Privacy Policy

Zivra ("we", "our", "us") is committed to protecting your personal data. This policy explains what we collect, why we collect it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.

This policy applies to the Zivra waitlist at zivra.social. When the mobile app launches, a separate in-app privacy notice will apply to additional data collected there.

1. Who we are

Zivra is a privacy-first social discovery platform based in India. Questions or requests about your data can be sent to hello@zivra.social.

2. What we collect

Data	Required?	Why
Email address	Yes	To send your waitlist confirmation, referral link, and beta invitation
City	No	To personalise your waitlist position and notify you when Zivra launches in your city
Referral code	Auto-generated	To track referrals and calculate your effective waitlist position
Referred-by code	No	To credit the person who invited you with a position boost
IP address & browser metadata	Automatic	Standard server logs; retained for up to 90 days for security purposes

We do not collect your phone number, government ID, social media profiles, or payment details at this stage. We do not use tracking pixels or third-party advertising cookies.

3. How we use your data

Manage your waitlist entry and calculate your position.
Send transactional emails — your confirmation, referral link, and beta invitation.
Send product updates about Zivra's launch (you can unsubscribe at any time).
Attribute referrals and apply position boosts correctly.
Detect and prevent abuse of the referral system.

We process your data on the legal basis of consent (you provided your email voluntarily) and legitimate interest (operating the waitlist and preventing abuse).

4. Who we share your data with

We share your data only with the sub-processors needed to operate the waitlist:

Supabase — cloud database (data stored in their infrastructure; governed by their DPA).
Resend — transactional email delivery (your email address is transmitted to send you emails; not used for advertising).

We do not sell your personal data. We do not share it with advertisers, data brokers, or any third party beyond what is listed above.

5. Data retention

We retain your waitlist data until one of the following happens:

You request deletion (see Section 7).
You create an account in the Zivra app, at which point the waitlist record is migrated.
24 months pass from your sign-up date without beta access being granted, after which we delete inactive waitlist entries.

6. Cookies

The Zivra waitlist website uses only strictly necessary, session-based cookies set by Next.js for routing. No analytics, advertising, or tracking cookies are set. No third-party scripts load on the page.

7. Your rights under the DPDP Act 2023

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

Access — request a summary of the personal data we hold about you.
Correct — request correction of inaccurate or incomplete data.
Erase — request deletion of your personal data from our records.
Withdraw consent — unsubscribe from non-essential communications at any time via the unsubscribe link in any email.
Grievance redressal — raise a complaint with us and, if unresolved, with the Data Protection Board of India once it is established.

To exercise any of these rights, email hello@zivra.social with the subject line "Data Request". We will respond within 30 days.

8. Security

We use industry-standard security measures: HTTPS in transit, encrypted storage via Supabase, and server-only service-role keys that are never exposed to the browser. No system is perfectly secure, and we will notify you promptly if a breach affects your data.

9. Changes to this policy

If we make material changes, we will update the "Last updated" date at the top of this page and, where required, seek fresh consent. Continued use of the waitlist after changes constitutes acceptance.

10. Contact

For any privacy questions or data requests: hello@zivra.social