This policy explains what personal data GullyPage collects, why we collect it, who we share it with, and the choices and rights you have. It applies to the GullyPage website at www.gullypage.com, every page published on a gullypage.com subdomain or a connected custom domain, and the GullyPage dashboard.
GullyPage is operated by Gully System Private Limited, #257, 3rd floor, Sri Nanjundeshwara Complex, Service Road, Nagarbhavi 8th Block, Outer Ring Road, 2nd Stage, Bengaluru – 560072, Karnataka, India (“GullyPage”, “we”, “us”). We are the Data Fiduciary for the personal data described in this policy, except where stated otherwise in the section on enquiries.
Information we collect
Information you give us
- Account information — your name, email address, password (stored only as a cryptographic hash), and optionally your mobile number.
- Profile content — everything you choose to add to your professional profile: photographs, headline, biography, work experience, education, skills, credentials, projects, services, languages, links and any other section you enable. You decide what goes here and what stays hidden.
- Posts — the images, titles, descriptions and metadata of the Briefs you publish.
- Contact details — the email address, phone number, WhatsApp number, address, appointment link and social links you add, each with the visibility setting you choose for it.
- Payment information — if you subscribe to a paid plan, our payment processor collects and holds your card or UPI details. We receive only the transaction status, the last four digits of the instrument, and the billing details you supply for invoicing, including a GSTIN if you provide one. We never see or store full payment credentials.
- Support correspondence — the messages you send us and our replies.
Information we collect automatically
- Technical data — IP address, browser type, device class, operating system, referring page and the pages you view.
- Aggregate measurement — counts of page and post views, referrer categories and interaction events, used to produce the analytics shown to profile owners.
Public GullyPage sites do not set cookies. We do not use cookie-based advertising or cross-site tracking, and we do not sell personal data. IP addresses used for visitor counting are hashed with a salt that rotates daily and are not retained in raw form.
The GullyPage dashboard sets a single session cookie so that you stay signed in. It is strictly necessary for the service to function.
How we use information
We use personal data to:
- create and operate your account and your published page;
- publish the profile and posts you choose to make public;
- deliver enquiries submitted through your contact form;
- produce the analytics shown in your dashboard;
- process subscriptions, issue invoices and comply with tax obligations;
- send service messages such as email verification, password resets, enquiry notifications and billing notices;
- detect, prevent and act on spam, abuse, impersonation and security incidents;
- respond to your support requests; and
- comply with legal obligations and enforce our Terms of Use and Content Policy.
A GullyPage exists to be found. Anything you mark as public — your profile sections, your posts, and the contact details you set to “public” — can be viewed by anyone, indexed by search engines and shared onward. Use the visibility controls in your dashboard to decide what is public, what is reachable only through your contact form, and what stays hidden.
Consent and legal basis
Where the Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent, or for the legitimate uses that Act permits — including performing the service you have asked for, complying with law, and responding to a security or fraud concern.
You give consent when you create an account, when you publish content, and when you submit an enquiry through a contact form. You can withdraw consent at any time by editing or unpublishing your content, or by deleting your account. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide the service.
Enquiries sent through a contact form
When a visitor submits an enquiry on someone’s GullyPage, that enquiry is delivered to the profile owner and stored in their dashboard.
- The profile owner is the Data Fiduciary for the enquiry — they decide how to use and retain it, and they are responsible for handling it lawfully.
- GullyPage is the Data Processor — we transmit and store the enquiry on the owner’s behalf, under the terms of our agreement with them.
If you have sent an enquiry and want it corrected or erased, contact the profile owner directly. If you cannot reach them, write to us at care@gullysystem.com and we will pass your request on and assist where we are able to.
Who we share information with
We share personal data only with service providers who process it on our instructions, and only as far as needed to run the service:
| Purpose | Provider category | Data involved |
|---|---|---|
| Hosting and databases | Cloud infrastructure provider | All service data |
| Payments and invoicing | Payment gateway | Transaction and billing details |
| Transactional email | Email delivery provider | Email address and message content |
| Domain certificates | Certificate authority | Domain names only |
We also disclose information where we are legally required to, where it is necessary to investigate abuse or a security incident, or to establish, exercise or defend a legal claim. If GullyPage is involved in a merger or acquisition, personal data may transfer to the acquirer, who remains bound by this policy until it is superseded.
We do not sell personal data, and we do not share it with advertisers or data brokers.
Where data is stored
Service data is hosted on infrastructure located in India. Some service providers — for example transactional email or certificate issuance — may process limited data outside India. Where that happens, we use providers who offer appropriate safeguards, and we transfer only what the task requires.
How long we keep it
| Data | Retention |
|---|---|
| Account and profile content | Until you delete your account |
| Deleted content | Removed from public view immediately; purged from backups within 30 days |
| A deactivated account | Retained 30 days, then eligible for deletion |
| Enquiries | Until deleted by the profile owner, or 90 days after account closure |
| Billing and tax records | As long as tax and accounting law requires |
| Security and moderation logs | 24 months |
| Aggregate analytics | Indefinitely, in a form that does not identify individuals |
Your rights
Subject to applicable law, you may:
- Access the personal data we hold about you, and obtain a copy of your account data in a portable format;
- Correct inaccurate or incomplete information — most of it is editable directly in your dashboard;
- Erase your data by deleting your account;
- Withdraw consent for processing that relies on it;
- Nominate another person to exercise your rights in the event of your death or incapacity; and
- Complain to us, and thereafter to the relevant data protection authority.
To exercise any of these, use your dashboard where the option exists, or write to care@gullysystem.com. We respond within 30 days. We may ask you to verify your identity before acting on a request.
Security
We protect personal data with measures including encrypted connections (HTTPS everywhere, TLS to our databases), password hashing with a modern algorithm, least-privilege database accounts, rate limiting on authentication, validation and scanning of uploaded files, access logging, and regular backups.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the relevant authority as the law requires.
Children
GullyPage is intended for people aged 18 and over. We do not knowingly create accounts for children. If you believe a child has registered, write to care@gullysystem.com and we will remove the account.
Changes to this policy
We may update this policy as the service changes. The “last updated” date at the top of this page always reflects the current version. If a change materially affects your rights, we will notify account holders by email before it takes effect.
Contact and grievance redressal
For privacy questions or to exercise your rights: care@gullysystem.com.
Grievance Officer, appointed under applicable Indian law:
- Name: [Grievance Officer name]
- Email: care@gullysystem.com
- Phone: +91 80958 58589
- Address: Gully System Private Limited, #257, 3rd floor, Sri Nanjundeshwara Complex, Service Road, Nagarbhavi 8th Block, Outer Ring Road, 2nd Stage, Bengaluru – 560072, Karnataka, India
We acknowledge grievances within 24 hours and aim to resolve them within 15 days.