting.

4. Data sharing

We share your information only when necessary to operate our products and comply with the law. We do not sell, rent, or trade your personal data.

4.1 Service providers

We share data with trusted third-party service providers who help us operate our products:

  • KYC verification partner: Processes identity documents for ParcelPal. Documents are processed by the partner and are not stored on our servers.
  • Payment processing partner: Handles connection fee collection and subscription payments. We do not store full payment credentials.
  • Pricing API: Receives anonymized product data to validate market pricing on ParcelPal.
  • E-commerce platform integration: Processes order fulfillment on Frilpp through official APIs.
  • Social media APIs: Frilpp accesses public media metadata to verify creator deliverables.
  • Cloud infrastructure: All products run on enterprise-grade cloud infrastructure providers.
  • Email service: Sends transactional emails (authentication, notifications).

4.2 Legal requirements

We may disclose your information if required by law, regulation, legal process, or government request. For ParcelPal specifically, we maintain a legal obligation to report suspicious transaction patterns to FIU-IND under the Prevention of Money Laundering Act. We may disclose data to Indian law enforcement without prior notice to the user when required by valid legal process.

5. Data security

  • All data is encrypted in transit using TLS 1.3.
  • Sensitive data is encrypted at rest using AES-256 encryption.
  • Passwords are hashed using bcrypt and cannot be reversed.
  • Database access is restricted through row-level security policies — users can only access their own data.
  • OAuth tokens for social media and e-commerce integrations are encrypted at rest with access limited to required services.
  • All infrastructure includes DDoS protection, web application firewalls, and automatic threat mitigation.
  • API endpoints are rate-limited to prevent abuse.

6. Data retention

  • ParcelPal and Frilpp: Account data is retained as long as your account is active or as needed to provide the service. You may request deletion by contacting us.
  • ChaosBird: Message content and account data persist as long as the account exists. File attachments are automatically deleted after 7 days. Usernames are pseudonymous and disposable by design — nothing traces back to a real-world identity if an account is abandoned.
  • We may retain certain information after account deletion to comply with legal obligations, resolve disputes, or enforce our terms.

7. Your rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Update or correct inaccurate information in your account settings.
  • Deletion: Request deletion of your account and associated data. Some data may be retained for legal compliance.
  • Opt-out: Unsubscribe from marketing communications at any time. Transactional messages (authentication, order updates) are required for service operation.

To exercise these rights, contact us at the email address listed below or use the account settings within each product.

8. International data processing

Our products serve users globally. Your information may be processed in countries where OneFinexus Private Limited or our service providers operate. By using our products, you consent to the transfer of your information to these countries.

9. Children's privacy

All Flipprr products are intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we discover that a user is under 18, their account will be immediately terminated. On ChaosBird, underage users are permanently banned upon detection.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, products, or legal requirements. We will notify users of material changes through our products or via email where applicable. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

Company: OneFinexus Private Limited
Email: help@flipprr.com