Privacy Policy

Introduction

Bhavrah (“we”, “us”, or “our”) provides this Privacy Policy to explain how we collect, use, share, and protect personal information when you use our mobile application and services. This Policy applies to Bhavrah’s operations in India and globally. By using Bhavrah, you consent to the practices described in this policy.

Information We Collect

We collect the following categories of information:

• Registration and Profile Data: When you register, we collect your name, email, phone number, address, and any verification documents you provide (e.g. government ID). We may also collect profile information (photo, bio, etc.) you choose to provide.
• Transactional Data: To process payments or bookings, we collect payment details (handled by payment gateways) and transaction records. We do not store full card details on our servers.
• Identity & Verification Data: We collect identification details (e.g. government ID numbers) to verify your identity. If you opt for a background check, we may collect information such as employment history or criminal records, with your explicit consent.
• Usage and Device Data: We automatically collect usage data (app interactions, error logs) and technical data (IP address, device model, operating system, device identifiers) to improve and secure our service.

How We Use Your Information

We use the collected data for purposes including:

• Provide Services: To register your account, process transactions (via third-party gateways), deliver requested services, and communicate with you (e.g., service updates, support).
• Identity Verification: To verify your identity (e.g. KYC requirements) and optional background checks for safety and compliance.
• Security and Fraud Prevention: To protect our platform and users by detecting and preventing fraud, abuse, and illegal activities.
• Personalization: To personalize your experience, such as matching you with relevant services or content.
• Communications: To send you notifications, alerts, marketing communications (if opted-in), and respond to your inquiries.
• Legal Compliance: To comply with laws, regulations, court orders, or governmental requests, and to establish, exercise, or defend legal claims.
• Analytics and Improvement: To analyze how the app is used and improve functionality. We aggregate or de-identify data for analytics.
• Recordkeeping: To maintain transaction records and comply with accounting or tax laws.

Legal Basis for Processing

We rely on lawful bases to process personal data. Depending on the jurisdiction and context, Bhavrah processes data on these legal grounds:

• Consent: Where required (e.g. optional background checks or marketing communications), we obtain your explicit consent.
• Contract and Services: We process data to fulfill our contract with you (e.g. to execute a service you requested) and to provide the service.
• Legal Obligations: Processing necessary for compliance with legal requirements (e.g. tax, recordkeeping, responding to lawful requests).
• Legitimate Interests: For our legitimate interests (or those of our partners) in improving services, security, preventing fraud, and protecting rights, provided such use does not override your rights.
• DPDP-Specific: Under India’s DPDP Act, explicit consent is generally required to process personal data, with limited exceptions (such as voluntary data provision).

In line with EU GDPR, consent is central to our processing when used, and we do not process data beyond what is necessary.

Third-Party Payment Processors

Bhavrah uses third-party payment gateways (such as Razorpay, PayPal, Google Pay) to handle transactions securely. When you make a payment:

• We share only the necessary information (e.g. your name, contact, transaction amount) with the payment processor.
• Sensitive payment details (card numbers, bank info) are sent directly to the gateway and are not stored on Bhavrah’s servers.
• These third-party processors have their own privacy practices. Bhavrah requires them to protect your information in accordance with this Policy.
• We disclose on our app when you are being redirected or using a payment provider’s services.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes it was collected, comply with legal requirements, or resolve disputes. Specifically:

• Once the purpose of processing is fulfilled and no further use is needed, we will delete or anonymize the data.
• If you withdraw consent or request deletion, we will erase your personal data unless retention is required by law.
• Under EU law, we keep data “for the shortest time possible” considering legal obligations (tax, warranty, fraud prevention, etc.).
• By default, user account data (profiles, transaction history) may be retained for 2 years after account closure unless longer retention is required by law.

Your Rights

You have rights regarding your personal data, depending on where you live:

• India (DPDP Act): You have the right to request confirmation and access to your data, correction or deletion of incorrect or obsolete data, and to object to processing. You also have the right to data portability and to file a grievance with our team or the Data Protection Board.
• EU (GDPR): EU residents can exercise rights including access, rectification, erasure (the “right to be forgotten”), restriction of processing, data portability, and objection to processing. You may withdraw consent at any time. Complaints can be raised with your local data protection authority.
• California (CCPA/CPRA): California residents have the right to know what categories of personal data we collect, to request deletion of personal data, and to opt out of any sale of personal data (Bhavrah does not sell personal data to third parties). You also have the right to non-discrimination for exercising your rights.
• How to Exercise: To exercise your rights, please contact our Data Protection Officer or team using the contact information below. We will verify your identity and respond within the timelines required by applicable law.

International Data Transfers

Bhavrah operates globally, and your data may be transferred to and processed in countries other than your own. These countries may have different data protection laws. Wherever your data is transferred, we will implement safeguards:

• EU Transfers: For data of EU residents, we only transfer personal data to countries with adequate protection or pursuant to EU-approved mechanisms (like Standard Contractual Clauses).
• India Transfers: Under DPDP, cross-border transfer rules are expected soon. We will adhere to any Indian government regulations on international transfers once effective.
• Other Countries: We rely on legal safeguards (contracts, consent) when transferring data abroad. By using Bhavrah, you consent to such transfers as needed to provide the service.

Security

We implement reasonable technical and organizational measures to protect your data (encryption in transit, secure servers, access controls). We regularly review our security practices. However, no system is completely secure. Breaches will be reported in accordance with applicable laws (e.g. notification to India’s Data Protection Board for DPDP).

User Safety and Responsibilities

• Safe Use: Bhavrah is a technology platform facilitating connections. We do not supervise offline interactions, transactions, or user behavior. You are solely responsible for your personal safety and any agreements with other users outside the app.
• Disclaimers: By using Bhavrah, you agree that we are not liable for any harm, loss, or liability arising from offline meetings, transactions, or user actions. Always use caution and good judgment when interacting with others.
• User Conduct: You must provide accurate information and not impersonate others. Fraud, impersonation, or misuse of the service is prohibited. We reserve the right to terminate accounts or refuse service for abusive or illegal conduct.
• DPDP Principal Duties: For example, the DPDP Act requires that individuals not impersonate others or submit false grievances.

Children’s Privacy

Bhavrah is intended for users aged 18 and above. We do not knowingly collect personal data from children under 18. If we learn we have inadvertently collected data from a child, we will promptly delete it. For Indian users, a “child” is defined as under 18 years old. Parents or guardians may request deletion of a child’s data.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be posted in the app/website with an updated effective date. Significant changes may be communicated to users as required.