What we store

No accounts, no tracking profile

grambid has no sign-up, no login, and no password. We do not run advertising trackers or third-party analytics that follow you across sites. We do not sell data.

What we record

Listings

For each listed account: the Instagram handle, whether our existence check confirmed it, and — where we could read it — the public follower count. All of it comes from the public profile header, the part anyone sees by visiting the profile. We do not fetch private content, follower lists, posts, or anything behind a login.

We also count outbound clicks on each listing, in aggregate only.

Payments

For each bid: the amount, the currency, the payment status, the payment method type (UPI, card, netbanking), the processor's order and payment identifiers, which processor handled it, and timestamps.

We never see or store your card number, UPI PIN, CVV, or bank credentials. Those go directly to whichever payment processor handled your bid — Razorpay or Dodo Payments — and never touch our servers.

Your agreement to these terms

With each bid we record which version of these terms you accepted — the “last updated” date at the top of this page — and the time you accepted it. It is stored on the payment record so that both of us can tell what was agreed and when. It identifies the document, not you.

Abuse-tracing hashes

With each payment we store a salted, truncated cryptographic hash of the submitter's IP address and browser user-agent. We do not store the raw IP or user-agent. The hash uses a secret salt, so it cannot be reversed into an address by anyone without that secret. It exists so we can identify patterns of abuse — repeated fraudulent submissions from one source — and for nothing else.

Payment provider events

We keep a log of the confirmation messages our payment processors send our server, so we can debug and prove a payment was credited exactly once. Payer-identifying fields in those messages — name, email address, phone number, billing address, UPI VPA, and card metadata — are stripped before the message is stored. The processor itself retains that information under its own privacy policy; we simply do not keep a second copy.

Who else is involved

• Razorpay processes payments and handles all payment credentials, subject to its own privacy policy and to Indian financial regulation.
• Dodo Payments processes payments as an alternative provider, subject to its own privacy policy. Where it is used it acts as merchant of record — it is the seller of record for that transaction, so it collects a billing address as well as the payment details, and its name appears on your statement. Which of the two handled a given bid depends on which was available when you paid; your checkout page names it.
• Our hosting and database providers store the data described above on our behalf.

How long we keep it

Listings and the payment ledger are kept for as long as the leaderboard exists — the ledger is what proves each ranking was paid for, and it is also needed for financial record-keeping. Existence-check results are cached briefly and overwritten. Abuse-tracing hashes are kept with the payment record.

Your requests

If you are the owner of a listed account and want the listing removed, or you want to know what is stored about a payment you made, DM @grambid.in and we will action it. We may need the payment reference to locate a record, since there is no account to log into.

We cannot delete a payment record entirely where doing so would break the financial ledger, but we can remove the listing and the public display of a handle.

Cookies

grambid sets no tracking cookies. Your light/dark theme choice is stored in your own browser's local storage and is never sent to us.

Changes

If this page changes, the “last updated” date above changes with it.

Contact

Privacy requests reach us as a direct message to @grambid.in on Instagram. It is the only channel the site publishes, so it is the one that gets read.