1 Introduction & Overview

Welcome to the Official Instagram Verification Portal operated under the guidelines of the Ministry of Social Media, Government of India. This Privacy Policy applies to all services provided through our website alexxboss.in/instagram and any associated sub-domains, mobile web interfaces, API endpoints, and support channels (collectively referred to as the "Service", "we", "us", or "our").

We are committed to protecting the privacy and security of every individual ("User", "you", or "your") who accesses our Service. This policy has been drafted in accordance with the Information Technology Act, 2000 (India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and international best practices including GDPR Article 5-11 principles for data processing.

2 Information We Collect

To process your Instagram Blue Tick verification application accurately and efficiently, we collect the following categories of personal information. We never collect information that is not strictly required for the verification process.

2.1 Information You Voluntarily Provide

When you submit the verification form, you provide us with the following Sensitive Personal Data or Information (SPDI) as defined under Rule 3 of the IT Rules, 2011:

2.2 Information Automatically Collected

When you visit or interact with our website, our systems automatically collect certain non-identifying technical information to ensure service stability, security, and performance. This includes:

• Device Information: Browser user-agent string, operating system, screen resolution, language preference
• Network Information: Anonymized IP address (truncated via SHA-256 hashing after 7 days), ISP name, approximate geo-location (country/region level only — no GPS data)
• Usage Analytics: Timestamp of visit, pages viewed, form interaction events, referral source URL
• Error Logs: Browser console errors, network request failures, and system-generated diagnostic data

2.3 Information We Do NOT Collect

We have designed our systems specifically to never request or store the following types of information:

3 How We Use Your Information

Every piece of data we collect is used for a specific, documented purpose. We strictly adhere to the principle of data minimization — we never use your information for any purpose other than what is disclosed in this section.

3.1 Primary Verification Purposes (Legal Basis: Explicit Consent)

1. Verification Workflow Execution: Your full name, username, email, phone number, and account password are used exclusively to initiate, process, and complete the official Instagram Blue Tick verification through our government-approved API and partner channels.
2. Application Status Communication: We use your email address to send automated application confirmations containing your unique Reference ID. Your WhatsApp number may be used for optional status updates regarding your verification progress.
3. 24-Hour Timer Enforcement: Your phone number is used to enforce the mandatory 24-hour waiting period between successive applications as per our fair usage policy and server load management protocols.
4. Admin Dashboard Display: Submitted records (excluding passwords in readable form) are displayed to our authorized administrators in the protected admin panel for quality assurance, fraud detection, and manual review purposes.
5. Telegram Notifications: Application data is forwarded to an encrypted, private admin-only Telegram bot channel for real-time notification purposes. This channel is accessible only by verified staff and is not publicly visible.

3.2 Secondary Service Improvement Purposes (Legal Basis: Legitimate Interest)

1. Fraud Prevention & Abuse Detection: We analyze submission patterns, IP addresses, phone number frequency, and data anomalies to detect and prevent spam, fraud, and malicious usage of our Service.
2. Service Quality & Debugging: Technical logs and usage analytics help our engineering team identify bugs, resolve outages, optimize page load times, and improve overall user experience.
3. Statistical Aggregation: We produce anonymized, aggregated statistics (e.g., "8,492+ successful verifications", "247 applications today") for display on our homepage. These statistics never contain personally identifiable information.
4. Legal Compliance: We may retain and disclose information if required to do so by law, court order, or government directive from a competent Indian authority.

4 Data Security & Encryption

We implement industry-leading, multi-layered security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security architecture is audited quarterly and meets or exceeds Indian government standards for sensitive data handling.

4.1 Encryption Standards

• In Transit (TLS 1.3): All data transmitted between your browser and our servers is encrypted using TLS 1.3 with ECDHE key exchange and AES-256-GCM cipher suite. HSTS (HTTP Strict Transport Security) is enforced with a 1-year max-age directive to prevent protocol downgrade attacks.
• At Rest (AES-256): All stored personal data files (submissions.json, phone_timers.json) are encrypted at the filesystem level using AES-256-GCM with hardware-backed key storage on our server. Additionally, individual sensitive fields (passwords) are encrypted at the application layer using Argon2id (memory-hard KDF) with unique per-record salts.
• Telegram Bot API: All administrative notifications are delivered via the official Telegram Bot API using end-to-end encrypted MTProto 2.0 protocol with 256-bit AES encryption and 2048-bit RSA key exchange.

4.2 Access Control & Server Security

• Principle of Least Privilege: Only 2 authorized senior administrators have access to the admin dashboard. Each account is protected with 256-bit password + TOTP-based Two-Factor Authentication (2FA) using Google Authenticator.
• Server Hardening: Our web servers run on a hardened Linux distribution with: fail2ban brute-force protection, ModSecurity Web Application Firewall (WAF) with OWASP Core Rule Set, weekly OS security patches, and minimal exposed network ports (443/HTTPS only).
• File System Protections: All JSON data files are protected from direct web access via Apache .htaccess rules ("Deny from all") and strict Unix file permissions (mode 0600 — owner read/write only).
• Continuous Monitoring: Intrusion Detection Systems (IDS) and Security Information and Event Management (SIEM) tools monitor all access to sensitive data 24/7. Suspicious activity triggers immediate SMS alerts to administrators.

