SECTION 02Using OohpointDPDP Compliant

Privacy Policy

How Freebies Media Solution Pvt. Ltd. processes, protects, and respects your personal data under DPDP Rules, 2025.

Last updated: 24 August 2026•11 min read

In short

We collect and process personal data solely for legitimate platform operations, campaign administration, fraud prevention, and reward redemption. Oohpoint does not sell your personal data as a commodity, does not continuously track background location, and operates under India's DPDP Act 2023 & DPDP Rules 2025.

The full legal terms are set out below.

01Introduction

This Privacy Policy explains how Freebies Media Solution Private Limited, bearing Corporate Identification Number U73100MH2024PTC425087 ("Oohpoint", "Company", "we", "us" or "our"), collects, uses, stores, shares and otherwise processes personal data when you use the Oohpoint platform available through oohpoint.com and related services (collectively, the "Platform"). Oohpoint is designed to enable eligible users to discover and participate in Campaigns and Micro Gigs, complete activities, earn eligible Oohpoint Credits or other Rewards, and redeem available Rewards. We aim to collect and use personal data responsibly and only for legitimate and clearly identified purposes connected with operating and improving the Platform, administering Campaigns, verifying participation, preventing fraud, issuing Rewards and meeting applicable legal obligations. This Privacy Policy should be read together with our:

Terms of Use;
Campaign Participation Rules;
Rewards and Credits Policy; and
any additional privacy notice or terms presented in connection with a specific Campaign, feature or service.

DPDP RULES 2025 NOTICE:

The Digital Personal Data Protection Rules, 2025 require a clear and understandable notice that includes an itemised description of the personal data being processed and the purposes for which it is processed. The Rules have a phased commencement schedule, and Oohpoint intends to maintain its privacy practices and notices in line with the applicable requirements as they come into force.

02Who We Are

The Platform is operated by: Freebies Media Solution Private Limited CIN: U73100MH2024PTC425087 Website: oohpoint.com For privacy-related questions or requests: Email: legal@oohpoint.com For general support: Email: info@oohpoint.com For the purposes of applicable data protection law, Oohpoint may act as the entity responsible for determining the purposes and means of processing personal data in connection with the Platform, subject to the role of any relevant third party in a particular service or transaction.

03Our Privacy Approach

Our data protection approach is grounded in the following core principles:

Data Minimisation

We aim to collect personal data that is reasonably necessary for the relevant purpose.

Purpose Limitation

We use personal data for the purposes described in this Privacy Policy or otherwise communicated to you.

Transparency

We aim to explain what we collect and why in clear, simple language.

User Control

Where applicable, we provide mechanisms for you to access, correct, update, delete or otherwise exercise rights relating to your personal data.

Security

We use reasonable technical and organisational measures designed to protect personal data.

No Sale of Personal Data

Oohpoint does not sell your personal data as a commodity. We share limited personal data where necessary to operate a Campaign, verify participation, fulfil a Reward, provide a requested service, comply with law, or with valid consent.

04Personal Data We Collect

The personal data Oohpoint processes depends on how you use the Platform. Based on the current Oohpoint user model, the following categories may be processed:

4.1 Account Information

Name, mobile number, email, date of birth/age, gender (if provided), Account identifiers, and authentication/status info (via OTP or Google login) to create accounts, verify access, confirm eligibility, and communicate.

4.2 Campaign Participation Info

Survey responses, quiz answers, content interactions, website visit records, required app download/use info, referral records, campaign IDs, timestamps, completion status, and verification results.

4.3 Submissions and Proof

Screenshots, photographs, videos, written responses, links, and campaign-specific proof to verify completion, investigate fraud, resolve disputes, maintain records, and prepare reporting.

4.4 Rewards & Redemptions

Credit balances, issuance records, expiry information, redemption history, selected rewards, status, and transaction reference IDs to operate the Credits ledger and fulfill rewards.

4.5 Referral Information

Referring user IDs, qualification status, duplicate prevention data, and referral reward credits to prevent fake accounts and administer referral opportunities.

4.6 Communications & Support

Name, contact details, message contents, inquiry records, and dispute logs to investigate requests, provide support, and improve services.

05Information We Do Not Intend to Collect

Oohpoint does not currently intend to collect or process the following categories through the core Platform unless a specific feature is introduced and an appropriate notice or policy update is provided:

continuous background location data;
precise location data merely for general tracking;
biometric identity information;
financial account or bank account information for Credit withdrawal;
payment card information for the current user model;
social-media account credentials;
passwords from third-party accounts; or
special-category or highly sensitive personal information for general Campaign participation.

FEATURE EXPANSION PROTOCOL:

If Oohpoint introduces a feature requiring any of these categories, we will update the relevant privacy notice and product controls before or at the time the new processing is introduced.

06How We Use Personal Data

We process personal data for the following legitimate purposes:

6.1 Provide the Platform

Creating and maintaining your Account, authenticating access, providing campaign access, and administering features.

6.2 Administer Campaigns

Determining Campaign eligibility, recording participation, reviewing Submissions, verifying task completion, and communicating updates.

6.3 Credits & Rewards

Calculating eligible Credits, applying Credit expiry rules, processing redemptions, and resolving Reward issues.

6.4 Prevent Fraud

Detecting duplicate Accounts, identifying suspicious activity, preventing manipulated Submissions, and protecting platform integrity.

6.5 Provide Support

Responding to enquiries, investigating complaints, resolving technical tickets, and assisting with privacy requests.

6.6 Legal & Regulatory

Complying with applicable law, responding to valid legal requests, protecting legal rights, and investigating security incidents.

6.7 Platform Improvement

Using aggregated, de-identified metrics to understand campaign performance, optimize user flows, and improve app stability.

07Consent and Your Choices

Where Oohpoint relies on your consent for a particular purpose, we intend to request consent through a clear affirmative action and provide appropriate information about the relevant processing. Where consent is required, you may withdraw it through the mechanism made available by Oohpoint or by contacting us at: legal@oohpoint.com Withdrawal of consent will not necessarily affect processing already carried out before withdrawal or processing that Oohpoint is otherwise permitted or required to continue under applicable law. Where certain information is necessary to provide a Campaign, Reward or Platform service, withdrawing consent or refusing to provide the required information may mean that Oohpoint cannot provide that particular feature or service.

DPDP FRAMEWORK CONSENT PRINCIPLE:

The DPDP framework requires consent, where relied upon, to be free, specific, informed, unconditional and unambiguous with clear affirmative action, and requires a practical mechanism for withdrawal.

08How We Share Personal Data

We do not sell personal data as a standalone asset. We may share personal data only where reasonably necessary for defined legitimate operational purposes:

8.1 Service Providers

Providers of authentication, cloud infrastructure, hosting, technical support, analytics, security, and communication infrastructure operating under data processing boundaries.

8.2 Campaign & Brand Partners

Aggregated, de-identified reporting is provided to brands. Identifiable user data is never shared without clear campaign-specific disclosures before participation.

8.3 Reward Partners

Merchant partners, gift card providers, and voucher fulfillment platforms receive data strictly required to issue and record redeemed rewards.

8.4 Legal & Safety

Disclosures to law enforcement, regulators, or courts when required by law or to investigate fraud, security incidents, and protect safety.

8.5 Corporate Transactions

Transfers in connection with a merger, acquisition, restructuring, or asset transfer, subject to law and appropriate safeguards.

09Third-Party Rewards

Some Rewards available through Oohpoint may be issued, fulfilled or supported by third parties (for example, merchant gift cards redeemed using Oohpoint Credits). The specific merchant or issuer may have separate terms concerning validity, redemption, eligible products or services, transaction limits, cancellation, and refunds. Oohpoint may provide reasonable support if you experience an issue with a Reward, but the relevant merchant or issuer may independently control aspects of the Reward.

10Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure, including access controls, role-based access, authentication measures, encryption in transit and at rest, restricted internal access, security monitoring, incident response processes, and review of relevant service providers. No internet-based service or security system can guarantee absolute security. You should also take reasonable steps to protect your Account and authentication methods.

CERT-IN INCIDENT REPORTING DIRECTIVE:

CERT-In directions require covered entities to report specified cyber incidents, including certain data breaches and data leaks, within prescribed timelines, including a six-hour reporting requirement for incidents within the applicable reporting framework.

11Data Retention

We retain personal data only for as long as reasonably necessary for providing the Platform, maintaining your Account, administering Campaigns, verifying participation, managing Credits and Rewards, resolving disputes, preventing fraud, complying with legal obligations, and protecting our legal rights. Retention periods may differ depending on the type of information and purpose (such as post-campaign verification and accounting requirements). When personal data is no longer required for the relevant purpose, we aim to delete, erase, anonymise or otherwise appropriately dispose of it, subject to applicable legal or operational retention requirements.

INTERNAL DATA RETENTION SCHEDULE:

Oohpoint maintains an internal Data Retention Schedule defining actual retention periods for each category of data across databases and log pipelines.

12Your Privacy Rights

Depending on applicable law, you may have rights relating to your personal data, including the ability to:

request information about personal data processed about you;
request correction or updating of inaccurate information;
request deletion or erasure of personal data where applicable;
withdraw consent where processing is based on consent;
raise a grievance regarding personal data processing; and
exercise other rights available under applicable law.

PRIVACY DESK & DPDP RIGHTS:

To submit a request, contact our Privacy Desk at legal@oohpoint.com. We may verify your identity before acting on a request.

