Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Data — name, email address, phone number, date of birth, profile photo
• Profile Data — business name, designation, bio, address, logo, social media links, website URLs
• Section Content — products, services, testimonials, gallery images, FAQs, and other content you add to your profile
• Posters — logos, photos and text you place on posters and frames
• Contacts — names, phone numbers, emails, birthdays and anniversaries of contacts you add or import from a file, used only to show them to you and remind you
• Payment Display Details — bank account details and UPI IDs you choose to show on your digital card (we do not process payments through these)
• Billing Details — billing name, address, state, and GSTIN (optional) for your tax invoices
• Authentication Data — passwords (stored only as bcrypt hashes, never in plain text), one-time codes
• Support Data — messages, emails, and feedback you send to us

1.2 Information Collected Automatically

• Device Information — device type, operating system, app version, browser type
• Usage & Analytics Events — profile views, link clicks, QR scans and poster downloads, used to show you your profile's performance
• Log Data — IP address, access timestamps, referring URLs
• Session Data — signed-in sessions and the device and platform (web/Android) they belong to
• Push Token — if you allow notifications in the mobile app, a token used to deliver them

1.3 Information from Third Parties

• Google Sign-In — name, email, profile picture (when you sign in with Google)
• Razorpay — payment ID, amount and status. We never receive your card number, UPI PIN or bank login.

1.4 Mobile App Permissions

• Camera — only to scan a QR code (for example, to sign in to the website) when you choose to.
• Photos — when you pick an image to upload, the system photo picker gives the app only the image you select. The app does not read the rest of your gallery.
• Location — only when you tap "detect location" while editing your business address. The coordinates are saved to your profile and shown on its map. We never track your location in the background.
• Notifications — optional, for reminders and account updates.

2. How We Use Your Information

• To create and manage your account, workspace, and profiles
• To display your public profile to visitors who open your profile link or QR code
• To produce your posters with your details
• To process payments and issue GST tax invoices
• To keep the records required by Indian tax law, and to file GST returns
• To show you analytics about your profile
• To send transactional messages (one-time codes, plan expiry reminders, invoices, account updates) and reminders you have set up
• To enforce our Terms of Service and prevent abuse and fraud
• To improve the Platform through aggregated, anonymized usage analysis
• To comply with legal obligations and respond to lawful requests

We do not sell your personal data, and we do not show advertisements on the Platform.

3. Public Profile Data

When you publish a profile, certain information becomes publicly accessible to anyone with your profile link or QR code. This includes:

• Your name, business name, designation, bio, and photo
• Contact entries, social links, and bank/UPI details you choose to display
• Your business location on a map, if you set one
• Section content (products, services, gallery, etc.)
• Reviews and ratings left by visitors

You control what appears on your public profile, and can unpublish it at any time. Your contacts list, billing details and invoices are never public.

4. Data Sharing & Disclosure

We share data only in the following circumstances:

• Service Providers — the services that help us run the Platform, listed in Section 5, and only what each needs
• Legal Requirements — when required by law, regulation, legal process, or a governmental request, including tax authorities
• Safety & Fraud Prevention — to protect the rights, property, or safety of Boostify, our users, or the public
• Business Transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity
• With Your Consent — when you choose to share, for example by publishing your profile

5. Third-Party Services

Each service operates under its own privacy policy, for example the Google Privacy Policy and the Razorpay Privacy Policy.

6. Cookies & Local Storage

• Local storage — to keep you signed in, remember your selected account and profile, and your theme preference
• Cookies — we do not use advertising or tracking cookies. Razorpay may set cookies needed to complete a payment.

You can clear local storage and cookies through your browser settings. Doing so will sign you out and reset your preferences.

7. Data Storage & Security

• Your data and uploaded files are stored on our servers located in India
• Passwords are hashed with bcrypt and are never stored or transmitted in plain text
• Sign-in uses short-lived access tokens and revocable sessions; you can sign out other devices from Settings → Security
• One-time codes expire after 5 minutes
• All data in transit is encrypted with HTTPS/TLS
• Access to personal data is limited to staff who need it to run the Platform

While we use industry-standard security measures, no system is 100% secure. If a breach affects your personal data, we will notify you and the authorities as required by law.

8. Data Retention

• Account and profile data — kept while your account is active
• Deleted accounts — when you delete your account, it is deactivated and your profiles are taken offline immediately; your personal data, profiles, contacts and uploaded files are permanently erased after 30 days
• Invoices and payment records — kept for at least 8 years as required by the GST and income-tax laws of India, even after account deletion
• Analytics data — individual events are kept for 12 months; aggregated, anonymized totals may be kept longer
• Sessions — expired sessions are purged periodically

9. Your Rights

Under the DPDP Act and applicable laws, you have the right to:

• Access — request a summary of your personal data we hold
• Correction — update or correct inaccurate personal data (most of it you can edit yourself in Settings)
• Erasure — delete your account and data (see Delete Account), subject to legal retention requirements
• Withdraw Consent — withdraw your consent for data processing at any time (this may affect your ability to use the Platform)
• Nominate — nominate another person to exercise your rights in case of death or incapacity
• Grievance — complain to our Grievance Officer or to the Data Protection Board of India

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Boostify is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the name and contact details of the Grievance Officer are:

13. Contact Us

• Email: [email protected]
• Phone: +91 83007 80559 (Monday to Saturday, 9:00 AM – 7:00 PM IST)
• Address: Noyyal Technologies, 31/40, Dharapuram Road, Tiruppur, Tamil Nadu, India — 641604