Privacy Policy

This policy explains how Slyko Technologies Private Limited(“we”, “us”) — the Data Fiduciary for Levrij— collects and processes your personal data, in line with India's Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000. We process your data on the lawful bases of your consent and the legitimate uses permitted under the DPDP Act.

1. What we collect, why, and how long we keep it

We collect only what each purpose needs. For every category we list the data, the specific purpose it is used for, and how long we retain it.

• Account data — name, email, phone number, profile details. Purpose: create and operate your account, sign you in, and show your storefront. Retention: while your account is active; deleted within 90 days of account closure unless a legal obligation requires longer.
• Booking & scheduling data — sessions/courses booked or sold, times, time zone, meeting links, and any message added at checkout. Purpose: deliver the booking, sync calendars, and send confirmations and reminders. Retention: up to 8 years, to meet tax, accounting, and dispute-record obligations.
• Payment data — transaction metadata (amount, status, method) from our payment gateway; we never store full card numbers. Purpose: take payment, issue receipts/invoices, and process refunds. Retention: up to 8 years for financial-record and tax obligations.
• Payout data (Creators) — bank/UPI settlement details, stored encrypted at rest. Purpose: settle your earnings and generate statements. Retention: while you sell on Levrij, then up to 8 years for financial records.
• Usage & device data — device, browser, and product-analytics events. Purpose: keep the service secure and improve it. Retention: up to 24 months, after which it is aggregated or anonymised.
• Support communications — emails and messages you send us. Purpose: respond to and resolve your request. Retention: up to 3 years from resolution.

2. Third parties we share data with

We share personal data only with the processors needed to run Levrij, each bound to use it solely for the service they provide. We do not sell your personal data.

• Cashfree Payments / Razorpay (payment gateways) — name, email, phone, and transaction details, to process payments and refunds.
• Supabase (authentication, database, file storage) — account and service data, to host the platform.
• Resend (email delivery) — name and email, to send transactional emails.
• Meta Platforms — WhatsApp Cloud API (messaging) — name and phone number, to send booking notifications where enabled.
• Google Calendar API (only if you connect it) — booking times and event details, to sync your calendar.
• PostHog (product analytics) — usage/device events, to improve the product.
• Sentry (error monitoring) — technical diagnostics, to detect and fix faults.
• Vercel (hosting/CDN) — technical request data, to serve the platform.

Between a Creator and their Client, the booking details needed to deliver the session are shared. We may also disclose data where required by law or to prevent fraud or harm.

3. Data security

We use industry-standard safeguards, including encryption in transit and at rest for sensitive fields (such as payout account numbers and calendar tokens) and access controls. No method is fully secure, but we work to protect your data and will notify you and the Data Protection Board of a personal-data breach as required by law.

4. Your rights and how to exercise them

As a Data Principal under the DPDP Act you have the rights below. To exercise any of them, email support@uselevrij.com (see the Grievance Officer in section 6). We respond to every request within 90 days.

• Right to access — a summary of the personal data we hold about you and how we process it. How: email the Grievance Officer.
• Right to correction — fix inaccurate or incomplete data. How: edit it in Dashboard → Settings, or email the Grievance Officer.
• Right to erasure — delete your account and associated data (subject to legal retention). How: Dashboard → Settings → Delete account, or email the Grievance Officer.
• Right to withdraw consent — as easy to withdraw as to give. How: email the Grievance Officer (this does not undo processing already carried out).
• Right to grievance redressal — have a complaint about our data handling addressed. How: contact the Grievance Officer (section 6).
• Right to nominate — nominate another person to exercise your rights if you die or become incapacitated. How:email the Grievance Officer with your nominee's details.

5. Cookies

Essential cookies(for signing in and remembering your preferences) are always on — the service can't work without them. Analytics cookies (PostHog, to understand usage and improve the product) are non-essential and run only if you accept them in our cookie banner. You can decline — the site works fully either way — and change your choice anytime via the “Cookie preferences” link in the footer, or through your browser settings.

6. Grievance Officer

In line with the DPDP Act and the IT Act, our Grievance Officer handles privacy questions, data-principal rights requests, and complaints:

• Grievance Officer, Slyko Technologies Private Limited
• Email: support@uselevrij.com
• Address: 410, Block 4, GK's Pride, Yapral, Sainikpuri, Hyderabad, Telangana 500087

We acknowledge grievances promptly and aim to resolve them within 90 days of receipt.

7. Complaints to the Data Protection Board

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India, established under the DPDP Act, 2023, through its official channel. We ask that you contact our Grievance Officer first so we can try to resolve the matter.

8. Children and persons with disabilities

Levrij is intended for users aged 18 and over. It is not directed at children, and we do not knowingly collect or process the personal data of anyone under 18. We block under-18 use rather than seeking verifiable parental consent; if we become aware that we hold data belonging to a person under 18, we will delete it.

Where a user is a person with a disability who has a lawful guardian appointed under law, consent must be given by that lawful guardian on their behalf, as required by the DPDP Act. If you are a lawful guardian acting for such a person, or need help exercising these rights on their behalf, contact our Grievance Officer at support@uselevrij.com.

9. Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.