Privacy Notice

Effective Date: January 1, 2026

Version: 2.1

1. Introduction

HROVIK (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

This notice applies to all users of our platform, including business owners, their customers, and website visitors. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Digital Personal Data Protection Act, 2023 (India DPDP), and other applicable regulations.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

Create an account (name, email address, password, business information)
Complete your business profile (business name, address, phone number, services offered)
Use our features (customer leads, bookings, messages, reviews)
Contact support (communications with our team)
Make payments (billing information, processed securely by our payment processor)

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

Device information (browser type, operating system, device identifiers)
Usage data (pages viewed, features used, time spent, navigation patterns)
Log data (IP address, access times, referring URLs)
Location data (general geographic location based on IP address)

2.3 Information from Third Parties

We may receive information from third-party services you connect to our platform, such as payment processors, analytics providers, and authentication services.

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Process transactions and send related information (receipts, confirmations)
Send administrative notifications (service updates, security alerts)
Respond to your inquiries and provide customer support
Monitor and analyze usage patterns to improve user experience
Detect, prevent, and address technical issues and fraudulent activity
Comply with legal obligations
Send marketing communications (only with your consent, where required)

4. Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA), UK, and Switzerland, we process personal data under the following legal bases:

Contract performance: Processing necessary to provide the Service you have requested
Legitimate interests: Processing for our legitimate business interests, such as improving the Service and preventing fraud, balanced against your rights
Consent: Processing based on your explicit consent, which you may withdraw at any time
Legal obligation: Processing required to comply with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

Service providers: Third-party vendors who assist in operating our platform (hosting, payment processing, analytics)
Legal authorities: When required by law, court order, or governmental regulation
Business transfers: In connection with a merger, acquisition, or sale of assets
With your consent: When you explicitly authorize sharing

We do not sell your personal information to third parties for their own marketing purposes.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. We will also retain your data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it.

7. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (TLS) and at rest
Regular security assessments and penetration testing
Access controls and authentication mechanisms
Employee training on data protection practices
Incident response procedures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.

8. Your Rights

8.1 GDPR Rights (EEA/UK/Switzerland)

You have the right to:

Access your personal data and receive a copy
Rectify inaccurate or incomplete data
Request deletion of your personal data (“right to be forgotten”)
Restrict processing of your personal data
Data portability (receive your data in a structured, machine-readable format)
Object to processing based on legitimate interests
Withdraw consent at any time (without affecting prior processing)
Lodge a complaint with a supervisory authority

8.2 CCPA/CPRA Rights (California)

California residents have the right to:

Know what personal information is collected and how it is used
Request deletion of personal information
Opt-out of the sale or sharing of personal information
Non-discrimination for exercising privacy rights
Correct inaccurate personal information
Limit the use of sensitive personal information

8.3 India DPDP Rights

If you are in India, the Digital Personal Data Protection Act, 2023 grants you rights including:

Right to access information about the processing of your personal data
Right to correction and erasure of personal data
Right to grievance redressal
Right to nominate another person to exercise rights in case of death or incapacity

9. Cookies and Tracking

We use cookies and similar tracking technologies as described in our Cookie Policy. You can manage your cookie preferences through our cookie consent banner or your browser settings.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data during international transfers.

11. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of material changes by posting the updated notice on our website and, where required, by email. The “Last Updated” date at the top indicates when this notice was last revised.

13. Contact Us

For questions about this Privacy Notice or to exercise your rights, contact our Data Protection Officer:

Email: privacy@hrovik.com
Address: HROVIK Privacy Team