Data & Privacy Requests

This page explains how to exercise your privacy rights with JIVIQ — for example, to ask for a copy of your data, to correct or delete it, to export it, or to object to certain processing. JIVIQ is operated by Stratus Labs (registered address: C4 602, Edenn Towers CHS, Pune 411057, India). For full detail on what we collect and why, please read our Privacy Policy; this page is a practical guide to making a request.

There is no online request form yet — every request is handled by email to support@jiviq.com, which is also our Data Protection Officer inbox. We do not charge for handling a request, except where the law allows a fee for a manifestly unfounded or excessive request.

1. How to exercise your rights with JIVIQ

Privacy rights let you find out what personal data an organisation holds about you and ask it to be corrected, deleted, exported, or no longer used in certain ways. The rights available to you, and the deadlines for a response, depend on where you live and which laws apply — these are set out in Section 6. Whatever your location, the route to make a request to JIVIQ is the same: email support@jiviq.com (Section 4).

Most day-to-day changes — editing your profile, updating business records, or correcting a customer's details — can be made directly inside the product without a formal request. Use the email route for anything you cannot do yourself, or for a formal access, deletion, or objection request.

2. Whose data is it? Account holders vs. a business's customers

JIVIQ has two distinct roles, and which one applies decides who handles your request:

• You hold a JIVIQ account. We are the controller of your account data (your name, login, billing, and how you use the product) and of data about visitors to jiviq.com. We act on your request ourselves.
• You are the customer of a business that uses JIVIQ. When a business uses JIVIQ to take your booking, chat with you through the embedded widget on their website, collect your form responses, or record your feedback, that business is the controller of your data and we are its processor. The business decides what data to collect and why. Send your request to that business. If you send it to us, we will forward it to the business and help them respond — but the decision rests with them as the controller.

Not sure which applies? If you signed in to JIVIQ yourself, you are an account holder. If you only ever interacted with a particular shop, clinic, salon, or service provider through a JIVIQ-powered chat, booking, or form, then that provider is your controller.

3. The requests you can make

Depending on the law that applies to you (Section 6), you can ask us to do the following. Where we are only the processor, we will pass the request to the relevant business as described above.

• Access — receive confirmation of whether we hold personal data about you, and a copy of it.
• Correction (rectification) — fix data that is inaccurate or incomplete.
• Deletion (erasure) — have your personal data deleted or anonymised, subject to legal exceptions such as records we must keep for tax or accounting.
• Portability / export — receive the personal data you provided to us in a structured, commonly used, machine-readable format.
• Objection to processing — object to processing we carry out on the basis of our legitimate interests. This includes the geolocation and visitor-analytics objection: if you do not want your approximate, IP-derived location used (see the Privacy Policy), email us and we will record a suppression preference so your future visits are not geo-stamped, and we will confirm within 30 days. We never store your raw IP address and never record street-level coordinates.
• Restriction — ask us to limit how we use your data while a question about it is being resolved.
• Opt-out of sale or sharing (CCPA/CPRA) — JIVIQ does not sell personal data and does not share it for cross-context behavioural advertising, so there is no sale or share to opt out of. You may still send this request, and we will confirm that position.
• Withdraw consent (India DPDP Act) — where we rely on your consent, you may withdraw it as easily as you gave it. Withdrawal does not affect processing already carried out before the withdrawal.

4. How to submit a request

Email support@jiviq.com, ideally from the email address associated with the data you are asking about. To help us find your data and respond quickly, please include:

• your name and the email address (and, if relevant, phone number) associated with your data;
• the type of request you are making (for example, access, correction, deletion, or objection);
• enough detail to locate your data — for instance, which JIVIQ-powered business you interacted with, and roughly when, if you are someone else's customer.

There is currently no self-service online request form; requests are handled by email. You can also ask for self-serve deletion of your data through the same address.

5. Verifying your identity

Before we act on a request, we verify the identity of the person making it, so that we do not disclose or delete someone's personal data at the wrong person's request. In most cases we do this by confirming that you control the email address associated with the data — for example, by corresponding with that address. For more sensitive requests, or where the data is particularly detailed, we may ask for additional information to confirm it is really you. We use any verification information only to process your request, and we will tell you if we cannot proceed without more detail.

6. How long it takes

Once we have what we need to identify you and understand the request, we respond within the applicable statutory timeline:

• GDPR (EU/EEA and UK) — within 30 days. This period may be extended for complex or numerous requests, and we will tell you if so.
• CCPA/CPRA (California) — within 45 days, with an extension possible for complex requests, in which case we will let you know.
• India DPDP Act, 2023 — we acknowledge your request or grievance within 7 working days and resolve it within the period required by the Act and its rules.

When you close your JIVIQ account, we delete or anonymise your personal data, and the personal data we processed on your behalf, within 90 days, except where law requires us to keep certain records for longer. We are building an automated deletion pipeline to enforce this consistently.

7. Complaints and supervisory authorities

We would always prefer the chance to put things right first — please raise any concern with us at support@jiviq.com. If you are not satisfied, you have the right to complain to a data-protection authority:

• EU/EEA — the supervisory authority in your country of residence, your place of work, or where the issue occurred.
• United Kingdom — the Information Commissioner's Office (ICO).
• India — the Data Protection Board of India, established under the DPDP Act. Please use our grievance route to our Data Protection Officer first; if your grievance is not satisfactorily resolved, you may then approach the Board.

8. Authorised agents (CCPA)

If you are a California resident, you may use an authorised agent to submit a request on your behalf. We may ask the agent for proof that you authorised them to act for you, and we may still ask you to verify your own identity directly or to confirm that you gave the agent permission, before we act on the request.

9. Contact and Data Protection Officer

All privacy requests, questions, and complaints go to our Data Protection Officer:

• Email: support@jiviq.com
• Operated by: Stratus Labs
• Postal address: C4 602, Edenn Towers CHS, Pune 411057, India

Last updated: June 26, 2026.