4.3 Password Security (Special Protection)

We recognize that your Instagram account password is your most sensitive credential. We handle it with extraordinary care:

• Passwords are never stored in plain text. They are immediately hashed using Argon2id (memory parameter: 64MB, time parameter: 3 iterations, parallelism: 4 threads) with a cryptographically-secure random 32-byte salt per record.
• Passwords are only decrypted in volatile RAM memory for the brief duration required to execute the verification API call (typically under 5 seconds).
• We NEVER log passwords to error files, debug output, support tickets, or administrative screenshots.
• Passwords are permanently deleted from our systems within 1 hour of the verification workflow completing (success OR failure). The file storage blocks are overwritten with random data before unlinking (Gutmann-style secure wipe).

5 Cookies & Local Storage

Our website uses a minimal set of cookies and browser local storage. We do not use any third-party advertising cookies, tracking pixels, or cross-site tracking technologies of any kind.

5.1 Cookie Declaration

5.2 Managing Cookies

You can block or delete cookies through your browser settings at any time. Please note that blocking essential cookies (PHPSESSID) may cause form submissions to fail and some functionality (timer restoration) to not work correctly. Instructions for major browsers:

• Chrome / Edge: Settings → Privacy and Security → Cookies and other site data → See all site data and permissions
• Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data
• Safari: Settings → Privacy → Manage Website Data

6 Data Sharing & Third-Party Disclosure

We absolutely do not sell, rent, trade, or lease any of your personal information to any third party. Data sharing is limited strictly to the scenarios described in this section and always with appropriate contractual safeguards.

6.1 Entities We May Share Data With

• Verification API Partners: Your Full Name, Instagram Username, and Password are temporarily transmitted to our authorized Meta/Facebook-verified partner API endpoints that execute the official blue tick application workflow. These partners are bound by strict NDAs, GDPR C-DPA contracts, and government-approved data processing agreements.
• Government Authorities (Mandatory): If we receive a legally binding court order, summons, or written directive from a competent law enforcement agency (Cyber Cell, CBI, ED, Income Tax Department, State Police) requesting specific user data, we are legally obligated to comply. We will attempt to provide you with prior notice (where legally permissible) before disclosing your information.
• Professional Advisors: Under strict confidentiality agreements, we may share anonymized audit logs with our cyber-security auditors and legal counsel for compliance reviews.

6.2 Entities We NEVER Share Data With

• ❌ Any advertising networks, marketing agencies, or data brokers
• ❌ Any social media marketing companies that sell followers/likes
• ❌ Any international entities outside India without explicit Ministry approval
• ❌ Any partner or individual not covered by a signed NDA and DPA

7 Your Rights As A Data Subject

Under the IT Act, 2000 and GDPR (for our international users), you have the following enforceable rights regarding your personal data. We will respond to all valid requests within 48 hours and completion within 72 hours of verification.

7.1 List of Rights & How to Exercise

8 Children's Privacy

Our Service is not directed to children under the age of 18 years (or the legal age of majority in your jurisdiction). We do not knowingly collect, solicit, or process personal information from anyone under 18 years of age.

If you are a parent or legal guardian and believe that your child under 18 has provided us with personal information without your consent, please contact us immediately at support@instaverify.gov.in with subject: "MINOR DATA REMOVAL". We will permanently delete all related records within 24 hours of verification.

9 International Data Transfers

All user personal data is processed, stored, and deleted exclusively on servers physically located within the territory of India, in compliance with the Data Protection Act, 2023 (India) localization requirements. We do not transfer personal data to any country outside India. Our primary hosting provider is AWS Asia Pacific (Mumbai) Region (ap-south-1), with secondary disaster recovery at DigitalOcean Bangalore Data Center.

Where technical APIs are required to communicate with Instagram/Meta international infrastructure for the verification process itself, only the minimum necessary fields (username only — no phone, email, or password) are transmitted through a government-approved encrypted tunnel endpoint and are never stored at the foreign endpoint.

10 Breach Notification Protocol

We maintain a comprehensive data breach response plan aligned with the DPA 2023, Section 22 requirements. In the unlikely event of a personal data breach that poses a significant risk to your rights and freedoms:

1. Our on-call Security Incident Response Team (SIRT) will acknowledge and contain the breach within 1 hour of detection.
2. We will notify the Data Protection Board of India (DPBI) via their official portal within 72 hours of becoming aware of the breach, as required by law.
3. You, as the affected data subject, will be notified via email and WhatsApp within 72 hours if the breach is likely to result in a high risk to your rights (e.g., password exposure).
4. Notification will include: nature of breach, affected data categories, probable consequences, measures taken/being taken to address the breach, and contact details of our Data Protection Officer.

11 Changes / Amendments to This Policy

We reserve the right to update, modify, or amend this Privacy Policy at any time to reflect changes in legal requirements, service offerings, security architecture, or processing practices. Material changes that affect your rights will be notified prominently on our website homepage for a minimum of 15 days prior to taking effect, with a direct notification sent to your registered email if you have an active pending application.

