Privacy Policy

01Who We Are

The data controller responsible for personal information processed through the Services is AuthorityMagnet OPC Private Limited, operating the PRWiz platform. References to “we” or “PRWiz” in this policy refer to that entity.

You can reach us for any privacy matter at hello@prwiz.com. Please include “Privacy” in the subject line so your message reaches the right team quickly.

02Scope of This Policy

This policy applies to personal and business information processed in connection with the PRWiz Services, whether you interact with them as a Buyer, Publisher, prospective customer, visitor, or support contact. It does not apply to third-party websites or services that you may reach from the Services; those are governed by their own privacy policies.

Where additional, product-specific disclosures apply (for example, in-product notices about a specific feature), those disclosures supplement this policy and do not replace it.

03Information We Collect

We collect information in three broad ways: (a) information you provide directly, (b) information we collect automatically as you use the Services, and (c) information we receive from third parties.

Information you provide directly

• Account information — name, work email, password hash, company name, role, billing address, and tax identifiers for invoicing.
• Profile information — time zone, preferred niches, language preferences, and communication preferences.
• Campaign & order data — target URLs, preferred anchor text, briefs, notes to Publishers, content drafts, revision feedback, and published URLs.
• Publisher application data — website URLs, traffic metrics, niche, DR/DA scores, pricing preferences, and editorial policies.
• Payment information — we do not store full payment card numbers ourselves; these are collected directly by our payment processors (Stripe, PayPal) under their own security standards. We retain transaction identifiers, last-four digits, and billing receipts for accounting and anti-fraud purposes.
• Support correspondence — emails, chat transcripts, and attachments you send when contacting us.

Information collected automatically

• Usage data — pages visited, features used, clicks, search queries within the Platform, and time stamps.
• Device data — IP address, browser type, operating system, screen size, device identifier, and language.
• Log data — server logs, error logs, performance metrics, and access logs retained for debugging, abuse prevention, and security investigations.
• Cookies & similar technologies — see the Cookies section below.

Information from third parties

• Payment processors (Stripe, PayPal) share limited transaction metadata (success/failure, amount, country, card brand) so we can reconcile Orders.
• SEO & metrics providers — we may enrich Publisher listings with domain metrics and traffic estimates from public datasets.
• Fraud & abuse prevention partners — we may receive reputation signals to help detect chargeback fraud, credential stuffing, or other abuse.

04How We Use Information

We use the information described above for the following purposes:

• Providing the Services — creating and maintaining your account, matching Buyers with Publishers, fulfilling Orders, processing payments, delivering content, and verifying published placements.
• Customer support — responding to questions, handling disputes, resolving incidents, and maintaining a record of our interactions for quality and accountability.
• Billing & fraud prevention — issuing invoices, processing refunds, detecting fraudulent transactions, preventing chargeback abuse, and meeting our obligations under payment network rules.
• Product improvement & analytics — understanding how features are used, fixing bugs, improving performance, and prioritizing new features.
• Security & abuse prevention — detecting unauthorized access, enforcing the Acceptable Use Policy, investigating violations of the Terms, and protecting the Platform and its users.
• Communication — sending transactional emails about your account, Orders, security events, and policy updates; and, where you have consented or where permitted by law, marketing communications about new features you are likely to care about.
• Legal compliance — meeting applicable tax, accounting, anti-money-laundering, consumer-protection, and data-protection requirements, and responding to lawful requests from public authorities.

05Legal Bases for Processing

For users whose processing is subject to the EU/UK General Data Protection Regulation, India’s Digital Personal Data Protection Act (DPDP), or similar laws, we rely on the following legal bases:

• Performance of a contract — to deliver the Services you have ordered and to manage the account and billing relationship.
• Legitimate interests — to improve the Services, prevent fraud, secure the Platform, and run our business, balanced against your privacy rights.
• Consent — for certain marketing communications, non-essential cookies, and any processing that specifically requires your opt-in under applicable law. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation — to comply with tax, accounting, and other regulatory requirements, and to respond to lawful requests from competent authorities.

06Cookies & Tracking

We use cookies and similar technologies (local storage, web beacons, session storage) for three purposes: essential Platform functionality, analytics, and — where permitted — limited marketing measurement.

Essential cookies

These keep you signed in, protect against CSRF attacks, remember your cart during checkout, and maintain your session across page loads. Essential cookies cannot be disabled without breaking core functionality.

Analytics cookies

We use a privacy-respecting analytics provider to understand which pages are visited, which features are used, and where users encounter errors. Analytics cookies never include content you type into forms (briefs, messages, payment details). Where required by law, analytics cookies are loaded only after you consent.

Marketing measurement

On public marketing pages, we may use limited pixels to measure the effectiveness of advertising campaigns. These are loaded only after consent on jurisdictions where that is required.

You can manage cookie preferences from your browser’s settings. Disabling essential cookies will prevent you from signing in.

07How We Share Information

We do not sell personal information. We share information only with the categories of recipients described below, and only to the extent necessary for the stated purpose.

