Privacy Policy

1. Introduction

Welcome to Rewyoo. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you, including under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data includes first name, maiden name, last name, username or similar identifier.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Usage Data includes information about how you use our website, products and services.

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• With your consent, which you provide when you sign up.
• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. These include encryption of data in transit over HTTPS/TLS, access controls and authentication, and restricting access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

5. Third-Party Data Sharing

We do not sell your personal data. We share it only with trusted service providers (data processors) who help us operate the platform, and only to the extent necessary. These include:

• Cloud hosting & infrastructure providers that store and serve our application and database.
• Authentication providers (Google Firebase) used to securely sign you in.
• Error monitoring & performance tools (such as Sentry) that help us detect and fix issues.
• Product analytics tools that help us understand how the platform is used.
• Artificial intelligence providers (such as OpenAI) that power certain features.
• Email & communication providers used to send transactional and verification emails.

We may also disclose personal data where required by law or to protect our rights, users, or the public.

6. Data Retention

We retain your personal data only for as long as your account is active or as needed to provide you our services. When you request deletion of your account, your account is deactivated immediately and your personal data is permanently deleted within 30 days, after which it can no longer be recovered. We may retain a limited record of your consent and certain information for longer where we are required to do so by law.

7. Children's Privacy

Rewyoo is intended only for users aged 18 and above. Under the DPDP Act, anyone below the age of 18 is considered a child. We do not knowingly collect or process the personal data of children. By creating an account you confirm that you are at least 18 years old. If we become aware that we have collected personal data from a child, we will take steps to delete it.

8. Your Rights & How to Exercise Them

Under data protection laws, including the DPDP Act, you have rights in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to or request restriction of processing.
• Request transfer (portability) of your personal data.
• Withdraw consent at any time.

You can exercise many of these rights directly from your account: download your data from Settings → Export Data, and delete your account from Settings → Account. For any other request, contact our Grievance Officer below.

9. Data Breach Notification

We maintain an internal process to detect, assess and respond to personal data breaches. In the event of a breach likely to affect your rights, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, and take prompt steps to contain and remediate the incident.

10. Grievance Officer

In accordance with the DPDP Act, you may contact our Grievance Officer with any questions, concerns, or complaints about how your personal data is handled, or to exercise your rights:

• Grievance Officer: [Grievance Officer Name]
• Email: privacy@rewyoo.com
• Address: Rewyoo, Bengaluru, India

We aim to acknowledge and respond to grievances within the timelines prescribed under applicable law.

11. Contact Us

For general questions about this privacy policy or our privacy practices, you can also reach us at: support@rewyoo.com