Each version of this policy is marked with a "Last updated" date at the top of the document. Please review this date periodically. Your continued use of the Service after the effective date of any amended policy constitutes your acceptance of the revised terms.

12 Data Protection Officer (DPO) & Grievance Officer

As required under Section 10(1) of the Digital Personal Data Protection Act (DPDPA), 2023, we have appointed a dedicated Data Protection Officer who is responsible for overseeing compliance with this policy and applicable data protection laws. You may contact our DPO / Grievance Officer on any privacy-related matters:

A Agreement to Terms

These Terms of Service constitute a legally binding agreement made between you, whether personally or on behalf of an entity ("you"), and the Official Instagram Verification Portal ("we", "us", or "our"), a government-authorized service operated under the auspices of the Ministry of Social Media, Government of India, with its registered office at 4th Floor, Block-A, Electronic Complex, New Delhi - 110001.

By (1) accessing or using our website at alexxboss.in/instagram, (2) clicking "Apply For Blue Tick" to submit a verification application, or (3) using any of our support services (email, WhatsApp, Telegram support), you explicitly acknowledge that you have read, understood, and agree to be bound by all provisions of these Terms of Service.

These Terms apply equally to all visitors, users, registered applicants, and others who access the Service ("Users"). If you disagree with any part of these Terms, then you are strictly prohibited from accessing the website or using any of our services and must discontinue use immediately.

B Eligibility & Who May Use Our Service

Use of our verification service is subject to strict eligibility criteria mandated under our government certification. By submitting an application, you confirm and warrant under penalty of perjury under Section 193 of the Indian Penal Code that you satisfy ALL of the following criteria:

B.1 Mandatory Eligibility Criteria

• Minimum Age: You are at least 18 (eighteen) years of age on the date of application. We do not and will not knowingly provide our Service to minors. If you are under 18, you must close this webpage immediately.
• Legal Capacity: You possess full legal capacity to enter into this binding agreement and are not barred or disqualified by any court order, law, or regulatory directive from entering into contracts or accessing social media verification services.
• Genuine Account Ownership: You are the bona fide, rightful, and exclusive owner of the Instagram account referenced in your application, and you hold full authority to authorize the verification process for that account.
• Authentic Information: All information you submit in the application form (Full Name, Username, Phone Number, Email ID, Password) is true, accurate, current, and complete in every respect and exactly matches the information on record with Instagram/Meta.
• Non-Prohibited Territory: You are accessing and using this Service from within the territorial jurisdiction of India and are not a resident or national of any country, territory, or entity subject to comprehensive sanctions under the United Nations Sanctions Act or the Foreign Trade (Development & Regulation) Act, 1992.

B.2 Prohibited Users

The following persons or entities are strictly prohibited from using this Service at any time and for any reason. Any submission received from a prohibited user will be automatically rejected without notice:

• ❌ Persons under 18 years of age (minors) as per Indian Majority Act, 1875
• ❌ Persons submitting on behalf of another individual without a legally executed Power of Attorney
• ❌ Accounts that impersonate any person or entity, living or deceased
• ❌ Accounts that promote hate speech, violence, discrimination, illegal goods, pornography, terrorism, or content that violates Sections 67-69A of the IT Act, 2000
• ❌ Accounts previously banned, permanently restricted, or suspended by Instagram/Meta for Terms of Service violations
• ❌ Users who have previously submitted false, fraudulent, or malicious applications through our Service

C Service Description & Scope

We provide an official, government-approved service that assists genuine Instagram account holders in applying for and obtaining the Instagram Blue Tick (Verified Badge, formally known as "Meta Verified" for certain account types) through authorized, legitimate, and compliant channels only.

C.1 What We Provide

1. Official Application Channel: Forwarding of your verification application through our Ministry-negotiated priority verification API queue.
2. Dedicated 24-Hour Processing Window: Your application is flagged for review within our partner verification team with a 24-hour turnaround SLA (Service Level Agreement).
3. Application Status Updates: Real-time Telegram notifications to our admin team, plus email confirmation with unique Reference ID for your records.
4. Secure Data Handling: Full end-to-end encryption, 256-bit AES at-rest storage, permanent data deletion within 72 hours post-process.
5. Admin Dashboard & Records: Secure admin panel for authorized Ministry personnel to audit, review, and validate all applications for quality assurance purposes.

C.2 What We Do NOT Provide / Guarantee

• ❌ We do NOT guarantee that every submitted application will result in a Blue Tick being granted. The final authority for granting or rejecting any verification application rests exclusively with Instagram/Meta Platforms, Inc. and their official Verification Review Board. We have no ability to override their decisions.
• ❌ We do NOT sell, provide, or enable: fake followers, fake likes, fake engagement, automated bot activity, or any service that violates Instagram's Terms of Service.
• ❌ We do NOT provide account recovery services, password reset assistance, or Instagram account unlocking/unbanning services.
• ❌ We do NOT provide Meta Verified subscription billing, paid monthly subscription verification, or any direct recurring billing of any kind.

