Privacy Policy

JIVIQ (“JIVIQ”, “we”, “us”, “our”) is an all-in-one operating system for service professionals and small businesses. This policy explains what personal data we collect, why, how we use and share it, how long we keep it, and the rights you have over it. It covers three different groups of people, and it is important to understand which one you are, because our role and your rights differ:

• Account holders — the professionals, business owners, and team members who sign up for and use JIVIQ.
• Visitors to jiviq.com — anyone who browses our marketing website.
• Your customers (end-users) — the people who book appointments with you, chat with you through our embedded chat widget on your website, email you or receive your email through JIVIQ, fill in your forms, or send you feedback. For this group, you are the data controller and we act as your data processor (see Section 1).

If anything here is unclear, write to support@jiviq.com. The service is operated by Stratus Labs (registered address: C4 602, Edenn Towers CHS, Pune 411057, India), which is the data controller / Data Fiduciary for the data described in this policy where we act as a controller.

What changed in v2.6 (2026-09-27). This version corrects Section 12. Version 2.5 said that a deletion request does not remove AI summaries built from email. Section 12 now says that a deletion request does not yet remove the AI summary of a customer’s history, which is built from the customer’s records, including chat, email and past calls. A deletion request also does not yet remove the copies and earlier versions of that summary that we keep.

What changed in v2.5 (2026-09-27). JIVIQ lets a business send and receive email from JIVIQ. Amazon Web Services has handled that email for us since September 2026, and the earlier versions of this policy did not say so; this version corrects that. It says what email data we process for businesses (Section 3.3), how AI uses it (Section 8), that Amazon Web Services sends and receives that email for us, and stores a copy of each email received, in Mumbai (Section 10), and how long we keep it (Section 12). It also corrects three things that were wrong before and are not about email: since August 2026, OpenRouter and Voyage AI, not ZeroEntropy, have re-ranked knowledge-base search results, and we cannot yet promise that they do not keep or learn from that data (Sections 8, 10 and 11); Google Cloud Vision screens uploaded files (Section 10); and Section 10 now says where our Gemini AI runs.

What changed in v2.4 (2026-09-25). Withdrawing your analytics consent on jiviq.com now reaches every jiviq.com tab open in that browser, and it also removes Clarity’s tab marker, which the earlier version said stayed until you closed the tab. Section 9 now says so.

What changed in v2.3 (2026-09-24). Our admin app no longer sends Sentry anything when a page loads. Since 24 September 2026, Sentry receives data, including your IP address, only with an actual error report, and Sections 7 and 10 now say so.

What changed in v2.2 (2026-09-24). This version corrects the earlier one. Section 9 said we did not run third-party web-analytics products such as Google Analytics. That was wrong: from August 2026, jiviq.com loaded Google Analytics and Microsoft Clarity on every page without asking first. They now load only if you accept them in the site’s cookie banner, and Sections 3, 4, 5, 9 and 11 say so. Section 7 now names services that receive your IP address, and Section 10 now says that Sentry receives it each time a page of our admin app loads, not only with error reports. This web page had also been missing two passages of this policy about the “Live now” feature: the short record of recent browsing it keeps (Section 6) and its 7-day limit (Section 12). They now appear here.

1. Our two roles: controller and processor

JIVIQ wears two different hats depending on whose data is involved:

• We are the controller for: data about our account holders (your name, login, billing, and how you use the product) and about visitors to jiviq.com, and for email sent to a JIVIQ email address that no business is using, which we keep as Section 12 describes. For this data we decide the purposes and means of processing, and the rights in Sections 15–17 apply directly between you and us.
• We are a processor for: the personal data of your customers that flows through JIVIQ because you use it to run your business — for example, a client who books an appointment, a website visitor who chats with you through our embedded widget, or someone who completes one of your forms. You are the controller of that data. We process it only to provide the service to you, on your instructions, governed by a Data Processing Agreement (DPA). If one of your customers asks us to access or delete their data, we will direct them to you and assist you in responding. This includes email sent to your JIVIQ email address while your email is switched off: we hold it on your behalf, and you remain its controller (Section 12).

