1. Who we are
Atomic Vector ("Vector", "the platform") is operated by Atomic Capital, an alternative investment fund registered with the Securities and Exchange Board of India (registration number IN/AIF2/23-24/1485), with its registered office at Office 10, A/204, Supreme Business Park, Hiranandani Gardens, Powai, Mumbai, Maharashtra 400076, India.
Atomic Capital is the data controller — or, under India's Digital Personal Data Protection Act, 2023, the data fiduciary — for the information described in this policy. Where a brand uses Vector to manage its own creator programme, that brand determines what it does with its own records, and we process those records on its instructions.
2. What this policy covers
This policy applies to the Atomic Vector platform, to vector.atomiccapital.in, and to the connected services Vector uses on a brand's behalf. It describes how we handle information about three groups of people:
- Brand users — people at an Atomic Capital portfolio company who log in and run their creator programme.
- Creators — people a brand discovers through Vector, and people a brand works with once they have agreed to take part.
- Visitors — anyone who simply reads this website.
Atomic Capital's corporate website, atomiccapital.in, is covered by its own separate privacy policy.
3. Information we collect
| Who | What we collect | Where it comes from |
|---|---|---|
| Brand users | Name, work email address, role, the brand they belong to, and a record of significant actions taken in the platform, such as approving a payout. | Provided during setup by the brand or by our team. |
| Creators (discovery) | Public profile information — username, display name, profile picture, biography, follower count, engagement rate, content categories, and the country or city stated on the profile. | The Instagram Creator Marketplace, accessed on the brand's behalf. See section 4. |
| Creators (working) | Contact details a creator provides — typically a phone number for WhatsApp — the discount code issued to them, the commission terms agreed, and payout records. | Provided by the creator or entered by the brand once the creator agrees to take part. |
| Orders | Order reference, order value, currency, timestamp, the discount code used, and whether the order was later refunded or cancelled. | The brand's own online store, which the brand connects to Vector. |
| Website visitors | Standard server request information, including IP address, browser type and pages requested, kept for security and reliability. | Automatically, when you load a page. |
We do not collect shoppers' personal information. When an order flows into Vector, we take the order value, the timestamp and the discount code. We do not collect or store the name, email address, phone number or delivery address of the person who placed the order.
This website does not use advertising or tracking cookies, and does not run third-party analytics.
4. Information from Instagram and Meta
Vector connects to Meta's Instagram Creator Marketplace so that a brand can search for creators who have opted in to hearing from brands. This connection matters enough to describe on its own.
What we request
With the brand's authorisation, Vector requests read access to creator discovery information through Meta's platform. A person at the brand grants this by signing in with Facebook and selecting the brand's own Instagram professional account.
What we do with it
- We show matching creator profiles to that brand, inside that brand's workspace only.
- We store profile information so a brand's saved shortlists remain usable, and refresh it periodically so it does not go stale.
- We use it to help a brand decide who to approach. Nothing more.
What we never do
- We never post, comment, send messages, follow accounts, or change anything on a brand's Instagram account or on any creator's account. Our access is read-only.
- We never sell, licence or rent information obtained from Meta, and we never share it with data brokers.
- We never use it for advertising, ad targeting, or building advertising audiences.
- We never make it visible to any brand other than the one whose authorised connection retrieved it.
- We never use it to make automated decisions about a person's eligibility for credit, employment, housing, insurance or any similar benefit.
Our handling of this information is subject to the Meta Platform Terms and Developer Policies. If a brand disconnects its Instagram account, we stop retrieving marketplace information for that brand immediately and delete the profile information we retrieved for it, in line with section 8.
Instagram and Meta are trademarks of Meta Platforms, Inc. Atomic Vector is an independent platform and is not affiliated with, sponsored by, or endorsed by Meta.
5. How we use information
We use the information described above to:
- let a brand search for, shortlist and organise creators;
- issue a unique discount code to each creator and deliver it to them;
- match incoming orders to the code that produced them, and reverse that match when an order is refunded or cancelled;
- calculate commission, route it for approval, and keep a record of what was paid and why;
- notify the right person when something fails — an undelivered message, an expired connection — so it gets fixed;
- keep the platform secure, diagnose faults, and meet our legal and regulatory obligations.
We do not use personal information to train machine learning models, and we do not build profiles of individuals for any purpose beyond the creator programme the information was collected for.
