Privacy Policy

1. Introduction & Scope

Welcome to Rank Your OG ("Platform", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, participate in social appreciation for public figures, and interact with our services.

Rank Your OG is a pure appreciation and social sentiment entertainment platform. We are strictly non-gambling and do not offer monetary returns, real-money gaming, betting, prediction markets, or official election voting.

2. Information We Collect

We collect only minimal information necessary to deliver and secure our platform services:

• Account & Authentication Information: Mobile phone number collected during passwordless OTP login, verification timestamps, and optional user profile display names or email addresses.
• Heart Activity & Ledger Data: Records of Heart appreciation given to personalities, timestamps, Heart source (PAID vs. FREE), and associated public leaderboard tallies.
• Transaction & Reconciliation Identifiers: Merchant order IDs, Cashfree transaction reference IDs, payment status (`PAID`, `FAILED`, `PENDING`), amounts, currency (`INR`), and payment methods (e.g., UPI, Card, Netbanking). Note: We do not store sensitive payment credentials such as credit card numbers, CVVs, or bank PINs on our servers.
• Technical & Diagnostic Data: IP address, browser user-agent, session identifiers, access logs, and rate-limiting telemetry to prevent automated scraping, bot manipulation, and abuse.
• Customer Inquiries: Messages, email addresses, and subject lines submitted via our Contact Us form.

3. How We Use Your Information

We process your information for the following legitimate purposes:

• To authenticate users via one-time SMS verification and maintain secure sessions.
• To record and display accurate, immutable Heart appreciation counts on public leaderboards.
• To reconcile payment transactions with our authorized payment gateway partners.
• To enable authenticated users to review their personal Heart appreciation history.
• To detect, prevent, and mitigate fraud, automated bot activity, security breaches, and terms violations.
• To provide customer support and respond to user inquiries.
• To comply with statutory financial record-keeping and applicable Indian regulatory obligations.

4. Payment Processing & Third-Party Service Providers

Payments for paid Heart appreciation tokens (when enabled) are processed securely through our RBI-authorized payment partner, Cashfree Payments India Private Limited ("Cashfree").

Payment details (such as UPI IDs, card details, or banking credentials) are entered directly into Cashfree's PCI-DSS compliant checkout interface. Rank Your OG only receives cryptographic webhook signatures and tokenized transaction statuses to fulfill Heart crediting.

5. Data Security & Storage

We implement robust technical and organizational security measures, including:

• TLS 1.3 encrypted communication across all endpoints.
• Cryptographic one-way hashing for authentication tokens and OTPs.
• Database transaction isolation and strict idempotency keys on financial ledgers.
• HTTP security headers (HSTS, CSP, X-Frame-Options `DENY`, Strict-Transport-Security, and anti-CSRF token verification).
• Automated IP-based and user-based rate limiting to protect user accounts.

6. Data Retention & User Rights

We retain transaction identifiers, payment audit trails, and Heart ledger entries for a minimum period required by applicable taxation, accounting, and anti-fraud regulations.

You have the right to access your personal Heart history directly at My Hearts when logged in. For questions regarding your personal data or account inquiries, please contact our privacy compliance team at support@rankyourog.com.

7. Updates to This Policy

We may periodically update this Privacy Policy to reflect platform enhancements or regulatory changes. Material updates will be indicated by the "Last Updated" date at the top of this page.