Privacy Policy


Last updated: March 31, 2026

1. Introduction

Mall ("we," "our," or "us") operates the website mall-topaz.vercel.app(the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect the following types of information:

  • Account Data: Information provided when you register, including email and authentication details.
  • Campaign Content: Images, videos, destination URLs, offer text, and targeting preferences when you publish a campaign.
  • Usage & Analytics Data: Pages visited, campaign views, clicks, and interactions to provide performance metrics.
  • Billing Information: Transaction details processed via third-party providers (e.g., Razorpay). We do not store full payment card details on our servers.

3. How We Use Your Information

  • To operate and maintain the website and dashboard
  • To display your published advertisements to users globally or in targeted countries
  • To provide real-time campaign performance metrics (views, clicks, and balance tracking)
  • To process payments, campaign top-ups, and refunds
  • To review campaign content for policy compliance and respond to support inquiries

4. Publicly Displayed Information

When you publish a campaign using the Mall dashboard, the content you provide (images, videos, text, and optional destination URLs) will be displayed publicly on the infinite canvas. This information can be viewed by anyone accessing the platform. Please do not include personal or sensitive information in your campaign creatives.

5. Cookies

Cookies are small files stored on your device. We use cookies for website functionality and to enable our advertising partners to serve relevant ads. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some features of the Service may not function properly.

6. Canva Integration & Third-Party Storage

Our Service provides an integration with Canva to enhance your creative workflow. When you use this feature:

  • OAuth Connection: We connect to your Canva account via OAuth 2.0. We request the minimum necessary permissions (Scopes: design:content:read, design:content:write, design:meta:read, asset:read, asset:write) to allow you to create, edit, and import designs directly into Mall.
  • Design Export: When you complete a design in Canva, we export the content as a PNG image using Canva's Connect API.
  • Cloudinary Storage: To ensure your designs are always available for your campaigns, we re-upload the exported images to Cloudinary for permanent storage. We store the resulting Cloudinary URL and your Canva Design ID in our database.
  • Data Retention: We retain your Canva OAuth tokens only as long as your integration is connected. You can disconnect Canva at any time from your dashboard settings, which will revoke our access to your account.

7. Third-Party Services

We may employ third-party companies and services (such as Vercel for hosting, Cloudinary for media storage, and Razorpay for payments) to facilitate our Service, provide the Service on our behalf, perform Service-related tasks, or assist us in analyzing how our Service is used. These third parties may have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

8. Data Security

We value your trust and strive to use commercially acceptable means to protect your information. We use server-side encryption and HTTP-only cookies to safeguard your integration tokens (such as Canva access tokens). However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this page periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Email: patelanuj863@gmail.com, patelrajone0@gmail.com
  • Website: Contact Page