• Between Buyers and Publishers. When you place an Order, the Publisher assigned to it receives the Order details (target URL, anchor text, brief, any Buyer-provided content) needed to fulfill the placement. Buyer identities are generally not disclosed to Publishers except where the Order workflow requires it.
• Service providers. We share information with vendors who help us operate the Platform: payment processors, email delivery services, cloud hosting, analytics, customer support tools, and fraud prevention partners. These vendors are bound by confidentiality and data-protection obligations.
• Legal & safety. We disclose information when required by law, valid legal process, or where disclosure is necessary to protect the rights, property, or safety of PRWiz, our users, or the public.
• Corporate transactions. In the event of a merger, acquisition, restructuring, or sale of assets, information may be transferred to the acquiring entity under terms that require it to honor the material commitments of this policy.
• With your consent. For any other sharing you specifically authorize (for example, a case study featuring your brand).

08Data Retention

We retain personal information only for as long as we need it to fulfill the purposes described in this policy, to provide the Services, to meet our legal and regulatory obligations, to enforce our agreements, and to defend against legal claims.

In general:

• Account data is retained for the life of the account plus a reasonable period thereafter to honor residual obligations (warranty claims, validity window commitments, tax records).
• Order & billing records are retained for the period required by applicable tax and accounting law, typically seven (7) years.
• Support correspondence is retained for at least two (2) years to support follow-up, audit, and quality review.
• Server logs are retained for a limited period (generally up to twelve months) unless a security investigation requires a longer hold.

When retention periods expire, we delete or anonymize the affected data so it can no longer be associated with you.

09Security Measures

We use a layered security approach including encryption in transit (HTTPS/TLS), encryption at rest for sensitive fields, access controls and principle-of-least-privilege for internal systems, audit logging, regular dependency updates, and security reviews of new features. Payment details are processed by PCI-DSS-compliant processors and never stored on our own servers.

No system can guarantee absolute security. In the unlikely event of a data breach affecting your information, we will notify you and any applicable regulators in accordance with the requirements of applicable law.

10International Transfers

PRWiz operates globally. Information collected through the Services may be processed in countries other than your own, including in India, where data protection law may differ from your local law. Where we transfer personal data from the European Economic Area, the United Kingdom, or other jurisdictions with data-export controls, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, adequacy decisions where available, and contractual protections with our service providers.

By using the Services, you acknowledge that your information may be transferred internationally as described above, and that we will apply the safeguards described in this policy regardless of where the data is processed.

11Your Rights & Choices

Depending on your location, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request deletion of your personal information, subject to exceptions where we must retain it to meet legal obligations or defend claims.
• Restriction — request that we restrict the processing of your information in certain circumstances.
• Portability — receive a copy of certain information in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests, including profiling for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Lodge a complaint — with a supervisory authority in your place of residence.

To exercise any of these rights, email hello@prwiz.com with enough detail to identify your account and the specific right you wish to exercise. We will verify your identity before acting on a request, and we respond within the timeframe required by applicable law.

We do not charge a fee for reasonable requests. If a request is clearly excessive or repetitive, we may charge a reasonable administrative fee or decline to act, as permitted by law, and we will tell you why.

12Automated Processing

Certain features of the Platform involve automated processing, including algorithmic matching between Buyer Orders and Publisher inventory, fraud scoring on new accounts and payments, spam detection in messages, and relevance ranking within search results. These systems support and accelerate human decision-making but do not replace it for consequential account actions.

We do not make decisions that produce legal or similarly significant effects about you solely on the basis of automated processing, including profiling, without meaningful human involvement, except where such a decision is necessary for entering into or performing a contract with you, is authorized by law, or is based on your explicit consent.

Where you believe an automated decision has affected you unfairly — for example, an automated fraud hold on a payment, an automated suspension, or a rejected application — you have the right to:

• Obtain meaningful information about the logic involved and the significance and envisaged consequences of the processing.
• Request human review of the decision by a member of our team who was not involved in the original automated step.
• Express your point of view and provide additional context.
• Contest the decision and request that it be reconsidered.

Requests for human review can be sent to hello@prwiz.com with the subject line “Human review request” and a brief description of the decision you want reconsidered.

13Grievance Officer (India)

In accordance with Section 10 of India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and the Information Technology Rules, PRWiz designates a Grievance Officer to receive and address complaints from Data Principals about the handling of their personal data.

When submitting a grievance, please include (a) your name and the account you are writing about, (b) a clear description of the concern, and (c) any supporting information that would help us investigate. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India or your local supervisory authority as permitted by law.

Nothing in this section limits the other rights and remedies available to you under the DPDP Act, the GDPR, or any other applicable data protection law.

14Children’s Privacy

The Services are not directed to children under 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without verified parental or guardian consent, we will delete that information promptly.

If you are a parent or guardian and believe that a child has provided us with personal information, please contact us at hello@prwiz.com and we will take appropriate action.

15Third-Party Links

The Services may contain links to third-party websites, including Publisher websites where placements are published and partner websites referenced in marketing material. This policy does not apply to those third-party sites, and we are not responsible for their content or privacy practices.

We encourage you to review the privacy policies of any third-party website you visit from the Services.

16Changes to This Policy

We may update this policy from time to time to reflect changes to the Services, new regulatory requirements, or improvements to our practices. When we make material changes, we will update the “Last updated” date at the top of this page and provide additional notice through the Platform, by email, or through a banner on the site. Your continued use of the Services after the revised policy takes effect constitutes your acceptance of the changes.

17Contact the Data Controller

If you have questions about this policy, wish to exercise a right described above, or want to file a privacy-related complaint, you can reach the data controller at the addresses below.