1. Introduction
ChiyaIO ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our professional appointment booking platform or visit our website.
Core Privacy Promise: Your personal contact information is protected through our secure booking system. Service providers control what information is displayed publicly on their profiles, and all appointment communications are facilitated through our secure platform.
2. Information We Collect
2.1 Account Information
We collect information that you provide when you:
- Register as a customer or service provider on ChiyaIO
- Create or update your service provider profile
- Book appointments with service providers
- Subscribe to premium plans (for service providers)
- Contact customer support
- Customize your profile settings and availability
For Customers:
- Full name
- Mobile number and email address
- Booking preferences and history
- Payment information for booking fees
- Communication preferences
For Service Providers:
- Full name and professional details
- Business/practice information
- Service categories (doctor, dentist, lawyer, consultant, therapist, salon, spa, fitness, education, etc.)
- Professional credentials and certifications
- Contact information and business address
- Service descriptions, pricing, and availability
- Profile photos and business images
- Payment information for subscription plans
- QR code customization preferences
2.2 Automatically Collected Information
When you use ChiyaIO, we automatically collect:
- IP address and general location data
- Browser type and device information
- Platform usage patterns and features accessed
- Appointment booking timestamps and frequency
- Profile view statistics (for service providers)
- Search queries and service browsing behavior
- Pages viewed and navigation behavior
- Cookies and session identifiers
2.3 Booking and Profile Usage Data
When customers book appointments or view service provider profiles, we collect:
- Appointment booking timestamps and details
- Service provider profile views and interactions
- QR code scans from business locations or Google Business profiles
- Customer search preferences and service interests
- Communication between customers and service providers (for support purposes)
- Booking confirmation and attendance status
- Review and rating submissions
For QR Code Scans:
- Scan timestamp and frequency
- Scanner's general location (city-level only, for analytics)
- Profile view duration and actions taken
- Booking attempts and completions
Important: We do NOT collect or store scanner's personal information unless they choose to create an account or book an appointment.
3. How We Use Your Information
We use collected information for:
- Service Delivery: Facilitate appointment bookings, manage service provider profiles, process booking confirmations
- Account Management: Maintain customer and service provider accounts, process subscription plans, manage bookings
- Profile Creation: Generate service provider profiles with shareable links and QR codes for business use
- Communication: Send booking confirmations, appointment reminders, and facilitate customer-provider communication
- Payment Processing: Process booking convenience fees and subscription payments securely
- Quality Assurance: Monitor service quality through reviews, ratings, and feedback systems
- Support: Respond to customer and service provider queries, resolve booking issues
- Analytics: Understand booking patterns, improve matching algorithms, enhance user experience
- Marketing: Send service updates, promotional offers, and relevant service recommendations (opt-out available)
- Legal Compliance: Meet regulatory requirements, prevent fraudulent bookings, maintain professional standards
- Business Intelligence: Help service providers understand their booking patterns and customer demographics
4. Information Sharing and Disclosure
4.1 We Do Not Sell Your Information
We never sell, rent, or trade your personal information to third parties.
4.2 Service Providers
We may share limited information with trusted third-party service providers:
- Payment Gateway: For processing booking fees and subscription payments (Razorpay, Stripe, PayPal, etc.)
- SMS/Email Providers: For sending booking confirmations, appointment reminders, and OTP verification
- Cloud Hosting: For secure data storage, profile hosting, and QR code generation (AWS, Azure, Google Cloud, etc.)
- Analytics: For understanding booking patterns and platform usage (Google Analytics, etc.)
- Communication Services: For facilitating customer-service provider communication (WhatsApp Business API, email services)
- Map Services: For location-based service provider searches and directions
- Notification Services: For push notifications and appointment reminders
These providers are contractually obligated to protect your information and use it only for specified purposes. We never share personal contact details with analytics or marketing services without explicit consent.
4.3 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes or government requests
- Protect our rights and property
- Prevent fraud or security threats
- Protect safety of users or public
4.4 Business Transfers
In case of merger, acquisition, or asset sale, your information may be transferred. We will notify you of any such change.
