Privacy Policy

1.Who We Are

SIVAR is operated by IZIVAR TECHNOLOGIES PRIVATE LIMITED, a company incorporated in India (CIN: U62099TN2026PTC194328), with its registered office at SF NO 106/2C, ADIANNAMALAI, Adaiyur, Tiruvannamalai, Tiruvannamalai, Tamil Nadu, India – 606604.

We are the "Data Fiduciary" as defined under the Digital Personal Data Protection Act, 2023 (DPDPA). This policy explains what personal data we collect, why we collect it, and what rights you have over your data.

2.What Data We Collect

We collect only what is necessary to provide our service:

• Account data: name, phone number (OTP-verified), email address (optional)

• Booking data: check-in and check-out dates, number of guests, property selected

• Payment data: order ID and payment status only — we do NOT store card details (handled by Cashfree Payments, a PCI-DSS compliant processor)

• Usage data: pages visited, search queries, device type, browser (anonymised)

• Support communications: WhatsApp messages you initiate with our support line

• Review data: text and star rating you submit after a confirmed stay

3.Why We Collect It

We process your data for the following purposes:

• To process and confirm your booking and notify the host

• To send booking confirmation, receipts, and important stay updates

• To provide customer and safety support

• To send festival alerts and curated stay recommendations (only with your explicit consent)

• To prevent fraud and ensure platform security

• To comply with applicable Indian law (tax records, regulatory requests)

4.Legal Basis for Processing

Under the DPDPA 2023, we process your personal data on the following bases:

• Your consent — given when you create an account or make a booking

• Legitimate interest — fraud prevention, security, improving platform reliability

• Legal obligation — tax record-keeping under the Income Tax Act, 1961, and compliance with government orders

5.Who We Share Data With

We share your data only where necessary to complete your booking or comply with law:

• The Host / Property: your name, phone number, and check-in details (required to fulfil the booking)

• Cashfree Payments: payment processing only (PCI-DSS certified; they do not receive your stay details)

• Google Analytics: anonymised, aggregated usage data only (no personal identifiers)

• WhatsApp (Meta): support messages you initiate through our published support number

We do NOT sell, rent, or trade your personal data to any third party for marketing purposes.

6.Data Retention

We keep your data only as long as legally or operationally required:

• Booking and payment records: 7 years (Income Tax Act, 1961 requirement)

• Account data: until you delete your account, plus 90 days for backup cycles

• Support and safety messages: 2 years

• Analytics data: 26 months (Google Analytics default, anonymised)

7.Your Rights Under DPDPA 2023

As a Data Principal, you have the following rights under the Digital Personal Data Protection Act, 2023:

• Right to access: know what personal data we hold about you

• Right to correction: request correction of inaccurate or incomplete data

• Right to erasure: request deletion of your data (subject to legal retention obligations)

• Right to withdraw consent: at any time, without affecting processing done before withdrawal

• Right to grievance redressal: raise a complaint with our Grievance Officer

• Right to nominate: designate another person to exercise your rights in case of incapacity

To exercise any right, email grievance@izivar.com. We respond within 15 working days.

8.Children's Privacy

Our platform is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered on our platform, please contact us immediately at hello@izivar.com and we will delete the data promptly.

9.Cookies

We use two categories of cookies:

• Essential cookies: session management and authentication — these cannot be disabled without breaking the service

• Analytics cookies: Google Analytics (anonymised traffic data) — you can disable these in your browser settings or via the GA opt-out browser add-on

We do not use advertising or tracking cookies.

10.Data Security

All data is transmitted over HTTPS. We store data on Google Cloud Platform (GCP) infrastructure with encryption at rest. Authentication is OTP-based — no passwords are stored. Payment data never passes through our servers.

Despite best-in-class measures, no system is entirely immune from risk. In the event of a data breach that is likely to result in high risk to your rights, we will notify you as required by applicable law.

11.Grievance Officer

Pursuant to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDPA 2023, we have designated a Grievance Officer:

Name: Sathish Vasu

Email: grievance@izivar.com

Address: SF NO 106/2C, ADIANNAMALAI, Adaiyur, Tiruvannamalai, Tiruvannamalai, Tamil Nadu, India – 606604

We acknowledge grievances within 24 hours and aim to resolve them within 15 working days.

12.Changes to This Policy

We will notify you of material changes to this Privacy Policy via in-app notice or your registered email address at least 30 days before the change takes effect. Continued use of the platform after the effective date constitutes your acceptance of the updated policy.

13.Contact

For privacy-related queries: grievance@izivar.com

For general enquiries: hello@izivar.com

IZIVAR TECHNOLOGIES PRIVATE LIMITED, SF NO 106/2C, ADIANNAMALAI, Adaiyur, Tiruvannamalai, Tiruvannamalai, Tamil Nadu, India – 606604