Privacy policy

Effective 20 September 2026. Applies to the ADX website, the ADX and ADX Agent mobile apps, and the ADX Console.

ADX is a marketplace for advertising space operated by Keysquare Technologies Pvt Ltd ("ADX", "we", "us"). This policy explains what personal data we collect, why, how long we keep it, whom we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

1. What we collect

• Account data: mobile number, name, email address, date of birth, gender, profile photo, and the one-time codes used to sign in.
• Business data: for publishers and advertisers, the business name, GSTIN, addresses, contact persons, and the listings, campaigns, bookings and invoices created on the platform.
• Identity and verification data (KYC): where required by law or by our platform rules, government identity documents (such as Aadhaar or PAN), address proofs, a live selfie, and bank account details. Aadhaar numbers are stored masked. Verification may be performed by a licensed provider on our behalf.
• Agent data: for field agents, the documents above plus a driving licence, vehicle registration and insurance where a vehicle is used, education and work history where the role requires it, emergency contact, and location while a visit is in progress.
• Location data: the device's location when you place a listing on the map, verify a spot, check in to a visit, or search nearby. Location is collected only while the app is open and you are using such a feature.
• Photographs and documents: photos of advertising spots, proof-of-display images, and files you upload.
• Payment data: transaction records and the last digits of payment instruments. Card and bank details entered at checkout are handled by our payment gateway (Cashfree Payments) and are not stored on ADX servers.
• Usage and device data: app version, device model, operating system, IP address, crash reports and the actions taken on the platform, used for security and to improve the service.
• Scan data: when someone scans an ADX QR code printed on a creative, we record the time, an approximate location derived from the network, and the device type. We do not identify the person scanning.

2. Why we use it

• To create and operate your account and provide the marketplace: listing, booking, verification, payments and payouts.
• To verify identity and prevent fraud, as required for a platform that moves money between parties.
• To comply with law, including tax, accounting and anti-money-laundering obligations.
• To send transactional messages: sign-in codes, booking confirmations, payment receipts, verification requests and reminders.
• To provide support and resolve disputes.
• To improve the service and keep it secure.

We do not sell personal data. We do not use it for third-party advertising.

3. Whom we share it with

• Other users, to the extent needed for a transaction: an advertiser sees a publisher's business name and the spot; a publisher sees the advertiser's business name and campaign; a field agent sees the details needed to visit a spot or onboard a business.
• Service providers: cloud hosting and storage, payment gateway and payout providers (Cashfree Payments), SMS and email delivery, identity verification providers, map providers, and the QR engine. Each receives only what its function needs and is bound by contract.
• Authorities: where required by law, a court order, or to protect the rights and safety of users or ADX.

4. How long we keep it

• Account and transaction records: for the life of the account and thereafter as required by Indian tax and accounting law (generally eight years).
• Identity documents: for the period the account is active and up to 90 days after closure, unless a longer period is required by law or a dispute is open.
• Field-agent documents: purged 90 days after the agent leaves the platform.
• Location and scan data: retained in aggregate for analytics; raw records are removed within 12 months.

5. Your rights

You may access and correct your data in the app's My account or My profile screens. You may ask us to delete your account and personal data, withdraw consent where processing is based on consent, nominate another person to exercise your rights, and raise a grievance. Write to the contact below. We respond within 30 days. Some data must be retained after deletion where law requires it; we will tell you what and why.

6. Security

Data is transmitted over TLS, stored on access-controlled infrastructure, and identity documents are kept in private storage that is not reachable by public URL. Access inside ADX is limited to the staff whose role needs it and is logged. No system is perfectly secure; if a breach affects you we will notify you and the Data Protection Board as the law requires.

7. Children

ADX is for businesses and adults. We do not knowingly collect data from anyone under 18.

8. Changes

We will post changes here with a new effective date and notify you in the app when the change is material.

9. Grievance officer and contact