5. Data Security
We implement robust security measures to protect your information:
- SSL/TLS encryption for data transmission
- Secure data storage with encryption at rest
- Regular security audits and updates
- Access controls and authentication
- Employee training on data protection
- Secure backup systems
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information for:
- Active Accounts: As long as your customer or service provider account remains active
- Deleted Accounts: 30 days after account deletion (for recovery purposes and to handle any pending bookings)
- Booking History: 3 years for both customers and service providers (for dispute resolution and tax compliance)
- Profile Analytics: 90 days for service provider analytics, then anonymized or deleted
- Subscription History: 7 years for financial compliance and tax records (service providers)
- Support Communications: 2 years for quality assurance and legal compliance
- Review and Ratings: Retained as long as service provider account is active (anonymized if customer deletes account)
- Legal Requirements: As required by applicable Indian laws and professional regulations
After account deletion, service provider profiles and QR codes are immediately deactivated, and all personal data is permanently deleted within 30 days. Booking history may be retained in anonymized form for legal and tax compliance.
7. Your Privacy Rights
You have complete control over your data:
- Access: View all your profile information, booking history, and account activity from your dashboard
- Correction: Update personal details, service information, availability, and preferences anytime
- Deletion: Delete your account and all data from Settings → Account → Delete Account
- Export: Download your data including profile info, booking history, and customer interactions
- Profile Control: Service providers can control what information is publicly visible on their profiles
- Communication Preferences: Choose how and when you want to be contacted
- Booking Privacy: Customers can control what information is shared with service providers
- QR Code Management: Service providers can disable or customize their QR codes anytime
- Opt-Out: Unsubscribe from promotional communications (booking-related notifications will continue)
- Review Management: Control and respond to customer reviews on your profile
To exercise these rights or for privacy concerns, contact our support team through your dashboard, email, or WhatsApp.
8. Cookies and Tracking Technologies
8.1 Types of Cookies We Use
- Essential Cookies: Required for login, session management, and core functionality
- Analytics Cookies: Help us understand feature usage and improve the service
- Preference Cookies: Remember your dashboard settings and preferences
- Security Cookies: Detect suspicious activity and prevent fraud
8.2 Managing Cookies
You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features like login and dashboard access.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect information from children. If you believe we have collected such information, contact us immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
12. Profile and QR Code Privacy Protection
How we protect privacy for service provider profiles and QR codes:
- Controlled Information Display: Service providers control what information appears on their public profiles
- Professional Contact: Contact requests are facilitated through our platform with proper context
- Booking Security: All appointment bookings go through our secure system with confirmation fees
- Spam Prevention: We monitor for suspicious booking patterns and block abusive users
- Profile Control: Service providers can disable their profiles and QR codes anytime
- Customer Privacy: Customer personal details are protected and not shared unnecessarily with service providers
- Review Moderation: Reviews are moderated to prevent false or malicious content
- Business Integration: QR codes work seamlessly with Google Business profiles while maintaining privacy
13. Updates to Privacy Policy
We may update this policy periodically. Significant changes will be communicated via:
- Email notification to registered users
- Prominent notice on our website
- Updated "Last Updated" date
Continued use after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions or to exercise your rights:
- Dashboard: Settings → Support → Privacy Inquiry
- Email: Use the contact form or registered email
- WhatsApp: Contact via business number for urgent privacy concerns
- Phone: Call during business hours for immediate assistance
Data Protection Officer: For serious privacy concerns, you can request to speak with our Data Protection Officer.
15. Compliance
We comply with applicable data protection laws including:
- Information Technology Act, 2000 (India) and related rules
- Personal Data Protection Bill (when enacted)
- GDPR principles for international best practices
- Healthcare data protection standards for medical service providers
- Professional service regulations for legal, medical, and other licensed professionals
- Payment industry standards (PCI DSS) for secure payment processing
- Industry standards for data security and privacy
We regularly review and update our privacy practices to ensure compliance with evolving regulations and professional standards across all service categories.