Because the chat widget runs on your website, the people who use it are usually governed by your privacy notice, not this one. You are responsible for telling your own customers how you use JIVIQ to handle their data and for having a lawful basis to do so. Our DPA is available to any customer on request via support@jiviq.com.

2. What JIVIQ does

JIVIQ is more than scheduling. So you understand what data the product can collect, here is the full set of capabilities. Not every account uses every capability.

• Scheduling & booking — public booking pages, appointments, services, availability, reminders.
• Embedded chat widget — a chat box you can add to your own website so your visitors can message you. It captures the messages, optional contact details, and any files visitors send.
• Website visitor analytics — when the chat widget is installed, it can record which pages a visitor views and where they came from, to help you understand your audience (Section 6).
• Forms — public forms (hosted on forms.jiviq.com) that collect responses from the people who fill them in.
• Feedback — a channel for collecting feedback and support requests from your customers.
• Customer records (CRM) — contact and relationship information about your clients.
• AI assistant — optional AI features that help draft replies and answer questions, including an assistant that can respond in chat (Section 8).
• Calls and meetings — voice and video calls inside a conversation, and meetings that people join by link. Section 8.1 explains recording, transcription and live translation.
• Email — a business can send email to its customers from JIVIQ, and receive their replies and mail sent to its JIVIQ email address, including mail the business forwards there from its own mailbox (Section 3.3).

3. Information we collect

3.1 From account holders (we are the controller)

• Account data — name, email, phone, business name, locale, timezone. Sign-in is handled by Google Firebase Authentication; your password is held by Firebase, not by us.
• Business data you create — services, availability, appointments, customer records, notes, form definitions, knowledge-base content, and similar.
• Usage & device data — IP address, device type, browser, operating system, pages visited, and timestamps, used for security, rate-limiting, and to keep the product working.
• Billing data — subscription and billing identifiers handled by our Merchant of Record, Paddle (Section 10). We store only references (such as a customer/subscription ID); we do not store full card numbers.
• Support communications — emails and in-product messages you send us.

3.2 From visitors to jiviq.com (we are the controller)

• Usage & device data — as above, for security and to operate the site.
• Approximate, IP-derived location — see Section 7.
• Browser storage — a theme preference, a cookie that remembers your cookie-banner choice, and the items the chat widget on our own site stores (Section 9).
• Website analytics, only if you accept — the pages you view on jiviq.com and how you use them (with Microsoft Clarity, clicks, scrolling and a replay of the visit), recorded by Google Analytics and Microsoft Clarity only after you click Accept in the site’s cookie banner (Section 9).

3.3 About your customers, on your behalf (we are your processor)

When you use JIVIQ to serve your customers, we process — strictly to provide the service to you — data such as:

• Booking data — your client’s name, phone or email, the appointment, and any notes; a one-time code (OTP) used to verify their identity.
• Chat data — the messages your website visitors send through the widget, any name/email/phone they provide, and any files they upload.
• Form responses — whatever a respondent enters into your forms.
• Feedback — the content and identity a person provides when they send you feedback.
• Call and meeting data — participants’ audio and video while a call or meeting is live, call recordings (audio only), transcripts and summaries, and the language each participant chooses (Section 8.1).
• Email — for email you send and receive through JIVIQ: the names and email addresses of the sender and of everyone it is addressed or copied to, the subject, the message text, attachments, and a complete copy of each email received, exactly as it reached us (including its technical headers, which can show the internet addresses of the mail servers that handled it and, for some senders, of the sender’s own computer or network). Each new sender is added to your customer records. If you forward a mailbox to JIVIQ, that includes everyone who writes to that mailbox, not only your customers. We also record whether a message was delivered, bounced or reported as spam, and for each business we keep a list of addresses its email could not be delivered to (a permanent bounce) or whose owners reported it as spam, so that its email is not sent to them again.
• Website-visitor activity — a persistent anonymous identifier and the pages a visitor views on your site, plus an approximate location where you have enabled that feature (Sections 6 and 7).
• Technical data — IP address (used transiently — see Section 7), browser, operating system, device type, and the address of the page the widget is on.