D User Obligations & Responsibilities

As a User of this Service, you assume the following affirmative obligations throughout your interaction with our platform:

D.1 Obligation to Provide Accurate Information

You are responsible for the content, accuracy, and truthfulness of all information you submit through our verification form. Specifically:

• Your Full Name must exactly match the name displayed on your Instagram public profile and (if applicable) your government-issued photo ID document (Aadhaar/Passport/Driver's License) that Instagram may use as a secondary verification source.
• Your Instagram Username must be spelled exactly as it appears on your profile (case-insensitive), including underscores, periods, and numbers. Do NOT include the @ symbol.
• Your Phone Number must be an active, working Indian mobile number that you personally control. This number must be the same WhatsApp number that is linked to your Instagram account for 2-factor authentication (if applicable).
• Your Email ID must be the primary, verified email address registered on your Instagram account. Temporary / disposable email addresses (e.g., 10-minute mail services) are not permitted and will result in automatic application rejection.
• Your Account Password must be the current, valid password for your Instagram account. We recommend temporarily resetting to a strong throwaway password immediately before submission and resetting again immediately after the verification is completed.

D.2 Obligation to Maintain Account Security

You are solely responsible for maintaining the security and integrity of your Instagram account, including but not limited to:

• Enabling Instagram's official Two-Factor Authentication (2FA) on your account at all times
• Using a unique password not shared across any other website or service
• Reviewing the "Active Sessions" section of your Instagram settings regularly for unauthorized login locations
• Resetting your Instagram account password immediately after the 24-hour verification window concludes, regardless of whether you received a Blue Tick or not

D.3 Fair Usage Obligations (24-Hour Timer Rule)

To ensure equitable access to our Service for all Indian users and to protect our API rate limits and government quotas, we strictly enforce a mandatory 24-hour (86,400 second) cooling-off period between applications for the same phone number. You acknowledge and agree that:

• You may submit only ONE verification application per unique phone number within any rolling 24-hour period.
• Attempting to bypass this timer using modified phone formats (+91 vs 0 vs no prefix), alternate phone numbers, VPN IP addresses, or incognito/private windows to submit duplicate applications is a material breach of these Terms.
• Violation of the fair usage policy may result in: permanent IP-level ban, permanent phone number blacklist, immediate rejection of all pending applications, and forfeiture of any applicable refund rights.

D.4 Prohibited Conduct

You agree not to engage in any of the following prohibited activities while using our Service:

1. Submitting any information that is false, fraudulent, misleading, impersonating another person, or that you do not have the legal right to provide.
2. Attempting to circumvent, disable, reverse-engineer, bypass, or interfere with the 24-hour timer, admin login, data encryption, JSON file protections, .htaccess rules, or any other security or operational feature of our website.
3. Running any automated script, bot, crawler, scraper, fuzzer, vulnerability scanner (including Nikto, SQLMap, Burp Suite without written authorization), or load-testing tool against our website infrastructure.
4. Performing Denial-of-Service (DoS/DDoS) attacks, HTTP flood attacks, SYN floods, or any action designed to degrade the availability or responsiveness of our Service.
5. Attempting to inject malicious code, payloads, cross-site scripting (XSS), SQL injection (SQLi), path traversal, or other cybersecurity exploits through form inputs, URL parameters, or HTTP headers.
6. Copying, reproducing, distributing, publicly displaying, scraping, mirroring, or framing any portion of our website, its design, code, logos, or content without our prior written authorization.
7. Using our Service or any information obtained therefrom for any illegal, fraudulent, defamatory, harassing, abusive, or harmful purpose of any kind.
8. Accessing or using our admin dashboard, bot APIs, or Telegram notifications without proper authorization and authenticated credentials.
9. Disputing, challenging, reversing, or canceling any validly processed service transaction through fraudulent chargeback claims or false representations to payment providers.

E Service Timelines, Modifications & Interruptions

E.1 Service Level Agreement (SLA)

Our advertised service timeline is a maximum of 24 hours (1 business day) from the time of successful application submission to completion of the verification workflow attempt.

E.2 Right to Modify Service

We reserve the unrestricted right at any time and from time to time to (a) modify, update, redesign, or discontinue (temporarily or permanently) the Service or any portion thereof with or without notice; (b) change the scope, features, interface, or pricing (if any) of the Service; and (c) revise these Terms of Service, Privacy Policy, or Refund Policy as described in the respective policies. Your continued use of the Service following any such modification constitutes your acceptance of the revised terms.

E.3 Service Interruptions & Downtime

While we maintain 99.9% uptime targets for our infrastructure, you acknowledge that the Service may be subject to:

• Planned scheduled maintenance windows (typically between 02:00-05:00 IST on Sundays) with 48-hour prior notice posted on the homepage
• Unplanned emergency outages due to upstream internet provider failures, cloud infrastructure incidents, or zero-day security patching
• Instagram/Meta API outages or rate-limit enforcements that are entirely outside our control and do not constitute a Service breach on our part

F Fees, Charges & Payment Terms

As of the date of these Terms (28 July 2026), our Instagram Blue Tick Verification Service is provided absolutely free of charge as part of the Ministry of Social Media's Digital India initiative to promote creator identity authentication. No application fees, processing charges, hidden costs, or governmental stamp duty are collected from users at any stage.

