Privacy Policy for HaritVerse

1. Scope

HaritVerse ("HaritVerse," "we," "our," "us") provides plant care, booking, consultation, and related services through our mobile and web experiences and supporting services.

This Privacy Policy applies to personal information processed through:

• The HaritVerse iOS and Android applications
• The HaritVerse website and web interfaces
• Backend services and cloud functions used by the apps and website
• Customer, provider, and expert workflows available in the app and website

If you do not agree with this Privacy Policy, please do not use the app or website.

2. Information We Collect

2.1 Information You Provide

• Name
• Email address
• Phone number
• Address and detailed address
• Profile image or photos you upload
• Content submitted in forms, chat, support, and onboarding flows

2.2 Account and Identity Data

• Account identifiers (for example Firebase Authentication UID, customer/provider IDs)
• Role and status metadata (customer, service provider, expert, admin)

2.3 Location Data

• Approximate and/or precise location, if enabled by you
• Latitude/longitude and geolocation data used for booking, map display, and provider matching

2.4 Booking and Service Data

• Booking details (service type, schedule, address, assigned provider)
• Service history, status updates, and related records
• Ratings/reviews and support context

2.5 Payment Data

• Payment/order identifiers, transaction amount, status, and refund metadata
• Payment processing metadata from integrated payment providers

We do not store full card numbers or CVV in our app backend.

2.6 KYC/Verification Data (when applicable)

• Identity verification documents (for example ID front/back, address proof, selfie)
• Verification status and associated review metadata

2.7 Communication Data

• In-app messages and message metadata (sender/receiver IDs, timestamps)
• Notification content and read/archive status

2.8 Device and Technical Data

• App diagnostics, crash and performance signals, and operational logs needed to secure and maintain the service

3. How We Use Your Information

We use information to:

• Create and manage accounts
• Authenticate users and protect account security
• Enable bookings, subscriptions, and service fulfillment
• Match customers with service providers/experts
• Provide chat, notifications, and reminders
• Process and reconcile payments and refunds
• Verify provider/expert identity and reduce fraud
• Improve service quality, reliability, and safety
• Comply with legal obligations

4. Legal Bases (where required by law)

Depending on your location, we process personal information under one or more legal bases:

• Your consent
• Performance of a contract with you
• Compliance with legal obligations
• Legitimate interests (for example fraud prevention, service security, and product improvement)

For users in India, we process personal data in line with the Digital Personal Data Protection Act, 2023 and applicable rules, including processing based on consent and other permitted lawful uses where applicable.

5. Permissions and Device/Browser Access

Depending on features you use, our apps or website may request access to:

• Location
• Camera
• Microphone
• Photos/media/storage
• Notifications
• Network/device connectivity

You can manage permissions in your device or browser settings. If you deny certain permissions, some features may not function.

6. How We Share Information

We may share personal information:

• With service providers/experts and customers as needed to complete requested services
• With vendors/processors that provide infrastructure and app services
• With payment processors for transaction handling
• With communication and notification providers
• With legal authorities where required by law

We do not sell your personal information.

7. Third-Party Services

The app uses third-party services that may process information under their own terms and policies, including:

• Google Firebase services (Authentication, Firestore, Cloud Functions, Cloud Storage, Cloud Messaging, and related tooling): https://firebase.google.com/support/privacy
• Google Maps related services: https://policies.google.com/privacy
• Razorpay (payments): https://razorpay.com/privacy/
• Agora (video/call services, where enabled): https://www.agora.io/en/privacy-policy/

Please review each provider's privacy terms for details of their processing.

8. Data Retention

We retain personal information for as long as necessary for:

• Account operation and service delivery
• Payment, audit, and compliance obligations
• Security and fraud prevention
• Dispute handling and legal requirements

Typical retention approach:

• Account/profile records: retained while account is active and for a reasonable post-deletion period required for legal/security purposes
• Booking/service records: retained for operational history, customer support, and compliance
• Payment records: retained for tax, audit, chargeback/refund, and financial compliance obligations
• KYC/verification records: retained for onboarding integrity, fraud controls, and legal compliance where required
• Support/chat and notification logs: retained for service quality, dispute handling, and security monitoring

Retention periods may vary by applicable law and contractual obligations.

9. Data Security

We apply reasonable technical and organizational safeguards designed to protect personal information, including access control and secure cloud infrastructure practices.

No method of storage or transmission is completely secure. We cannot guarantee absolute security.

10. Cookies and Tracking Technologies

We use cookies and similar technologies on our website and web-based experiences to support essential functionality, remember preferences, understand usage, and improve service quality.

• Essential cookies: Required for secure login, core functionality, and fraud/security controls
• Analytics cookies: Help us understand usage trends and improve product performance
• Functional cookies: Remember settings and preferences
• Marketing cookies: Used for campaign measurement and relevant promotions (where enabled)

You can manage cookie preferences through our cookie consent controls and your browser settings. Disabling certain cookies may affect some features.

11. Google Play Data Safety

For Google Play Data Safety disclosures, HaritVerse may collect and process data categories such as personal identifiers, contact details, approximate/precise location (when enabled), booking/service history, app activity, app diagnostics, and in-app communications to provide and secure the service.

Data may be shared with service providers/processors (for example hosting, communications, analytics, and payment processing) only as needed to operate app features. We do not sell personal information.

We are designed to use secure transport (such as HTTPS/TLS) in production for data transmitted between app clients and our services. Users can request account deletion and data deletion as described in this policy.

If app features or data practices change, our Google Play Data Safety form and this Privacy Policy will be updated accordingly.

12. Your Rights and Choices

Subject to applicable law, you may request:

• Access to personal information
• Correction of inaccurate information
• Deletion of personal information
• Restriction or objection to certain processing
• Data portability where applicable
• Withdrawal of consent where processing is based on consent

We aim to acknowledge privacy requests within 7 business days and resolve valid requests within 30 days, subject to applicable law.

If you believe your request was not handled appropriately, you may have the right to complain to your local data protection or privacy regulator.

13. Additional India-Specific Disclosures

If you are located in India, you may have rights under applicable law to:

• Request information about personal data processing activities
• Request correction, update, or erasure of data
• Seek grievance redressal for privacy concerns
• Nominate another person to exercise certain rights on your behalf, where applicable under law

Where processing is based on consent, you can withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully before the withdrawal request.

14. Account Deletion

You may request account deletion by:

• Using the in-app account deletion option, or
• Contacting us from your registered email/phone through support

For complete deletion workflow details, visit our Account Deletion Policy. For in-app deletion actions, visit Account Settings.

When a valid deletion request is received, we will delete or de-identify data unless retention is required for legal, security, fraud prevention, payment reconciliation, or dispute-resolution reasons. We aim to process valid deletion requests within 30 days.

15. Children's Privacy

The app is not directed to children under 13 (or higher minimum age where required by local law). We do not knowingly collect personal information from children without required authorization.

If you believe a child has submitted personal information, contact us to request deletion.

16. International Data Transfers

Your information may be processed or stored in countries other than your own through our service providers. Where required, we apply safeguards for cross-border data transfers and follow applicable legal requirements in relevant jurisdictions, including India.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date when changes are published.

Material updates may also be communicated through app or website notices where appropriate.

18. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, contact us:

Grievance contact: Privacy Grievance Officer (help@haritverse.com). Expected resolution timeframe: Up to 90 days.

By using the app, you acknowledge that you have read and understood this Privacy Policy.