You decide what personal data your customers give you, and you are responsible for the lawful basis to collect it. Please don’t use free-text fields (chat, notes, form answers) to collect special-category data unless you have your own lawful basis to do so.

4. How we use data

• To operate the service — create accounts, take bookings, run your chat widget and forms, send and receive your email, send reminders and notifications.
• To secure the service — detect and prevent fraud, abuse, and unauthorized access.
• To support you — answer your questions and fix problems.
• To improve the product — understand how features are used (we do this with our own data, not third-party ad trackers).
• To measure and improve our marketing website, jiviq.com — only if you accept analytics cookies there (Section 9).
• To comply with legal obligations — tax, accounting, and lawful requests.

We do not sell your personal data, and we do not share your client lists with third parties for their own marketing.

5. Legal bases (GDPR)

Where the EU/UK GDPR applies and we are the controller, we rely on:

• Contract — to deliver the service you signed up for.
• Legitimate interests — to secure, maintain, and improve the service (balanced against your rights; balancing assessment available on request).
• Consent — for marketing emails, and for analytics cookies on jiviq.com (Section 9); you can withdraw either at any time.
• Legal obligation — tax, audit, and lawful requests.

Where we act as your processor (Section 1), you determine the lawful basis for your customers’ data; we process it on your documented instructions. For individuals in India, our basis is described in Section 17.

6. Website-visitor analytics and the visitor identifier

When the JIVIQ chat widget is installed on a website (yours, or our own jiviq.com), it can record basic visitor activity to power audience analytics:

• A persistent anonymous identifier is stored in the browser (a random value, not your name or email) so that repeat visits and the path through a site can be recognised. It is created when the page loads.
• For each page view we record the page address (stripped of query strings), the referring site, and any campaign (UTM) tags — used to build visit and journey analytics.
• A short-lived “who is on the site now” presence signal may be sent every ~30 seconds while a page is open; it includes the current page and the visitor’s timezone and is discarded within minutes.
• Where a business turns on operator-initiated proactive messaging (a “Live now” feature), a short record of recent browsing presence — the anonymous identifier, the current page address, and an approximate country — is kept for up to 7 days so a member of the business’s team can start a chat with a visitor while they are still on the site. It is keyed to the anonymous identifier only (no name or email), is deleted automatically after 7 days, and can be deleted sooner on request (Sections 12 and 15).
• If a visitor later identifies themselves (for example, by giving their name in chat or verifying a one-time code), the previously anonymous activity can be associated with that person so you can see their history.

On your website this is processing of your customers’ data, for which you are the controller; you should disclose it in your own privacy notice. A visitor can object to analytics processing (Section 15); we maintain a suppression list so that future page views are not analytics-stamped. The chat widget uses no third-party advertising or cross-site tracking network.

7. IP-derived approximate location

Where this feature is enabled, when a page carrying the JIVIQ widget is loaded (including on jiviq.com), the visitor’s IP address is read transiently and passed through a MaxMind GeoLite2 database held locally on our own servers in Mumbai (asia-south1) to derive an approximate country and city. We then:

• discard the IP address — it is never stored, logged, or persisted alongside the result;
• keep only the derived country and city — we store no latitude or longitude and do no reverse geocoding to a street address;
• never transmit the IP address to MaxMind — lookups run entirely on our servers against a licensed database file. MaxMind is a data licensor, not a sub-processor, and receives no personal data.