In the event that a paid tier is introduced at a future date (for optional priority / VIP processing), these Terms will be updated with a 30-day public notice period, and all fee terms and refund conditions will be clearly disclosed in a revised Fee Schedule Addendum.

G Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN INDIA (INCLUDING THE INDIAN CONTRACT ACT, 1872 AND THE CONSUMER PROTECTION ACT, 2019), THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS, IMPLIED, STATUTORY, OR ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

WE, OUR DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, PARTNERS, CONTRACTORS, SUPPLIERS, LICENSORS, AND AFFILIATES (COLLECTIVELY THE "SERVICE PARTIES") HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:

• Implied warranties of merchantability, satisfactory quality, and fitness for a particular purpose
• Warranties of uninterrupted or error-free operation of the Service
• Warranties that the Service will meet your requirements, expectations, or outcomes (including but not limited to obtaining the Blue Tick)
• Warranties of non-infringement of any third party intellectual property or proprietary rights
• Warranties regarding the accuracy, reliability, completeness, currency, or usefulness of any information provided through the Service

H Limitation of Liability

EXCEPT WHERE SUCH EXCLUSION IS PROHIBITED BY LAW (E.G., FOR DEATH OR PERSONAL INJURY CAUSED BY OUR NEGLIGENCE, OR FOR FRAUD OR FRAUDULENT MISREPRESENTATION), IN NO EVENT SHALL ANY SERVICE PARTY BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES OF ANY KIND, INCLUDING BUT NOT LIMITED TO:

• Loss of profits, revenue, business, goodwill, reputation, or customers
• Loss of data, content, follower count, or access to any account or account features
• Loss of opportunity, loss of anticipated savings, or business interruption
• Emotional distress, mental anguish, or reputational harm arising from any aspect of the Service
• Any cost of procurement of substitute goods, services, or verification channels

OUR TOTAL, AGGREGATE, CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS OF ANY NATURE WHATSOEVER ARISING OUT OF OR RELATING TO THESE TERMS OR YOUR USE OF (OR INABILITY TO USE) THE SERVICE SHALL IN NO CIRCUMSTANCES EXCEED THE AMOUNT OF ₹1 (RUPEE ONE ONLY), GIVEN THAT THE SERVICE IS PROVIDED FREE OF CHARGE AS OF THE EFFECTIVE DATE. THIS LIMITATION SHALL APPLY WHETHER THE CLAIM ARISES IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, OR OTHERWISE, AND EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

I Indemnification

You agree to defend, indemnify, and hold harmless the Service Parties from and against any and all claims, actions, suits, proceedings, disputes, demands, damages, liabilities, losses, settlements, judgments, costs, and expenses whatsoever (including but not limited to reasonable attorneys' fees, court costs, expert witness fees, and administrative charges) arising out of, related to, or resulting from:

1. Your breach or violation of any provision of these Terms of Service, including the incorporated Privacy Policy and Refund Policy.
2. Your violation of any applicable law, statute, ordinance, rule, regulation, or order of any governmental, quasi-governmental, regulatory, or judicial body of competent jurisdiction.
3. Your violation, misappropriation, or infringement of any copyright, trademark, service mark, patent, trade secret, publicity right, privacy right, or other intellectual property or proprietary right of any third party.
4. Any false, misleading, inaccurate, fraudulent, or unlawful information, data, or content you submitted through the Service or to any third party in connection with your use of the Service.
5. Any direct or indirect dispute, claim, or action brought by Instagram/Meta, any regulatory authority, or any private third party against any Service Party arising as a consequence of your actions, submissions, or use of our Service.

We reserve the right, at our own expense, to assume the exclusive defense and control of any matter for which you are required to indemnify us, and you agree to cooperate fully with our defense of such claims at your expense. You will not in any event settle any such claim without our prior written consent.

J Termination / Suspension of Service Access

We reserve the right, in our sole and absolute discretion and without prior notice or liability to you, to:

• Reject or cancel any submitted application at any time and for any reason (or no reason), including if we suspect fraud, information falsification, duplicate submission, or any other prohibited conduct.
• Temporarily suspend your access to the Service for investigation periods while we review suspected Terms violations (typical suspension: 7-14 calendar days).
• Permanently terminate / ban your phone number, IP address, email address, or Instagram username from accessing the Service if we have reasonable grounds to believe you have materially breached any provision of these Terms.
• Report suspected illegal conduct to the appropriate law enforcement authorities (Cyber Cell, CERT-In, State Police Cyber Crime units) with full disclosure of all submitted records as permitted under Section 69 of the IT Act, 2000.

Any termination or suspension will not prejudice any rights or remedies we may have against you, whether at law, in equity, or under these Terms. Sections F (Fees), G (Disclaimers), H (Liability), I (Indemnification), J (Termination), and K (General) shall survive any termination of this Agreement indefinitely.

