Privacy Policy

1.1 Information You Provide

• Account Data: Name, email address, phone number, organization name, and password when you register.
• Profile Data: Business description, brand details, logo, and avatar you upload.
• Content Data: Marketing content, images, documents, and other files you create or upload through the Service.
• Payment Data: Billing information processed through our payment partner Razorpay. We do not store your full card details.
• Communication Data: Messages, feedback, and support requests you send to us.

1.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, actions taken, timestamps, and session duration.
• Device Data: Browser type, operating system, IP address, and device identifiers.
• Cookies & Similar Technologies: See Section 8 below.

1.3 Information from Third Parties

• Social Accounts: When you connect Facebook, Instagram, LinkedIn, or other social platforms, we receive profile information and page/account access tokens as authorized by you.
• Lead Data: Information received through Facebook Lead Ads webhooks or CRM integrations you configure.

Under the DPDP Act, 2023, we process your personal data for the following lawful purposes:

• Contract Performance: To provide, maintain, and improve the Service you subscribed to.
• Consent: Where you have given explicit consent (e.g., connecting social accounts, enabling AI features).
• Legitimate Use: For analytics, security, fraud prevention, and enforcing our terms.
• Legal Obligation: To comply with applicable laws, regulations, and government requests.

• Provide, personalize, and improve the Service.
• Generate AI-powered marketing content, strategies, and analytics on your behalf.
• Process payments and manage subscriptions.
• Send transactional emails (account verification, password resets, billing receipts).
• Publish content to connected social media accounts as instructed by you.
• Provide customer support and respond to inquiries.
• Monitor usage patterns to improve performance and detect abuse.
• Comply with legal obligations.

We do not sell your personal data. We may share data with:

• Service Providers: Cloud hosting (server infrastructure), payment processing (Razorpay), email delivery, and AI model providers — strictly for operating the Service under contractual safeguards.
• Social Media Platforms: When you authorize publishing or lead sync (e.g., Facebook/Meta).
• Within Your Organization: Other members of your Automagic organization can access shared content, CRM data, and project information as per their assigned roles.
• Legal Requirements: When required by law, regulation, court order, or governmental authority in India.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.

Your data is stored on secure servers. We implement reasonable security practices and procedures as required under the SPDI Rules, 2011, including:

• Encryption of data in transit (TLS/SSL) and sensitive data at rest (including social access tokens).
• Access controls and role-based permissions.
• Regular security audits and vulnerability assessments.
• Secure password hashing (bcrypt).
• CSRF protection and rate limiting on all endpoints.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your account credentials confidential.

• Account Data: Retained as long as your account is active. Upon deletion request, data is removed within 90 days except where retention is required by law.
• Content & Files: Retained until you delete them or close your account.
• Usage Logs: Retained for up to 12 months for analytics and security purposes.
• Payment Records: Retained as required under applicable tax and financial regulations.

Under the DPDP Act, 2023 and applicable Indian law, you have the right to:

• Access: Request a summary of your personal data we hold.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements. See our Data Deletion instructions.
• Withdraw Consent: Withdraw previously given consent at any time. This will not affect the lawfulness of processing before withdrawal.
• Nominate: Nominate another person to exercise your rights in case of death or incapacity, as provided under the DPDP Act.
• Grievance Redressal: Lodge a complaint with our Grievance Officer or the Data Protection Board of India.

To exercise any of these rights, contact us at the details in Section 10.

We use cookies and similar technologies for:

• Essential Cookies: Session management, authentication, and CSRF protection. These are strictly necessary and cannot be disabled.
• Analytics Cookies: To understand how users interact with the Service and improve performance.
• Preference Cookies: To remember your settings (e.g., dark mode, language).

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Service functionality.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly, in compliance with the DPDP Act's provisions on children's data.

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of our Grievance Officer are:

• Name: Svayou Privacy Team
• Email: privacy@svayou.com
• Response Time: We will acknowledge your grievance within 48 hours and resolve it within 30 days.

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we will provide additional notice via email or an in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

• Email: support@svayou.com
• Website: automagic.svayou.ai