We use the derived location for service security, fraud and abuse prevention, and basic aggregate analytics. Aggregated location data (visitor counts by city and country) is used for product analytics. In addition, once you identify yourself to a business that uses JIVIQ — for example, by giving your details in chat or booking an appointment — your approximate city-level location may also be shown to that business on your customer profile within their JIVIQ account; you can object at any time (see below), and we store no street address and no precise coordinates. Where the GDPR applies we rely on our legitimate interest under Article 6(1)(f) (balancing assessment available on request); we do not use it for any solely-automated decision producing legal or similarly significant effects about you. Your right to object (Article 21 GDPR): email support@jiviq.com and we will record a suppression preference so your future visits are not geo-stamped, confirming within 30 days. We retain the derived country and city for 12 months from the event date, after which an automated job deletes them. For individuals in India, see Section 17.

Note: where our chat widget includes optional bot-protection (Google reCAPTCHA), the IP address may be sent to that service as a fraud-prevention signal at the moment a form or message is submitted. It is separate from the location feature above.

Your IP address also reaches these services, as it does for any website or online call:

• Google Fonts, which serves the typefaces of jiviq.com and of the chat widget, when those pages load;
• on jiviq.com, CookieYes, which runs the cookie banner (its script, from cdn-cookieyes.com, and its record of your choice);
• on jiviq.com, and only if you accept analytics, Google Analytics and Microsoft Clarity (Section 9);
• in our admin app, Sentry, our error-reporting provider, with each error report (Section 10);
• when you join a call or a meeting, LiveKit, our media provider, whose servers carry its audio and video (Section 8.1).

8. AI processing

Some features use AI. When you use them, the relevant content is sent to our AI sub-processors to generate a result. Google does not use it to train its general models. For knowledge-base search re-ranking by OpenRouter and Voyage AI we cannot yet make that promise (see Section 10). These features are:

• AI assistant & reply drafting — chat messages and related context are sent to Google Gemini to generate suggested or automated replies.
• Knowledge-base search — your knowledge-base content and search queries are sent to Google Gemini (for embeddings) and to OpenRouter, which passes them to Voyage AI’s re-ranking model (for search re-ranking) to return relevant answers.
• Email — where a business uses email, its email messages (including their subjects, text and addresses) may be sent to Google Gemini to write AI summaries, such as the customer summary its team sees. These summaries run for every business that uses email; there is no setting to switch them off. AI never sends email on its own: every email a business sends through JIVIQ’s email feature is sent by a member of its team. (Automatic messages, such as booking confirmations and notifications, are separate; see ZeptoMail in Section 10.)

AI features that process your customers’ content are part of the processor relationship in Section 1. You control whether to enable the AI assistant and reply drafting. The AI summaries of a customer’s history that your team sees, built from chat and email, run for every business, and there is no setting to switch them off.

8.1 Calls and meetings

Businesses that use JIVIQ can hold voice and video calls inside a conversation, and meetings that people join by link. Each participant is shown a notice before joining.

• Audio and video are carried in real time by our media provider, LiveKit.
• Recording and transcripts. Calls may be recorded (audio only) and transcribed, and the business may receive an AI-written summary of the call. The transcript and summary are kept in that business’s records in JIVIQ. Call recordings are stored on our Google Cloud servers in Mumbai (asia-south1) and are deleted automatically about 30 days after the call.
• Live translation. When participants speak different languages, their speech may be translated live by AI and shown as captions, and a transcript of the translated speech is kept in the business’s records.
• AI provider. Live translation, transcription and summaries are produced by Google’s Gemini AI models.

The business decides whether to use calls and meetings, and it is the controller of these recordings and transcripts; we process them on its behalf (Section 1). To access or delete a recording or transcript, contact that business. If you write to support@jiviq.com, we will pass your request to the business and help it respond (Section 15). The providers named here are listed in Sections 10 and 11.

