Privacy Policy — WatchIt 2.0

This Privacy Policy ("Policy") describes how The BGroups ("WatchIt", "WatchIt 2.0", "Company", "we", "us", or "our") collects, uses, stores, processes, and protects your personal data when you use the WatchIt 2.0 mobile application (Android Package: com.watchit.android), the official website at watchitmediagroup.com, the Sponsor Business Portal at business.watchitmediagroups.com, and related digital services (collectively, the "Platform").

We are committed to operating in full compliance with the Google Play Developer Program Policies (User Data, Permissions, and Financial Standards), the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000 (and IT Rules 2021), and globally recognized privacy principles.

We collect only the minimum necessary data to authenticate accounts, verify YouTube task completions, distribute real money rewards, process sponsor campaigns, and prevent malicious activities:

• User Profile & Authentication: Full name, verified mobile phone number, email address, password hash, and unique user identification number.
• YouTube Task Execution & Proof Data: Interaction timestamps, target YouTube search keywords utilized, unique video verification codes identified during playback, watch duration telemetry, and user-submitted verification screenshots demonstrating task completion.
• Direct Real Money Wallet & Payout Records: Real-time fiat wallet balances, completed task earning ledger, and user-specified payout disbursement destinations (such as Bank Account & IFSC, UPI Virtual Payment Address, FINZO Wallet Identifier, TRC20/BEP20 Crypto Wallet Address, or Mobile Number & Telecom Operator for SIM airtime recharge).
• Sponsor & Business Partner Information: Business name, contact person, official email, billing information, campaign parameters (YouTube video URL, target SEO keywords, target watch duration), and uploaded bank transfer/deposit transaction receipts and UTR reference screenshots for manual campaign wallet top-up verification.
• Device Fingerprinting & Anti-Fraud Telemetry: Device manufacturer, hardware model, operating system version, Android ID/SSAID, IP address, network type, app version, screen resolution, and root/emulator/parallel space detection indicators used strictly to prevent automated bot attacks and enforce our One Device = One Account policy.

To provide core app functionality and task verification, the WatchIt 2.0 Android app requests only specific, limited runtime permissions:

We process your personal data based on legitimate contractual and operational interests:

• To deliver available YouTube video tasks and match relevant campaigns based on geographic region and preferences.
• To run automated AI validation on user-submitted screenshots (verifying target keyword presence, video code accuracy, and duration).
• To instantly credit real money earnings directly to your WatchIt User Wallet upon verified task approval.
• To process and disburse user withdrawal requests via direct bank/UPI transfer, FINZO Wallet, Crypto wallet, or Mobile SIM recharge.
• To manually audit and verify sponsor wallet deposit screenshots and UTR transaction numbers before activating sponsor campaigns.
• To detect, prevent, and mitigate fraudulent behavior, including script bots, emulators, auto-clickers, and multiple account abuse.

We NEVER sell, rent, trade, or monetize personal user data to third-party advertisers or data brokers.

We work with vetted service providers who handle data strictly under confidentiality agreements and data processing terms:

• Cloud Hosting & Database Infrastructure: Secure cloud providers (Amazon Web Services / Google Cloud Platform) with data centers employing AES-256 encryption.
• AI Vision & OCR Validation: Automated visual processing engines used strictly to verify keyword text and verification code strings from uploaded screenshots.
• Payout & Telecom Disbursement Networks: Authorized telecom operator recharge networks for prepaid airtime fulfillment, blockchain network nodes for crypto transaction broadcast, and verified partner banking rails.
• App Diagnostics & Telemetry: Google Firebase Crashlytics for real-time crash reporting and stability diagnostics.

We deploy bank-grade security standards to safeguard all communications and user assets:

• Encryption: All data transmitted between the app, web portals, and servers is encrypted with TLS 1.3 / HTTPS. Sensitive records are encrypted at rest using AES-256.
• Server-Authoritative Ledger: The mobile client application has zero financial authority. Wallet balances, credits, and withdrawals are calculated, verified, and signed exclusively on our hardened backend servers.
• Access Control: Administrative and support tools require multi-factor authentication (MFA) and strict role-based access permissions.

In accordance with Google Play Developer Data Safety Guidelines and the DPDPA 2023, we empower users with full control over their account data and retention:

Upon receiving a verified deletion request, all personal identifiers, profile credentials, uploaded verification screenshots, and device identifiers will be permanently erased or irreversibly anonymized within 30 calendar days. Anonymized transaction metadata may be retained solely to the extent required for statutory tax, fraud audit, and legal reporting obligations under applicable Indian law.

WatchIt 2.0 is designed for users aged 18 and older, or minors aged 13 to 17 who have obtained verifiable consent from a parent or legal guardian. We do not knowingly solicit or collect personal information from children under the age of 13.

If we become aware that personal data of a child under 13 has been inadvertently collected without verifiable parental consent, we will take prompt operational steps to immediately terminate the account and purge the associated data from our servers.

As a data principal, you have the following enforceable rights regarding your information:

• Right to Access & Summary: Request a summary of your personal data processed and shared by WatchIt.
• Right to Correction & Erasure: Correct incomplete or inaccurate details and request deletion of your account.
• Right to Withdraw Consent: Revoke previously granted consent for specific non-essential processing activities.
• Right of Grievance Redressal: Submit grievances to our designated Grievance Officer with guaranteed timely response times.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are as follows: