Privacy Policy

01. Introduction and Scope

Welcome to WeeSofty Media ("WeeSofty Media", "we", "us", or "our"). We operate an exclusive internal creative workforce management network and digital collaboration platform designed for video editors, project managers, and creative leads.

This Privacy Policy applies to personal information collected when you access or use our public website, submit an application to join our editor community, access private editor dashboards, accept editing assignments, participate in direct communications, or receive payouts.

02. Information We Collect

We collect information directly from you, automatically through your interaction with the platform, and during creative project assignments:

A. Personal Contact Information

• Full Name, WhatsApp contact phone number, and email address.
• Communication preferences and notes recorded during vetting.

B. Account Credentials and Authentication Records

• Username, cryptographically salted password hashes (processed via bcrypt/Argon2id), and assigned role permissions.
• Authentication logs, active session identifiers, IP addresses, browser user-agent signatures, and last login timestamps.

C. Professional Profile & Technical Toolkit

• Years of editing experience, primary hardware devices (Laptop, Desktop Workstation, Mobile), and software competencies (e.g. Adobe Premiere Pro, After Effects, DaVinci Resolve, CapCut, Final Cut Pro, Photoshop, Blender).
• Creative editing specialties (e.g. Instagram Reels, YouTube Shorts, Long-Form YouTube, Gaming, Color Grading, Motion Graphics).
• Biographical statements, preferred editing genres, and declared availability status.

D. Portfolios and Creative Deliverables

• Public portfolio links submitted during onboarding (such as Google Drive folders, YouTube playlists, Behance, Vimeo, or personal websites).
• Project deliverable URLs, submitted video cuts, thumbnail files, and version revision history.

E. Project Assignments, Feedback, and Messages

• Project briefing instructions, aspect ratios, agreed compensation, delivery countdowns, revision feedback with timestamps, and approval statuses.
• End-to-end encrypted direct chat messages exchanged between participants.

F. Financial & Payment Information

• Virtual Payment Addresses (UPI IDs) and bank account details voluntarily provided for receiving compensation.
• Payout requests, earnings ledger entries, payment status histories, bank reference/UTR numbers, and transfer verification screenshots.

G. Technical & Audit Logs

• Administrative audit logs recording actions such as account status modifications, project reviews, payment approvals, and security events.

03. How Information Is Used

We use the collected information exclusively for legitimate workforce management and operational purposes:

• Vetting & Community Selection: Evaluating onboarding applications and verifying portfolio authenticity.
• Curated Project Matching: Assigning commercial briefs to editors based on software proficiency, device specifications, and category expertise.
• Creative Collaboration & Review: Facilitating version submissions, timestamped creative feedback, revision cycles, and deliverable approvals.
• Financial Disbursements: Processing manual UPI or bank transfers and maintaining accurate double-entry earnings ledgers.
• Operational Notifications: Delivering assignment alerts, deadline notices, and support messages via WhatsApp and in-app indicators.
• Security & Dispute Prevention: Monitoring unauthorized access, defending against malicious input, and auditing sensitive operational actions.

04. Editor Onboarding and Account Management

Submitting an onboarding application via our public portal does not automatically generate an active user account. All submissions are manually evaluated by WeeSofty Media creative leads.

Upon acceptance, authorized administrators provision a private user profile. Editors must maintain accurate contact details and safeguard their login credentials. We do not sell or lease onboarding application data to external job boards or advertising networks.

05. Project Assignments and Client-Related Information

As part of our internal network, editors receive access to proprietary client briefs, raw footage links, brand guidelines, and unreleased video assets.

All project materials provided by WeeSofty Media or our commercial clients are confidential. Editors are prohibited from distributing, sharing, or publicly displaying client assets or incomplete cuts without explicit written authorization.

06. Manual UPI Payments and Payment Verification

WeeSofty Media processes compensation manually through direct Unified Payments Interface (UPI) transfers or NEFT/IMPS bank transfers.

• Verification Evidence: Completed disbursements are documented with a bank transaction identifier (UTR) and an uploaded proof screenshot.
• Confidentiality: Payment proof screenshots and banking details are confidential financial records accessible exclusively to authorized Finance Managers and the recipient editor. They are never published in public galleries.
• Masking & Safety: UPI identifiers displayed in administrative tables and exports are partially masked to prevent shoulder-surfing and unauthorized copying.

07. WhatsApp Notifications and Support Communications

WeeSofty Media utilizes WhatsApp as a primary operational channel for fast project briefings, onboarding communication, revision alerts, and support inquiries.

By providing your WhatsApp contact number during onboarding, you consent to receive direct service-related messages from WeeSofty Media managers (`+91 60003 59995`). We do not use your phone number for automated third-party telemarketing or spam campaigns.

08. Encrypted Private Messaging and Key Management

Our platform incorporates client-side end-to-end encrypted (E2EE) direct messaging for participant communications.

A. Scope of Cryptography

End-to-end encryption specifically secures direct peer-to-peer messages exchanged inside the `/chat` route using the Web Cryptography API (ECDH P-256 key agreement and AES-GCM 256-bit authenticated ciphertexts).

Public encryption keys are registered on our server so conversation partners can establish shared secrets. Private encryption keys are generated locally and stored exclusively in your browser's IndexedDB / LocalStorage; they are never transmitted to our server.

B. Encryption Scope Boundaries

We do not claim that every part of the website is end-to-end encrypted. General project briefs, deliverable submission links, community announcements, and financial payout records are stored securely on our database server so authorized project managers and finance teams can manage workflows.

C. Limitations of Key Recovery

09. Data Storage, Security, and Retention

We apply strict defense-in-depth security standards to protect all stored information:

• Parameter-bound queries (PDO Prepared Statements) preventing SQL injection vulnerabilities.
• Cryptographic CSRF tokens on all state-altering POST requests.
• HTTP-only, Secure session cookies preventing cross-site scripting (XSS) session theft.
• Strict MIME-type inspection (via PHP `finfo`) and randomized filenames on file uploads.
• Role-Based Access Control (RBAC) enforcing least-privilege permissions across all internal routes.

No Absolute Guarantee: While we implement rigorous, industry-standard administrative and technological safeguards, no web application or internet transmission is 100% immune from security threats. We cannot promise absolute, infallible security.

10. Third-Party Services and External File Links

We work with trusted infrastructure and service providers to operate our platform:

• Hosting Infrastructure: Hostinger International Ltd. shared web hosting infrastructure running PHP 8.2+ and MySQL/MariaDB in a secure enterprise datacenter.
• Messaging Providers: Meta Platforms, Inc. via manual WhatsApp click-to-chat web links initiated directly by users or project managers. No automated bots, Meta Business APIs, or third-party CRM aggregators are utilized.
• Banking & UPI Network: Direct manual payments processed via authorized Indian banking and Unified Payments Interface (UPI) applications (Google Pay, PhonePe, Paytm, BHIM).

External File-Sharing & Video Hosting Links

Project submissions and portfolio samples frequently utilize external links to Google Drive, YouTube, Vimeo, or Behance.

These external platforms are governed entirely by their own respective privacy policies and security configurations. WeeSofty Media is not responsible for the access controls, permissions, or tracking technologies deployed on external third-party platforms.

11. Cookies, Sessions, and Security Technologies

WeeSofty Media strictly uses essential, security-focused first-party cookies to ensure the platform functions properly:

• weesofty_session: A secure, HTTP-only session cookie necessary for authenticating your user account and preserving your login state.
• _csrf_token: A cryptographic anti-forgery token preventing cross-site request forgery attacks.
• ratelimit_*: Ephemeral server-side counters to prevent automated brute-force credential stuffing and denial of service.

12. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. Your information is disclosed only under limited, necessary circumstances:

• Authorized Internal Personnel: Super Admins, Project Managers, and Finance Managers who require access to coordinate assignments and process payouts.
• Commercial Clients: Relevant professional information (e.g. portfolio cuts, editor first name) may be presented to prospective clients for project scoping. Contact numbers and payment credentials are never shared with clients.
• Legal & Regulatory Compliance: When compelled by valid subpoenas, court orders, or applicable law, or to protect the vital security of the platform.

13. User Rights and Data Requests

Subject to statutory requirements and applicable laws, you have the following rights as a Data Principal:

• Right to Access & Information: Request a summary of the personal details, active creative projects, and financial ledger statements processed by WeeSofty Media.
• Right to Correction & Updating: Rectify inaccurate contact records, software proficiencies, or UPI identifiers directly via your portal settings or through a formal correction request.
• Right to Erasure / Deletion: Request the deletion of your account and personal identifiers, subject to legitimate legal, accounting, and tax record-retention requirements.
• Right to Withdraw Consent: Withdraw consent for non-essential communications or marketing at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right of Grievance Redressal: Register a formal grievance with our designated Grievance Officer regarding any data handling concern.

14. Account Suspension, Closure, and Data Retention

When an editor account is deactivated or closed:

• Active project assignments are reclaimed or cancelled.
• Login credentials are suspended, preventing further portal access.
• Financial transaction ledgers, payment reference IDs, and tax compliance records are retained for the statutory seven (7) year period required by Indian accounting and taxation laws.
• Administrative audit logs are retained to maintain security trail integrity and protect against cyber incidents.
• Unaccepted or rejected editor applications are purged after 90 days from the date of submission.

15. Children's Privacy

The WeeSofty Media Editor Community Platform is strictly intended for individuals who are at least 18 years of age (or have reached the age of majority in their jurisdiction).

We do not knowingly solicit, collect, or process information from minors. If we discover that an application or account has been submitted by an individual under 18 without verified legal guardian consent, we will promptly terminate the account and purge the associated data.

16. Statutory Legal Notice & DPDP Act Phased Commencement

WeeSofty Media aligns its data protection and security practices with the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), the Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

17. Designated Grievance Officer and Contact Desk

In compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and DPDP framework, WeeSofty Media has designated a Grievance Redressal Officer to address inquiries and privacy complaints: