Privacy Policy

1. Introduction

1.1 Who we are. This Privacy Policy describes how Amigzo, Inc. ("Amigzo", "we", "our") collects, uses, and shares personal data in connection with our website, apps, and services (together, the "Platform").

1.2 Who this covers. This notice applies to Seekers, Guides, visitors who browse the Platform, and people who participate in our community (Doubt Board, events, blog comments). It doesn't cover data you share directly with a Guide during a session that we don't process (e.g., what you tell them verbally on a call).

1.3 Plain English. We've tried to make this notice readable. Where a legal term has a specific meaning under Indian law or other applicable law, that law controls.

2. What we collect

2.1 Account information. Name, email, phone number, password (hashed), profile photo, and any preferences you set.

2.2 Profile information (Guides). The role, employer, work history and any professional profile links (such as LinkedIn) you choose to publish on your Guide profile. This information is provided by you and shown as you provide it; we do not collect employment documents to list you as a Guide.

2.3 Session metadata. Booking timestamp, Guide/Seeker IDs, format (live/scheduled/async), duration, format-specific data (e.g., resume files you upload for a review). Metadata about the session - not the content of the session itself.

2.4 Payment information. Wallet top-up and withdrawal records, transaction IDs, and limited card or UPI metadata. Card numbers are handled by our PCI-compliant payment partner; we don't store them.

2.5 Community content. Your public profile fields (if a Guide), Doubt Board posts, ratings and reviews you leave, comments on the blog or events.

2.6 Device and log data. IP address, browser and device type, operating system, referring pages, timestamps, and cookies/similar technologies.

3. How we use it

3.1 Run the Platform. Match Seekers to Guides, connect calls, bill sessions, pay Guides, surface profiles, power the Doubt Board.

3.2 Trust & safety. Maintain ratings and badges tied to completed sessions, prevent fraud, investigate reports of abuse or misrepresentation, enforce our Terms, and cooperate with lawful requests.

3.3 Communicate with you. Transactional emails (bookings, payouts, receipts), product updates you've opted into, and customer support.

3.4 Improve the product. Aggregate analytics on which features get used, where users drop off, which domains are underserved. Individual session content is not used to train any model.

3.5 Legal and regulatory compliance. Tax obligations (including TDS), responding to lawful legal process, and defending claims.

4. Sessions: privacy defaults

Session privacy is the part we take most seriously. The default rules:

• Sessions are not recorded, transcribed, or indexed. Amigzo does not capture, store, or search the content of live sessions.
• No public Seeker profile. Seekers don't have a public profile. Your ratings and reviews are attributed only by first name + initial unless you choose otherwise.
• No employer notification. We do not notify, nor disclose to, any Guide's or Seeker's current employer about their use of the Platform.

5. Sources of data

We collect data (a) directly from you when you create an account, book a session, or post publicly; (b) automatically from your device when you interact with the Platform; (c) from payment processors for transaction records; and (d) occasionally from public sources (e.g., LinkedIn handles you share).

6. Who sees what

6.1 The other party in a session. Seekers see a Guide's public profile and any context the Seeker sends ahead (resume, JD, question). Guides see a Seeker's first name, the session context the Seeker provides, and session billing status.

6.2 Publicly. A Guide's public profile, Doubt Board answers (which can be shown publicly), and any blog/event comments you make.

6.3 Service providers. We share data with vendors that help us run the Platform - payments, infrastructure hosting, email delivery, analytics, video/audio transport - under written data-protection obligations, limited to what each vendor needs.

6.4 Legal authorities. Only when required by valid legal process, to protect rights and safety, or to comply with applicable law. We aim to notify you of law-enforcement requests unless we're prohibited from doing so.

6.5 Corporate transactions. If Amigzo is involved in a merger, acquisition, or sale of assets, your data may be transferred. We'd notify you before any such transfer becomes subject to a different privacy notice.

7. Your rights

Subject to applicable law, you have the right to:

• Access - request a copy of the personal data we hold about you.
• Correct - ask us to fix data that is inaccurate or incomplete.
• Delete - ask us to erase your data, subject to our retention obligations under law or for fraud prevention.
• Export - receive your data in a portable format.
• Object or restrict - object to certain uses (e.g., marketing) or ask us to restrict processing.
• Withdraw consent - where processing is based on consent, withdraw it at any time.

Exercise any of these by emailing team@amigzo.com. We respond within 30 days for most requests; we may ask you to verify your identity before we act.

8. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember preferences, understand product usage, and measure marketing performance. You can manage cookies through your browser settings. Blocking essential cookies may break parts of the Platform.

9. Security and retention

9.1 Security. We use encryption in transit (TLS) and at rest, hashed passwords, role-based access controls, audit logging, and a documented incident-response process. No system is perfectly secure; if we learn of a breach affecting your data, we'll notify you and relevant authorities as required by law.

9.2 Retention. We keep personal data only for as long as we need it to provide the Platform and meet legal obligations - account data for the life of your account plus a reasonable window after closure, payment records for the period required by tax law (typically 8 years in India), and session metadata long enough to resolve disputes (typically 2 years).

10. International transfers

Your personal data is primarily stored and processed in India. Some of our service providers (for example, email delivery or analytics) may process data in other countries; when they do, we require appropriate safeguards under applicable law (standard contractual clauses or equivalents).

11. Changes to this notice

We may update this Privacy Policy as the Platform evolves. For material changes, we'll notify registered users by email or in-app at least 14 days before the change takes effect. The "Effective" date at the top tells you when the current version took effect.

12. Contact

Privacy questions or requests: team@amigzo.com. Or write to Amigzo, Inc., Bengaluru, Karnataka, India. Our Data Protection Officer can be reached at the same email address.

13. Regional supplements

13.1 India. Amigzo complies with the Digital Personal Data Protection Act, 2023 (DPDPA) and related rules. You can exercise DPDPA rights via team@amigzo.com; you also have the right to raise complaints with the Data Protection Board of India.

13.2 European Economic Area & UK. For users in the EEA, Switzerland, or the UK, our lawful bases for processing are contract performance, legitimate interests, consent (where applicable), and legal obligation. You have the right to lodge a complaint with your supervisory authority.

13.3 Other regions. If local law grants you additional rights (e.g., California CCPA/CPRA, Brazil LGPD, Canada PIPEDA, Australia Privacy Act), we honour them to the extent applicable. Contact team@amigzo.com for specifics.