Privacy Policy

TAVIYO is operated by Raju Rajbongshi, a sole proprietor based in New Delhi, India. The operator is the data fiduciary for the personal data described here. Registered place of business: Plot No. 1057, DDA Flats, Madangir, New Delhi – 110062, India. Email: support@taviyo.in. Phone: +91 60024 77368.

TAVIYO processes account and profile details, age confirmation, contact information, profile photos, government-ID and selfie verification submissions, listing and booking details, payment and refund references, messages, reviews, reports, blocks, support communications, notification tokens, and technical logs.

With permission, TAVIYO may process location when you select an activity location. TAVIYO does not collect location for emergency-contact messaging. Public discovery uses approximate location or distance and should not expose another member's exact address.

Data is used to create and secure accounts, verify members, operate listings and bookings, process payments and refunds, enable booking-gated chat, deliver service notifications, prevent fraud and abuse, investigate safety reports, respond to support requests, and comply with applicable obligations.

Public activity pages are available only after the host chooses public visibility. They show the host public display name, city, published session information and upcoming times, and may be indexed by search engines. Club membership is separate from booking. Club conversation is available to authorized members and moderated using the existing chat-safety process. Club updates are optional and can be muted.

First-party activity measurements run by default for eligible signed-in members after acceptance of this privacy disclosure. TAVIYO records interaction names, internal account/activity/booking references and booking status changes to understand discovery and returning participation. Authorized administrators see aggregate counts; these records are not public and are not used for advertising. Measurements exclude message contents, identity documents, contact details and precise locations and expire after 90 days. They have no separate in-app switch. Existing financial and safety records retain their separate retention rules. Listing drafts are stored only on your device for up to seven days and cleared when you sign out; local photo files are not retained by this draft feature.

TAVIYO stores a sign-in session and a small number of preferences (such as theme and recently used filters) on your device. These are necessary for the service to work and are not used for advertising. TAVIYO does not run third-party advertising or cross-site tracking. Clearing site data signs you out.

Necessary data may be processed by Supabase, Cloudflare, PayU, Cloudinary, Firebase, Google Maps, OpenRouter and the model providers it routes to, Resend or another configured email provider, and vendors that help operate the service. Payment card, UPI, or bank credentials are handled by PayU rather than stored by TAVIYO.

For automated chat safety checks, message text and a limited set of previously reviewed message excerpts may be sent to OpenRouter and its selected AI model providers. This can include personal information members put in messages. Automated results can flag content for authorized human review; they are not a guarantee of safety. Do not send identity documents, passwords or financial credentials in chat. Contact support about a moderation decision or your privacy rights.

Some of these providers operate servers outside India, so your data may be processed abroad under contractual safeguards. Information may also be disclosed where required by law, to respond to a valid authority request, to protect a person's safety or rights, or in connection with a business transfer. TAVIYO does not sell personal data.

TAVIYO is for adults only. Accounts require confirmation that you are at least 18, and identity verification is reviewed manually. TAVIYO does not knowingly collect data from anyone under 18; if we learn that an account belongs to a minor, it is removed and the associated data deleted except where a record must be retained for safety or legal reasons.

With the member’s explicit consent, new identity documents and selfies are held in private Cloudflare R2 storage for identity review, fraud prevention and safety while the account exists. Authorized administrators must verify their authenticator to view them, and access is audited. R2 documents are removed after account data and authentication deletion succeed. Existing identity documents also remain until successful account deletion. Moving existing documents to R2 requires member consent. Contact support to withdraw consent or request deletion. Minimum decision and audit metadata may be retained as required by law. Report screenshots follow their separate 30-day deletion policy.

Scheduled encrypted database-backup artifacts expire after 14 days and may contain earlier account records. Recovery copies are access-restricted, and restores must honor completed account deletions. Image files are not included in these database backups; lost images may require re-upload or re-verification.

Other records are kept only for as long as needed for the service, safety, disputes, fraud prevention, accounting, or legal obligations. Account deletion removes or anonymizes account and private-object data where possible; payment, refund, incident, acceptance, safety, dispute, message, and audit records may be retained in an anonymized or access-restricted form where necessary.

Members can edit profile visibility, manage notifications and blocks, withdraw optional permissions through device settings, contact support, and request account deletion from Settings, scheduled for 30 days later. Signing in before deletion begins cancels that request. Withdrawal does not invalidate processing already completed and may prevent features that need the data from working.

TAVIYO uses access controls, private storage, encryption in transit, signed provider requests, and audit records, but no online system can guarantee absolute security.

For access, correction, deletion, consent withdrawal, or a privacy complaint, write to the grievance officer: Raju Rajbongshi, support@taviyo.in, +91 60024 77368, Plot No. 1057, DDA Flats, Madangir, New Delhi – 110062, India. We acknowledge privacy requests within 24 hours and aim to resolve them within 30 days.