Privacy Policy

• Your video and audio are peer-to-peer (WebRTC). They don't pass through our servers and we don't record them.
• We collect the minimum needed to run the service: your email, name, gender (optional), interests, hashed password, plan and payment metadata.
• We use Cashfree for payments and an SMTP provider for transactional email. We send them only what they need.
• You can delete your account any time from the dashboard — we purge your data and email you a confirmation.
• We never sell your data. Ever.

"Pancam" refers to Pancam Technologies Private Limited, the controller of personal data processed through the website at pancam.live and its sub-domains.

Registered correspondence address: Pancam Technologies Private Limited, Bengaluru, Karnataka, India. Email: privacy@pancam.live.

Account information

• Email address (required, used as login + transactional email).
• Display name (required).
• Hashed password (we use bcrypt — we never see your plaintext password).
• Gender (optional, used for matching preferences).
• Interests (optional, used for smarter matching).
• Plan (Free or Pro), Pro expiry and cancellation flags.

Payment information

• For Pro purchases, our payment processor (Cashfree Payments India Private Limited) handles your card / UPI / wallet details directly.
• We receive only an order ID, amount, currency, status, and the Cashfree payment ID. We never see your card number.

Age-confirmation records

• Because Pancam is an adults-only (18+) service, we record when you first confirmed your age via our on-site age gate, and again when you ticked the "I am 18 or older" checkbox at signup.
• For the signup confirmation we also store the IP address and browser user-agent as they were at the moment of confirmation. This is used only for safety, legal defensibility (adult-content compliance, DMCA responses, law-enforcement inquiries) and to prevent minors circumventing bans.
• Age-confirmation records are retained for as long as the account exists and for up to 2 years after deletion for audit purposes.

Usage and operational data

• Last sign-in time (so we don't pester active users with inactivity emails).
• Server logs (IP address, user agent, timestamps) for security and abuse prevention. Logs are kept for up to 30 days.
• Reports you file against other participants, plus the discussion threads on those reports.

When you start a chat, Pancam matches you with another participant and your browsers open a direct WebRTC peer connection between each other. Our servers act only as a "signaling" relay to swap connection metadata (SDP offers, ICE candidates).

The video and audio bytes themselves never touch our servers. We do not record, transcribe, store or analyse them. If a TURN relay is needed for users behind strict NAT, the relay also doesn't decrypt the stream — it just forwards encrypted packets.

Text messages exchanged through the chat panel are routed through our Socket.IO gateway in transit so we can deliver them. We do not permanently store text-chat messages; they live only in your browser's memory until you skip to the next person.

• Run the service: match you with strangers, deliver text messages, allow you to log in.
• Communicate with you: verification email, payment receipts, cancellation notice, occasional inactivity reminders (max once every 14 days).
• Bill you for Pro: create Cashfree orders and reconcile webhooks.
• Keep the platform safe: investigate reports, ban users who violate the Terms, audit deletion events.
• Improve the product: aggregated counts (DAU/WAU/MAU) — never per-user activity surveillance.

We disclose data only to:

• Cashfree Payments India Pvt. Ltd. — to process payments.
• SMTP provider (Gmail / Mailtrap / SendGrid depending on environment) — to send transactional emails.
• AWS — for hosting the backend (ap-south-1 region).
• MongoDB Atlas — for our managed database (ap-south-1 region).
• Law enforcement — only in response to a valid legal request and only the minimum required.

We do not sell, rent or trade personal data with advertisers, brokers or anyone else.

We use:

• A session cookie from the Application Load Balancer (sticky sessions for your Socket.IO connection).
• localStorage on your browser to remember your auth token, theme preference and chat-sounds mute toggle.
• No third-party advertising cookies. No analytics that fingerprint you across sites.

• Account data: until you delete your account.
• Transactions: 7 years (required by Indian financial record-keeping rules).
• Server logs: 30 days.
• Email verification + password reset tokens: single-use, max 24 hours / 1 hour respectively.
• Reports and discussion threads: 2 years from resolution, then anonymised.

You can, at any time:

• Access your profile data — visible on your dashboard.
• Update your name, gender and interests from the dashboard.
• Delete your account — the "Danger zone" button on the dashboard. Cascade-deletes reviews and transactions, and emails you a confirmation.
• Cancel your Pro subscription — you keep Pro until the current period ends, then your plan flips to Free.
• Export a copy of your data — email privacy@pancam.live and we'll send it within 30 days.
• Object to processing or file a complaint with the Indian Data Protection Board.

Pancam is an adults-only (18+) service. We do not knowingly collect information from anyone under 18 and we do not knowingly allow anyone under 18 to create an account or use the Service. Access is gated by an on-site age confirmation on every fresh visit and again at signup.

If you believe a minor has registered, or if any content on the Service depicts, sexualises or targets a minor, email safety@pancam.live immediately. Reports are triaged within 24 hours. Confirmed accounts belonging to minors are terminated on sight and the associated identifiers (email, IP, device) are blocked from re-registration. Child sexual abuse material and grooming are reported to NCMEC (via CyberTipline) and, in India, to the National Cyber Crime Reporting Portal (cybercrime.gov.in).

Pancam is hosted in AWS ap-south-1 (Mumbai). Transactional email may transit servers outside India depending on your SMTP provider. Cashfree processes payments in India. We rely on standard contractual clauses for any cross-border transfer.

We protect your data with:

• TLS 1.2+ for everything in transit.
• bcrypt-hashed passwords (cost factor 10).
• HMAC-SHA256-verified webhooks from Cashfree.
• Secrets in AWS Secrets Manager — never in code or images.
• Auto-scaling Fargate tasks behind an Application Load Balancer with health checks.

No system is perfect. If you suspect a security issue, email security@pancam.live. We acknowledge reports within 48 hours.

We'll update the "Last updated" date above whenever this policy changes. For material changes we'll also send an email or show an in-app banner the next time you sign in.

For privacy questions, data-export requests, or grievance redressal under the Digital Personal Data Protection Act, 2023:

Pancam Grievance Officer
Email: privacy@pancam.live
Response window: 30 days (most queries resolved within 7).