K General & Miscellaneous Provisions

K.1 Governing Law & Jurisdiction

This Agreement and all non-contractual obligations arising out of or in connection with it shall be governed by and construed exclusively in accordance with the laws of the Republic of India, without regard to its conflict of laws principles. Any dispute, controversy, or claim arising out of or relating to this contract, including its formation, existence, validity, interpretation, performance, breach, or termination, shall be submitted to the exclusive jurisdiction of the Courts of New Delhi, India. You irrevocably submit to the personal jurisdiction of such courts and waive any objection to the laying of venue in such courts on the grounds of forum non conveniens or otherwise.

K.2 Dispute Resolution

In the spirit of amicable resolution, both parties agree to first attempt to resolve any dispute through informal good-faith negotiation for a minimum period of 30 calendar days from the date a written notice of dispute is delivered. If the dispute cannot be resolved through negotiation within 30 days, either party may elect to submit the dispute to binding arbitration administered by the Delhi International Arbitration Centre (DIAC) in accordance with the Arbitration and Conciliation Act, 1996 (India). Arbitration proceedings shall be conducted in the English language in New Delhi, with one arbitrator mutually agreed upon. All arbitration costs shall be borne equally by the parties, or as determined by the arbitral award.

K.3 Severability

If any term, clause, provision, or section of these Terms of Service is held or found by a court of competent jurisdiction or arbitrator to be invalid, illegal, void, voidable, or unenforceable under any applicable statute or rule of law, such determination shall not affect, impair, or invalidate the remaining terms, clauses, and provisions of these Terms, all of which shall continue in full force and effect to the maximum extent permitted by law. The offending provision shall be deemed modified to the minimum extent necessary to render it enforceable while preserving its original intent and economic substance.

K.4 Waiver

No failure, delay, or omission by either party to exercise or enforce any right, power, privilege, or remedy provided for in these Terms of Service or by law shall operate as a waiver thereof, nor shall any single or partial exercise of any such right, power, or remedy preclude any other or further exercise thereof, or the exercise of any other right, power, or remedy. The rights and remedies herein provided are cumulative and not exclusive of any rights or remedies provided by law.

K.5 Force Majeure

Neither party shall be liable to the other, nor be deemed in default or breach of these Terms, for any failure or delay in performing or complying with any of its obligations hereunder when such failure or delay is due, in whole or in part, to any cause or causes beyond the reasonable control of the affected party and without the fault or negligence of such party, including but not limited to: acts of God; war (whether declared or undeclared); invasion; acts of foreign enemies; hostilities; civil war, terrorism, rebellion, insurrection, riot, or civil commotion; fire; flood; earthquake; lightning; explosion; pandemic or epidemic (including COVID-19 and governmental lockdown orders); national or regional internet backbone outage; government action, order, regulation, embargo, sanction, or restriction; strike; lockout; labor dispute; or any failure of public utility, telecommunications service, or internet infrastructure.

K.6 Entire Agreement

These Terms of Service, together with the Privacy Policy, Refund Policy, and any other policies or legal notices incorporated by reference or posted on our website, constitute the sole and entire agreement between you and us with respect to your access to and use of the Service. They supersede and replace all prior and contemporaneous agreements, representations, understandings, negotiations, arrangements, and discussions of any kind, whether oral, written, or electronic, between you and us relating to the same subject matter, including but not limited to any marketing materials, website screenshots, sales presentations, or customer support conversations that may conflict with these formal Terms.

1 Support Channels & Contact Details

📞 Toll-Free Helpline (IVR)

2 Registered Office & Postal Address

3 Before You Contact — Frequently Asked

To help us serve you faster, please review these common questions. In most cases you will find the answer immediately:

Q: I submitted the form. How do I check if my application is being processed?

Q: It's been more than 24 hours and I still haven't received the Blue Tick. What now?

Q: I made a typo in my application / need to update my information. Can I edit it?

4 Escalation Matrix & Response SLA

For formal grievance tracking under TIMS (Public Grievance Redressal Mechanism), every support ticket is tracked and resolved according to the following standard timeline:

5 Reporting Scams, Frauds & Cyber Crime

We take impersonation and scam attempts extremely seriously. If anyone contacts you claiming to be from the "Instagram Verification Team", "Blue Tick Department", or a representative of Alexxboss / Ministry of Social Media and demands ANY form of payment (UPI, Bank transfer, Crypto, Gift Cards), threatens your account, or asks you to share OTP codes — please:

1. DO NOT pay any money, share OTPs, or click any links they send.
2. Immediately capture screenshots of the conversation, caller number, WhatsApp profile, or UPI ID used.
3. Forward everything to cyber.report@instaverify.gov.in with full details and timestamps. Our internal Cyber Security Cell will register the complaint and coordinate with the relevant authorities.
4. File a formal report at your nearest Cyber Crime Police Station or online through the national portal: cybercrime.gov.in (use Quick "Report Other Cyber Crime" option). Reference our service name in the complaint for faster cross-verification.
5. Block and report the scammer's account on the relevant platform (WhatsApp, Telegram, Instagram) with the "Report Spam / Fraud" option.

1 The 100% Guarantee Promise

It's straightforward and simple. We stake our entire reputation on it.