9. Cookies & browser storage

We run no advertising, and we set no advertising cookies ourselves. Our product — the admin app, forms, booking pages, hosted chat, calls, meetings and the chat widget — uses no third-party advertising cookies and runs no third-party web-analytics product. We use:

• Strictly necessary storage — for authentication and keeping you signed in (handled by Firebase Authentication), and, on jiviq.com, a cookie that remembers your cookie-banner choice.
• Functional storage — preferences such as your theme, and saved drafts.
• The visitor identifier described in Section 6 — a functional identifier the chat widget stores in the browser to support audience analytics.
• Analytics on jiviq.com, only with your consent — our marketing website uses Google Analytics (Google LLC) to measure visits, and Microsoft Clarity (Microsoft Corporation) to see how visitors use its pages, including clicks, scrolling and a replay of the visit. Neither loads until you click Accept in the site’s cookie banner, which is run by CookieYes. You can change your choice at any time from the “Cookie settings” link at the foot of every page. If you withdraw, Google Analytics and Microsoft Clarity stop in every jiviq.com tab open in that browser, and we erase their cookies on jiviq.com (_ga, _ga_8HYP3Z51GZ, _clck and _clsk) and Clarity’s _cltk tab marker: at once in any tab that is running, and, in a tab your browser has paused in the background or in a browser too old to pass the message between tabs, as soon as that tab is shown again or opens another page; Microsoft’s own cookies on clarity.ms and bing.com sit on Microsoft’s domains, so you clear those in your browser. Google and Microsoft receive this data and may process it outside India, including in the United States. Microsoft’s own cookies, on clarity.ms and bing.com, are also used by Microsoft for its own purposes, which it says include advertising; we cannot delete them, so clear them in your browser if you want them gone.

Two more things load on every page of jiviq.com before you make any choice, because the site needs them: our typefaces, from Google Fonts (Google LLC), which sets no cookie but receives your IP address with each request; and our own chat widget (Section 6).

You can clear browser storage at any time through your browser settings. A detailed, per-key inventory is in our Cookies & Local-Storage Policy.

10. Sub-processors

We use a small set of trusted sub-processors to run the service:

• Google Cloud Platform (data primarily in asia-south1, Mumbai) — infrastructure: Cloud Run, Cloud SQL, Cloud Storage, Cloud Tasks, Cloud KMS, Compute Engine, Cloud Vision (which screens uploaded images, and the first pages of uploaded PDFs, for harmful content; its processing is not pinned to a region), and Firebase Authentication & Hosting.
• Google Gemini (Google LLC) — AI processing, when those features are used: through Google Cloud’s Vertex AI, at its global endpoint, which is not pinned to a region, for the assistant, reply drafting, translation of chat messages and call transcripts, AI summaries (including summaries of recorded calls) and knowledge-base embeddings; and through the Gemini API (United States) for the assistant on public booking pages, for live translation in calls and meetings and for transcription of recorded calls.
• LiveKit, Inc. (United States; audio and video are relayed through LiveKit’s worldwide network of servers) — real-time audio and video transport for calls and meetings.
• OpenRouter, Inc. (United States) — routes knowledge-base search re-ranking: it receives the search query and the knowledge-base passages and passes them to the re-ranking model. Whether it, or the model it passes them to, may keep or learn from what it receives depends on account settings we have not yet confirmed.
• Voyage AI (a MongoDB company; United States) — the re-ranking model that OpenRouter sends them to. Whether it may keep or learn from what it receives depends on account settings we have not yet confirmed.
• Paddle.com Market Ltd — Merchant of Record for subscription billing, payments, and tax.
• ZeptoMail (Zoho Corporation) — transactional email (verification, one-time codes, invitations, booking confirmations, and notifications).
• Sentry (United States) — error and crash diagnostics for our admin application (captures technical error details from the browser, with the IP address and browser details, only when an error is reported).
• Amazon Web Services (data in ap-south-1, Mumbai) — email: Amazon SES sends email for businesses and receives email sent to JIVIQ email addresses, Amazon S3 stores a complete copy of each email received, and Amazon SNS tells our servers when an email has arrived, been delivered, bounced, or been reported as spam.