6. Why we are allowed to use it
Where the Digital Personal Data Protection Act, 2023 applies, we rely on the consent of the individual concerned or, where permitted, on legitimate uses recognised by that Act. Where the EU or UK GDPR applies — for example if a creator is based there — we rely on:
- Contract, where we are administering an arrangement between a brand and a creator, including issuing codes and paying commission;
- Legitimate interests, for operating and securing the platform and for a brand's initial evaluation of publicly available creator profiles, balanced against the individual's interests;
- Consent, where a creator agrees to be contacted or to take part in a programme; and
- Legal obligation, for tax, accounting and regulatory record-keeping.
7. Who we share it with
We do not sell personal information, and we never have. We share it only in these situations:
- With the brand you are working with. A creator's information is visible to the brand that discovered or engaged them, and to no other brand.
- With service providers who operate the platform under contract — our cloud hosting provider, the messaging provider that delivers WhatsApp messages, and the brand's own e-commerce platform. They may use the information only to provide their service to us.
- With professional advisers — auditors, accountants and lawyers, bound by confidentiality.
- Where the law requires it, or to establish, exercise or defend legal claims, or to protect the safety of any person.
- In a corporate transaction, if the platform or a brand's business is transferred, in which case the recipient remains bound by this policy.
8. How long we keep it
| Information | Kept for |
|---|---|
| Creator profiles retrieved from Instagram, where the creator was never engaged | Up to 12 months from retrieval, or until the brand deletes the shortlist or disconnects Instagram, whichever comes first |
| Records of creators a brand actually worked with | For the duration of the relationship, then up to 8 years, to meet Indian tax and accounting record-keeping requirements |
| Order and commission records | Up to 8 years, for the same reason |
| Brand user accounts and action logs | For the duration of the account, then up to 24 months |
| Website server logs | Up to 90 days |
When a retention period ends, we delete the information or irreversibly anonymise it so it can no longer be linked to a person.
9. Deleting your data
To request deletion of your data, email generalpartner@atomiccapital.in with the subject line "Atomic Vector data deletion request".
Tell us who you are and, if you are a creator, the Instagram username or phone number we would hold you under. We will confirm receipt within 7 days and complete the deletion within 30 days.
If you are a creator, you can ask us to delete everything we hold about you at any time, whether or not you have ever worked with one of our brands. You do not need to give a reason.
If you are a brand, disconnecting your Instagram account in your workspace stops all further retrieval immediately and triggers deletion of the marketplace profile information retrieved for you. Closing your workspace deletes your creators, shortlists and codes.
If you removed Vector through Facebook or Instagram settings, that revokes our access straight away. To also have the information already retrieved deleted, use the email address above.
We may need to keep a limited record where the law requires it — for example, a payment we have already made to you must remain in our accounting records. Where that applies we will tell you what has been kept and why.
10. Your rights
Depending on where you live, you may have the right to ask us to give you a copy of the information we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent, you can withdraw it at any time.
Write to generalpartner@atomiccapital.in and we will respond within 30 days. We do not charge for this. If you are not satisfied with our response, you may complain to the Data Protection Board of India or to the supervisory authority in your country.
11. Security
We protect information with encryption in transit and at rest, access limited to the people who need it, separation of each brand's records so they cannot be read across, credentials held in managed secret storage, and logging of significant actions. No system is perfectly secure, but if a breach occurs that is likely to affect you, we will notify you and the relevant authority as the law requires.
12. Where data is stored
Vector's data is hosted on cloud infrastructure. Some of our service providers operate outside India, which means information may be transferred and processed abroad. Where that happens, we put appropriate safeguards in place, including contractual protections with each provider.
13. Children
Vector is a business tool and is not directed at children. We do not knowingly collect information about anyone under 18, and brands using Vector must not engage creators under 18 through the platform. If you believe we hold information about a child, contact us and we will delete it.
14. Changes to this policy
If we change this policy we will update the date at the top of this page. Where a change materially affects how we use your information, we will give notice through the platform or by email before it takes effect.
15. Contact us
Atomic Capital
Office 10, A/204, Supreme Business Park
Hiranandani Gardens, Powai
Mumbai, Maharashtra 400076, India
Privacy and data deletion: generalpartner@atomiccapital.in