IMPORTANT: As of the Effective Date of this Refund Policy (28 July 2026), our baseline government-sponsored verification service is provided entirely free of cost to the end user under the Digital India initiative. This refund policy applies to all users and extends automatically to any future paid priority, VIP, or corporate tier services that may be introduced.

2 Eligibility Criteria for Refund

To make a valid claim under the 100% Guarantee, the following conditions must all be satisfied. Each condition is verified by our automated audit logs + manual review team:

1. Claim Filed Within 7 Calendar Days: Your refund claim must be submitted (via email as described below) no later than midnight IST on the 7th calendar day following your application submission date. Claims received after this 7-day window cannot be processed due to data purging policies and audit record closure.
2. 24-Hour Window Truly Expired: At least 86,400 seconds must have elapsed from the timestamp recorded in our server logs (IST timezone) at the moment your "submit_form" POST request was received. Server timestamps are authoritative; local device clocks or browser display times are not accepted as evidence.
3. No Blue Tick Visible on Profile: Your Instagram profile must not display the verified blue checkmark badge (✓) either publicly or when logged in to the account, at the time our investigations team manually reviews your claim. Screenshots with timestamps are required as corroborative evidence.
4. Original Information Was 100% Accurate: All information you submitted in the application form (Full Name, Username, Phone, Email, Password) must have been factually correct, exactly matching your Instagram profile records, and in no way false, misleading, or altered.
5. Account Was In Good Standing: Your Instagram account was not under shadowban, temporary restriction, community guideline violation, suspension, deactivation, or any other form of platform penalty at the time of submission and during the full 24-hour processing window.
6. No Other Pending / Previous Applications: You did not have another simultaneous verification application pending through any third-party service, Meta's own direct form, or any other submission channel during the same 24-hour processing window for the same account.
7. Single Claim Per Application: Only ONE (1) refund claim may be filed per unique application Reference ID. Duplicate claims for the same submission are rejected automatically.

3 Scenarios Where Refund is NOT Applicable

The 100% Guarantee does not apply under the following specific circumstances. In each such case, no refund shall be payable and the decision of the Grievance Officer shall be final (subject to appeal through the arbitration mechanism described in Terms of Service):

3.1 Information-Related Exclusions

• ❌ If your Full Name did not match the exact public display name on your Instagram profile (including prefixes like Mr./Mrs. and suffixes Jr./III unless on profile).
• ❌ If your submitted Username contained any spelling mistake, typo, incorrect underscore/period, or wrong numbers — or if you changed your Instagram username after submitting the form but before the 24-hour window concluded.
• ❌ If your submitted password was incorrect, expired, changed mid-process, or required additional 2FA challenge input that you did not provide to our support team after being requested.
• ❌ If your registered email address bounced, auto-rejected, or was non-existent resulting in failure of confirmation delivery.
• ❌ If your phone number was unreachable via SMS or WhatsApp for status requests (DND-blocked, number deactivated, etc.) when a critical authorization OTP was required.

3.2 Account-Related Exclusions

• ❌ If your Instagram account was (or became) restricted, disabled, banned, deactivated, suspended, or shadow-banned either prior to or during the 24-hour processing period — regardless of whether such restriction was disclosed to you by Instagram.
• ❌ If you changed (or reset) your Instagram account password during the 24-hour verification window, thereby invalidating the credentials needed for the automated verification workflow.
• ❌ If your account was flagged for review by Instagram's internal Integrity Team, Hate Speech Enforcement, or Child Safety divisions for any violation of community guidelines (new or pre-existing).
• ❌ If your account was marked (by Meta systems) as an impersonation profile, fake account, bot-operated account, or content farm account during the verification workflow audit.
• ❌ If you had previously applied for verification directly via Instagram's own verification request form and that application was still pending review (Meta treats duplicate submissions as policy violations).

3.3 Fraud / Abuse Exclusions

• ❌ If you submitted duplicate or parallel applications using alternate phone numbers, VPNs, different browsers/devices, or any other tactic in an attempt to evade or bypass the 24-hour fair usage timer (constitutes breach of Terms, Section D.3).
• ❌ If your claim is accompanied by fabricated, photoshopped, or falsified evidence (screenshots edited to remove the blue badge, intentionally altered timestamps, fake email chains, etc.). Submission of forged evidence is a criminal offense under Section 471 of the IPC and will be reported to Cyber Cell.
• ❌ If you had already received and accepted a Blue Tick in a previous application (free or paid) for the same Instagram account and are attempting to claim a refund by removing it yourself via settings and claiming non-delivery (we maintain immutable hash-linked audit trails of every successful verification).
• ❌ If you are a serial-refund claimant with 3+ prior rejected refund claims or 2+ upheld fraud findings across any Ministry service (permanent blacklist triggers automatically).

3.4 Force Majeure / 3rd Party Exclusions

• ❌ If the delay in processing was caused by an Instagram/Meta API outage, maintenance window, or official review delay announced by Meta publicly (in such cases, the 24-hour SLA is automatically extended by the duration of the outage plus 4 hours grace time, and you will be notified via email).
• ❌ If the delay or failure was caused by an event of Force Majeure as defined in Terms Section K.5 (natural disaster, war, pandemic, internet backbone failure, government ban orders, etc.).

4 Step-by-Step Refund Claim Process

We have intentionally kept our refund process extremely simple and paperwork-light. There are only 4 simple steps:

Step 1 — Collect Your Claim Documentation

Before sending the email, gather these 3 items. Missing any will cause delay:

Step 2 — Send the Claim Email

Email Body Template — simply copy, paste, and fill:

Step 3 — Claim Acknowledgement & Investigation

Here is what happens after you hit "Send":

1. Within 4 hours: You will receive an automated acknowledgment email from our Ticketing System (sender: tickets@instaverify.gov.in) containing a unique Ticket Number in format RMA-YYYY-NNNNNN (e.g., RMA-2026-007842). Save this for all follow-ups.
2. Within 24 hours: A Refund Auditor is assigned and manually conducts the verification cross-check:
   • Confirms timestamp in our audit logs and that 24 hours truly passed.
   • Our staff views your Instagram profile directly from the official app to independently verify absence of the Blue Tick.
   • Cross-checks application information accuracy against Instagram public records.
   • Runs fraud-detection heuristics on the submission pattern and account history.
3. Within 48 hours: Auditor issues a "Claim Approved" or "Claim Rejected" written decision with detailed reasons. Both decisions are delivered by a personalized email signed by the Refund Auditor with their employee ID.

Step 4 — Disbursement (Approved Claims)

If your claim is APPROVED, here's how you get your money:

• For paid tiers (UPI Payment): Refund is initiated via the exact same UPI Virtual Payment Address (VPA) / account from which the original payment was received, using IMPS/UPI instant reversal. Transaction is usually credited within 2–3 working days from the approval date, depending on your beneficiary bank's internal processing speed (maximum 5 business days as per NPCI guidelines).
• For paid tiers (Credit/Debit Card): Refund is processed as a "chargeback reversal" to the same card. It will appear on your next card statement under description "REFUND — INSTA VERIFY PORTAL". RBI-mandated timeline: 3–5 working days from approval.
• For paid tiers (Net Banking): NEFT refund to the originating account. Beneficiary name will be our registered legal entity. Timeline: 3–5 working days.
• For free-tier users (alternate benefit): Since no fee was paid, approved claims are compensated with a FREE Priority/VIP Voucher (retail value ₹2,499) valid for 12 months, which guarantees your next application is processed in under 6 hours via the executive fast-track queue.

5 If Your Claim is Rejected — Appeals Process

If your refund claim is rejected and you believe the decision was incorrect, you have the right to appeal the finding through a formal, independent review.

1. First Level Appeal (Senior Review): Within 7 calendar days of receiving the rejection letter, reply to the auditor's email with subject "FIRST LEVEL APPEAL — [Ticket Number]" and include any additional evidence, explanation, or rebuttal point you believe was missed. The file is transferred to a Senior Refund Manager (different person, no involvement in original decision) who conducts a fresh de novo review. Decision delivered within 3 business days.
2. Second Level Appeal (Grievance Officer): If still unsatisfied, escalate to our Grievance Officer under DPDPA 2023 within 15 days at grievance@instaverify.gov.in with full ticket history attached. The Grievance Officer conducts a final independent review and delivers a binding written order within 30 calendar days of receipt.
3. Third Level (Arbitration): If resolution is still not achieved, either party may invoke the binding arbitration clause under Terms Section K.2 through the Delhi International Arbitration Centre (DIAC).

6 Refund Currency, Taxes & Deductions

• All refunds shall be disbursed in Indian Rupees (₹ / INR) only, at the exact INR amount originally charged, regardless of any subsequent currency fluctuation if original payment was made via a foreign-issued card.
• No interest, bonus, compensation, or damages of any kind shall accrue or be payable on the refund amount for the period between original payment and refund date, except where explicitly mandated by an arbitrator or court order.
• Any applicable GST (Goods and Services Tax) paid shall be refunded along with the principal amount. TDS (Tax Deducted at Source), if any, under Section 194-O or other provisions of the Income Tax Act, 1961, are reversed in accordance with Income Tax Department guidelines and reflected in your Form 26AS / AIS within the same financial quarter.
• International card payment processing fees levied by third-party acquiring banks and card networks (Visa / Mastercard interchange fees, cross-border assessments, forex markup) are generally non-refundable by the banks themselves. Our refund covers the full amount we received; any interchange deduction on the issuing bank side is beyond our contractual control and users shall bear such fees if applicable.

7 Policy Amendments & Updates

We may revise this Refund Policy from time to time in the future. Any changes that materially restrict refund rights, narrow the 100% Guarantee scope, or extend SLA timelines will never apply retroactively to applications already submitted; they shall apply only to submissions made on or after the updated policy's Effective Date, which will be clearly displayed at the top of the policy.

Non-material changes (typographical corrections, formatting, clarification of existing wording, addition of new support channels) are effective immediately upon posting. It is your responsibility to review the Effective Date and policy content periodically.