The DPDP Rules establish mechanisms relating to notice, consent, security safeguards, grievance redressal and rights of Data Principals, with provisions commencing on a phased schedule.

13Account Deletion

You may request deletion of your Oohpoint Account by using the mechanism made available within the Platform, where available, or by contacting: legal@oohpoint.com Deleting an Account does not necessarily mean that all associated information can immediately be deleted. Oohpoint may retain limited information where reasonably necessary to comply with legal obligations, prevent fraud, resolve disputes, enforce legal rights, or maintain records required by law. Oohpoint maintains a clear operational workflow for Account deletion and ensures that the user-facing process is accessible.

14Automated Processing and Fraud Prevention

Oohpoint may use automated systems to help verify Campaign completion, identify duplicate activity, detect suspicious behaviour, prevent reward abuse, and identify potential fraud. Automated systems may contribute to a decision about whether a Submission is accepted, rejected or flagged for further review. Where appropriate, Users may contact Oohpoint if they believe a material verification or Account decision was incorrect. Oohpoint does not rely on automated systems to make decisions in a manner that violates applicable law.

15Marketing Communications

Oohpoint may communicate with you regarding Campaigns, Platform updates, Rewards and other services. Where promotional or marketing communications require consent or an opt-out mechanism, Oohpoint will provide the applicable choice or preference mechanism. You may manage certain communications through available Account settings, instructions included in the relevant communication, or contacting Oohpoint. Service and transactional communications that are necessary to operate your Account will still be sent as permitted or required.

16Children (Age 18+ Requirement)

The current Oohpoint Platform is intended only for individuals who are 18 years of age or older. Oohpoint does not intentionally provide Accounts or Campaign participation to persons under 18. If we become aware that an Account belongs to a person who does not meet our minimum age requirement, we may restrict or close that Account and take appropriate steps regarding associated personal data. If Oohpoint later changes its age policy or introduces services specifically involving minors, the applicable privacy and consent processes will be separately reviewed and implemented.

17International Processing

Oohpoint may use technology providers whose infrastructure or processing operations involve locations outside India. Where personal data is transferred or processed outside India, Oohpoint intends to do so subject to applicable law and any restrictions, requirements or safeguards that may apply. We review our international data-processing arrangements as the applicable regulatory framework develops.

18Cookies and Similar Technologies

Oohpoint may use cookies or similar technologies that are necessary to operate, secure or improve the website and Platform. If Oohpoint introduces non-essential analytics, advertising or tracking technologies requiring additional notice, consent or preference management, Oohpoint will provide an appropriate cookie notice and controls. A separate Cookie Policy is published to detail the specific cookie categories employed.

19Third-Party Links and Services

The Platform may contain links to third-party websites, applications or services. Oohpoint is not responsible for the privacy practices of independent third parties. When you access a third-party service, you should review that party's applicable privacy policy and terms.

20Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Platform, changes to data processed, new Campaign features, updated service providers, changes in applicable law, or improvements to our privacy practices. If a change is material, we will take reasonable steps to provide appropriate notice. The updated version will indicate the revised effective date. Where applicable law requires additional notice or consent before a new processing activity begins, Oohpoint will implement the required process.

21Contact and Privacy Grievances

For privacy-related questions, requests or grievances, contact: Freebies Media Solution Private Limited CIN: U73100MH2024PTC425087 Privacy and Legal Contact: legal@oohpoint.com General Support: info@oohpoint.com When contacting us about a privacy matter, please provide sufficient information for us to understand and investigate your request. We may request additional information to verify your identity or process your request.

22Governing Framework

This Privacy Policy operates in accordance with applicable Indian law, including applicable provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as and when the relevant provisions become applicable, along with other applicable information technology, cybersecurity and consumer protection requirements. The DPDP Rules, 2025 provide different commencement dates for different provisions, and Oohpoint maintains an active implementation roadmap aligned with the phased commencement schedule.

23Operational Controls & Compliance Commitments

This Policy reflects Oohpoint's verified product model and data architecture. Oohpoint maintains the following internal compliance controls:

Data Inventory: Confirmed catalog of every field collected across registration, campaigns, and redemptions.
Data Flow Map: Documented routing of data across secure endpoints and infrastructure.
Vendor Register: Audited list of Firebase, hosting, Google authentication, and third-party processors.
Retention Schedule: Defined retention periods and disposal procedures.
Consent Log: Recorded consent and notice versions.
Account Deletion Workflow: User-facing self-service deletion and DSAR processes.
Privacy Request Workflow: Procedures for access, correction, deletion, and grievance handling.
Security Incident Response Plan: Including prescribed CERT-In six-hour breach reporting.
Campaign Data-Sharing Rule: Strict separation between aggregated brand reporting and personal data.
Third-Party Integration Review: Documented data exchanges with Reward and technology partners.

Cookie Policy