Each sub-processor that processes personal data on our behalf is bound by a data-processing agreement. We will update this list before engaging a new sub-processor; material changes are notified by email or in-product banner. Customers who require a signed DPA can request one via support@jiviq.com.

Licensed data source (no personal data shared)

• MaxMind, Inc. (51 Pleasant Street, Suite #1020, Malden, MA 02148, USA) — provides the GeoLite2 City database, a binary lookup file we license and host. IP-to-geography lookups are performed locally within our own infrastructure; MaxMind receives no personal data and acts as a data licensor, not a processor. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

11. International data transfers

Your data is primarily processed in India (asia-south1) and in your own region. Some of our sub-processors are based in the United States — specifically Google (Gemini), LiveKit, OpenRouter, Voyage AI, and Sentry. Amazon Web Services, which handles our email, keeps the email it stores and processes for us in its Mumbai region (ap-south-1). During a call or meeting, audio and video may pass through LiveKit servers in other countries. Google Fonts, and — if you accept analytics on jiviq.com — Google Analytics and Microsoft Clarity also receive data from your browser (Section 9), which Google and Microsoft may process outside India, including in the United States. When personal data is transferred out of the EU/EEA, UK, or India, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the EU–US / UK / Swiss Data Privacy Framework where applicable, and equivalent contractual protections. A list of safeguards is available on request.

12. Data retention & deletion

We keep personal data only as long as we need it. Indicative retention periods:

• Account & business data — for as long as your account is active.
• Booking, chat, form, and feedback records — retained while your account is active so you have your business history; deleted or anonymised when you ask us to delete them (below).
• IP-derived location (country/city) — 12 months, then automatically deleted (Section 7).
• Call recordings — where a call is recorded, the audio is deleted automatically about 30 days after the call (Section 8.1). Call transcripts and summaries are kept with the business’s other conversation records.
• Email — email messages are kept in the business’s records while its account is active. The complete copy of each email received, stored with Amazon Web Services, has no automatic expiry: it is kept until we delete it. That includes email we never add to a business’s records, such as mail refused as spam or a virus, mail sent to an address that is not in use, or mail sent to a business’s JIVIQ email address while its email is switched off. Each business’s list of addresses its email could not be delivered to, or whose owners reported it as spam, is kept so that its email is not sent to them again, including after a deletion request.
• Short-lived signals — the “who is on the site now” presence signal is discarded within minutes; AI-feature diagnostic logs are purged within 30 days.
• Uploaded files — deleting a file removes it from the product straight away, and we keep a recovery copy for at least 30 days so an accidental deletion can be undone. We do not run an automatic job that erases stored copies afterwards; removing one is a manual step we take as part of a deletion request, and we tell you what we did.
• Browsing-presence for proactive messaging — where the “Live now” operator-messaging feature is enabled, the recent-presence record described in Section 6 is kept for at most 7 days, then automatically deleted by a scheduled job; it can be deleted sooner on a verified request.
• Legal/financial records — kept as long as tax, accounting, or other law requires.

How deletion works. Deletion happens when you ask for it — email support@jiviq.com (Section 15), or tell us you are closing your account and want your data removed. A member of the JIVIQ team carries it out by hand; we do not run an automatic deletion process. Once we have verified who you are, we acknowledge your request and act on it within one month, which is the response time the GDPR sets. That is a response window, not a guarantee that every stored copy has gone by a fixed date — we tell you what we deleted and what we kept.

What we delete or anonymise: your chat and conversation history, form submissions, feedback you have sent us, drafts staged for review, and your name and attribution on knowledge-base entries and internal notes. Other records that hold your data — bookings, uploaded files, contact records, email — are handled by hand as part of the same request, and we tell you what we did with each. For email, that covers the stored copy of each original message, its attachments and the message text in the business’s records; we tell you which of them we deleted and which we kept. The AI summary of a customer’s history that a business’s team sees (Section 8) is built from that customer’s records, including chat, email and past calls. A deletion request does not yet remove it, or the copies and earlier versions of it that we keep.

What we keep, and why: the underlying business record — a note or knowledge-base entry written by a business using JIVIQ is that business’s record, so we strip your personal data and attribution from it rather than delete it. Records that tax, accounting or other law requires us to keep, and anything under a legal hold, stay until that obligation ends. Some entries sit in append-only audit logs kept for integrity; where we can redact the personal data inside one without breaking the log we do, and where we cannot, the entry stays and we tell you.

13. Security

We use encryption in transit (TLS) and at rest, least-privilege access controls, tenant isolation enforced at the database layer, and continuous monitoring. No system is perfectly secure — if we learn of a breach that affects you, we will act as described in Section 14.

14. Data breach notification

If we become aware of a personal-data breach, we will contain and assess it promptly. Where the breach is likely to result in a risk to people’s rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours, and we will notify affected individuals and — where we are your processor — the affected business customers without undue delay so they can meet their own obligations.

15. Your rights

Depending on where you live, you have the right to access, correct, export (port), delete, or restrict your personal data, and to object to certain processing. Most of this can be done directly in the product; for anything else, email support@jiviq.com from your account address and we will respond within 30 days (45 days for requests under the CCPA, where permitted). See our Data & Privacy Requests page for how to submit a request and how we verify identity.

If you are someone else’s customer — for example, you booked an appointment with, chatted with, or emailed a business that uses JIVIQ — that business is the controller of your data. Please send your request to them; if you contact us, we will forward your request to the relevant business and assist them in responding. If you emailed a JIVIQ address that no business uses, write to support@jiviq.com and we will handle your request ourselves.

You also have the right to lodge a complaint with a data-protection authority — in the EU/EEA, the authority in your country of residence, place of work, or where the issue occurred; in the UK, the Information Commissioner’s Office; in India, the Data Protection Board of India. We would welcome the chance to resolve your concern first at support@jiviq.com.

16. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it; to request access to, correction of, or deletion of your personal information; to opt out of the “sale” or “sharing” of personal information; and not to be discriminated against for exercising these rights.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. The categories of personal information we collect, the purposes, and the sub-processors we disclose it to are described in Sections 3, 4, and 10. To exercise a California right, email support@jiviq.com; we will respond within 45 days (an extension may apply for complex requests) and will not discriminate against you for asking. You may use an authorised agent to submit a request on your behalf.

17. India — Digital Personal Data Protection Act, 2023

For individuals in India, you can raise any question or grievance about how we handle your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act) with our Data Protection Officer:

• Data Protection Officer
• Email: support@jiviq.com
• Postal address: C4 602, Edenn Towers CHS, Pune 411057, India

We will acknowledge your grievance within 7 working days and respond within the period required under the Act and its rules. You may withdraw any consent you have given as easily as you gave it (withdrawal does not affect processing already carried out), and you may nominate another individual to exercise your rights in the event of death or incapacity. Please use this mechanism first; if your grievance is not satisfactorily resolved, you may complain to the Data Protection Board of India established under the Act. Where we process the personal data of your customers on your behalf, you are the Data Fiduciary and we act as your Data Processor.

18. Children

JIVIQ is not intended for anyone under 16 (or the minimum age of digital consent in your country, if higher). We do not knowingly collect personal data from children. If you believe a child has given us their data, contact support and we will delete it.

19. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-product notice at least 30 days before they take effect.

20. Contact

This service is operated by Stratus Labs (registered address: C4 602, Edenn Towers CHS, Pune 411057, India), the data controller / Data Fiduciary responsible for your personal data where we act as a controller.

Questions, requests, or complaints: support@jiviq.com.