Privacy Policy

Last Updated: 2026-10-19  ·  Version: 2026-10-02

1. Who we are and what this policy covers

SURENDRA PRASAD GARIKIPATI ("Informay", "we", "us") runs informay.com. For the personal data described in this policy we decide why and how it is used, so we are the "data fiduciary" under India's Digital Personal Data Protection Act, 2023. This policy is our notice to you about what we collect, why, and the choices and rights you have. It applies to business owners who create pages and to visitors who use the Platform.

2. Personal data we collect

When you register and manage a business page

• Email address and mobile number, and the one-time codes (OTPs) we use to verify them.
• Business details: business name, category, address, area, pincode and city, services and prices, descriptions, opening hours, website and social links, YouTube video links, and photos you upload (cover and service photos).
• Your answers so far, if you start registration and do not finish. We keep this progress, linked to your verified email, so you can continue later. It is deleted when you finish or after 30 days.
• A record of your agreement: the time, the version of our terms you saw, the exact wording, your IP address and browser details, and whether you chose promotional messages.

If you choose identity verification (optional)

• When you verify as an owner through DigiLocker, you give consent on DigiLocker's own screen. We keep only the result: that you were verified, the name on record, the last digits of a masked identifier, a DigiLocker reference, and the date. We do not keep your full Aadhaar number, date of birth, address, photograph or documents for this owner verification.
• This information is used inside Informay to check ownership. It is not shown on your public page.

From visitors and customers

• Enquiries, bookings or orders sent through a business page (name, phone, email, message), which we pass to that business.
• Reviews and ratings (your name is shown with your review).
• Contact form messages sent to us.

Payments

• Payments are made on a secure payment page run by our payment gateway, PayU. We receive payment status, plan and reference IDs. We do not receive or store your card, UPI or bank credentials.

Technical and usage data

• IP address, device and browser information, pages viewed, click-to-call, click-to-email and WhatsApp interactions, QR code use, and server logs. We also keep logs of WhatsApp, SMS and email messages we send.

3. Why we use your data

• To create, show, secure and support your business page and account, and to verify your email and mobile number.
• To send service messages: verification codes, your page link, customer enquiries, billing and account notices (see section 6).
• To draft your About Us and service text with AI (see section 7).
• To show reviews and listings, and to give business owners analytics about visits and interactions.
• To process payments and keep accounting records.
• To prevent fraud, fake listings and abuse, to keep records of your agreement, and to meet legal obligations.
• To improve the Platform and, if you opted in, to send you promotional messages.

4. What is public

A business page is meant to be seen by everyone. Your business name, category, address, phone number, hours, services, prices, photos, links and videos can be seen by anyone and can appear in search engines and when the page link is shared. Please do not put personal information on your page that you do not want to be public. Your email address, OTPs and identity verification details are not shown on your page.

5. Who we share data with

We do not sell your personal data. We share it only as needed:

• With business owners, when you send an enquiry or post a review.
• With service providers who work for us under contract: hosting and storage, email, SMS and WhatsApp message providers, payment processing (our payment gateway, PayU), analytics and advertising partners (such as Google Analytics and AdSense), maps and video embeds (Google Maps, YouTube), identity verification (DigiLocker), and AI providers (section 7).
• With courts, regulators or law enforcement when the law requires, or to protect our rights, users or the Platform.
• With a buyer or successor if our business is transferred, on terms that protect your data.

6. WhatsApp, SMS and email messages

• Service messages (codes, your page link, enquiries, account and billing notices) are part of the service. You agree to receive them when you accept our Terms at registration.
• Promotional messages (tips, offers, product news) are sent only if you tick the optional box. They are never pre-ticked. You can withdraw at any time using the unsubscribe link, by replying STOP where offered, or by contacting us.

7. AI processing

To draft your About Us text and service descriptions we send the details you entered (business name, category, location, your summary, services and prices) to an AI service provider (currently OpenAI). The provider processes this to produce the text, under its own terms. Please do not type confidential information or other people's personal data into those fields. AI drafts can be wrong, so please review and edit them.

8. Transfers outside India

Some of our providers, including AI, email and analytics providers, may process data on servers outside India. We use such providers only as permitted by Indian law and ask them to protect the data.

9. How long we keep data

• Account and business page data: while your account is active and for as long as needed afterwards for legal, tax, accounting and dispute purposes.
• Unfinished registration progress: deleted when you finish, or after 30 days.
• OTPs: kept only briefly for verification and security.
• Records of your agreement and message logs: kept for as long as needed to show what you agreed to and to deal with complaints or legal claims.
• When you delete your account or ask us to erase data, we delete or anonymise it unless the law requires us to keep it. Backups are removed on their normal cycle.

10. Security

We use reasonable security safeguards, including access controls and encrypted connections. No system is completely secure. If a personal data breach affects you we will tell you and the authorities as the law requires.

11. Your rights and choices

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct, complete or update your data (you can edit most of it yourself in your dashboard);
• ask us to erase your data, subject to what we must keep by law;
• withdraw your consent at any time. Withdrawing is as easy as giving it, does not affect what we did before, and may mean we can no longer provide parts of the service;
• complain to us about how your data is handled (see our Grievance Officer below), and if you are not satisfied, to the Data Protection Board of India once it is functioning;
• nominate another person to exercise these rights if you die or cannot act for yourself.

To use a right, contact our Grievance Officer. We may need to confirm who you are first.

12. Children

The Platform is for people aged 18 and over. We do not knowingly collect personal data from children. If you think a child has given us data, contact us and we will delete it.

13. Cookies and tracking

We use cookies and similar technologies to run the site, keep you signed in, understand usage and show ads.

• Strictly necessary cookies: required for core functions and security.
• Analytics: we may use tools such as Google Analytics to learn how the site is used (pages visited, approximate location, device and browser).
• