Privacy Policy
Version: privacy-v2.5
About the operator
Findme (“Platform”, “we”, “us”) is provided at vivafindme.com and is operated by Vivalogix LLP, a limited liability partnership registered in India. Registered office: D-6026 16th Avenue, Gaur City 2, Greater Noida West, Gautam Budha Nagar, UP - 201318. For support, contact support@vivafindme.com.
1. Scope
This Privacy Policy explains how we collect, use, share, store, and delete personal data when you use Findme, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Personal data we collect
| Category | Examples | When collected |
|---|---|---|
| Account & identity | Username, email, password (hashed), internal user ID | Registration, login |
| Contact | Phone number, email verification status | Profile, bookings, orders |
| Location & address | Postal address, latitude/longitude, geohashes (up to 5 addresses) | Registration, profile, checkout |
| Profile & business images | Profile photo, business photos, staff photo; moderation metadata | Upload flows |
| Authentication & security | Login timestamps, failed-login counts, lockout, IP, user-agent in consent records | Login, legal acceptance |
| Bookings & appointments | Name, email, phone, address snapshots; slot, services, status | Scheduling |
| Orders & cart | Cart contents, customer/provider snapshots, totals | Retail checkout |
| Payments & billing | Transaction amounts, payment status, gateway reference IDs; GST invoice details | Checkout, billing |
| Programs & enrollments | Enrollment records, attendance (where applicable) | Programs |
| Ratings & feedback | Star ratings, comments, platform feedback | After appointments |
| Business profile | Business name, category, phone, email, GSTIN (optional), address, hours | Business setup |
| Staff (providers) | Role, permissions, display title, bio, customer-facing photo | Staff management |
| Technical & device | Session cookies, push subscription keys (providers), browser/platform metadata | Site use, notifications |
| Legal consent records | Terms/Privacy version, consent flags, timestamp, IP, user-agent | Registration, re-consent |
3. Sensitive personal data
Under Indian law, certain data is treated as sensitive, including financial information, health-related information, and biometric data. We may process sensitive categories only where necessary and lawful, including payment data, health-adjacent bookings (e.g. doctors/wellness categories), and images subject to moderation. We do not use sensitive data for marketing without separate consent.
4. Purposes and legal bases
We process data for account creation, service delivery, sharing with businesses you choose, payments and invoicing, safety and fraud prevention, support, legal compliance, and service improvement. Marketing is optional only. Processing is based on consent, contractual necessity, and legal obligation as applicable. We do not process data beyond these purposes without fresh notice and consent where required.
5. Consent and withdrawal
At registration (and when documents are updated materially), you agree to our Terms of Service and this Privacy Policy, and you consent to the collection and processing of your personal data and to sharing with participating businesses as needed to fulfill your bookings, orders, and enrollments. You confirm you are 18 years of age or older. Optional marketing communications require a separate opt-in.
You may withdraw consent by contacting support@vivafindme.com or the Grievance Officer (Section 12). For rights-related requests, include “Grievance” in the subject line. Withdrawal may limit services but does not affect lawfulness of prior processing or legally required retention.
6. How we share personal data
Participating businesses: data needed to fulfill your booking, order, or enrollment.
Service providers (processors):
- Google Cloud (Firestore, Cloud Storage) — primary storage; India region (asia-south1) where configured
- Razorpay — payment processing
- Zoho (mail / books, as configured) — transactional email and invoicing sync
We do not sell personal data. We may disclose data if required by law.
7. Cookies and similar technologies
We use essential session cookies and browser local storage. We do not use third-party advertising cookies on the core Platform.
8. Storage location and cross-border transfer
Primary storage is in India. Some processors may process data outside India under their policies and contractual safeguards permitted under the DPDP Act.
9. Retention and deletion
We retain data as needed for stated purposes or as required by law. GST/tax records may be retained up to 7 years. Booking and order snapshots may be retained as immutable business records.
Account deletion: email support@vivafindme.com with subject “Request for account deletion”. We aim to complete requests within 30 days, subject to legal retention exceptions.
10. Security and breach notification
We use reasonable technical and organizational measures consistent with the IT (Reasonable Security Practices and Procedures) Rules, 2011. We will notify affected users and the Data Protection Board of India as required for personal data breaches.
11. Children
The Platform is not intended for users under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us so we can take appropriate steps.
12. Your rights, grievance, and nomination
Under the DPDP Act you may request access, correction, erasure, grievance redressal, and nomination (appointing someone to exercise your rights in the event of death or incapacity).
Grievance Officer
Name: Vinod Kumar
Address: 6026 D Block, 16th Avenue, Gaur City 2, Greater Noida West, Uttar Pradesh 201318, India
Email: support@vivafindme.com
- Rights / grievances: email with “Grievance” in the subject line (e.g. Grievance – access request).
- Account deletion: email support@vivafindme.com with subject “Request for account deletion”.
- Nomination: email with “Request for nomination” in the subject line, including the nominee’s name and contact details.
We aim to respond within 30 days.
13. Obligations for registered businesses
If you register or operate a business on the Platform, you agree to handle customer personal data as follows:
- You will use customer data received through the Platform only to fulfill orders, provide services, or complete transactions with those customers.
- You will comply with this Policy, the DPDP Act, and all other applicable Indian law.
- You will not repurpose, sell, or onward-share customer data except as permitted by this Policy and applicable law.
- You will indemnify and hold harmless Vivalogix LLP, its subsidiaries, affiliates, and their respective officers, directors, partners, agents and employees against claims arising from your misuse or unlawful handling of customer data.
The Platform remains the Data Fiduciary for Platform-level processing; businesses act as Data Processors (or as otherwise required by law).
14. Policy updates
Material changes will be notified in-app or by email. You may be asked to re-accept updated Terms and Privacy Policy before continued use.