Privacy Policy

1. Introduction

Welcome to AvviFlow ("we", "us", or "our"). We are headquartered in Faridabad, Haryana, India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our SaaS platform at avviflow.com (the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

• Account Information: Name, email address, password (hashed), and role when you register.
• Business Information: Agency name, vendor details, expense records, invoices, and payouts that you enter into the Service.
• Usage Data: Pages visited, features used, browser type, IP address, device information, and timestamps, collected automatically via logs and analytics.
• Communications: Support tickets and messages you send us.
• Payment Information: Billing plan selection. Payment card details are processed by our third-party payment processor and are not stored on our servers.

3. How We Use Your Information

• To provide, operate, and maintain the Service.
• To create and manage your account and workspace.
• To send transactional emails such as email verification, invite notifications, and support replies.
• To improve the Service through analysis of usage patterns.
• To enforce our Terms and Conditions and prevent misuse.
• To comply with applicable legal obligations under Indian law.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Service Providers: Trusted vendors (Firebase / Google Cloud) who assist in hosting, analytics, and email delivery, bound by confidentiality obligations.
• Legal Requirements: If required by law, court order, or governmental authority in India.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction.

5. Data Retention

We retain your data for as long as your account is active, or as necessary to provide the Service and comply with legal obligations. You may request deletion of your account and associated data by contacting us at privacy@avviflow.com. Upon deletion, your data is purged within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), Firebase Authentication, Firestore security rules with tenant isolation, and access controls. However, no method of electronic storage is 100% secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised access.

7. Cookies

We use cookies and similar technologies to operate the Service. Please refer to our Cookies Policy for full details.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us so we can delete it.

9. Your Rights

Subject to applicable law, you may:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent where processing is based on consent.

To exercise your rights, email us at privacy@avviflow.com.

10. Jurisdiction & Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts in Faridabad, Haryana, India.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: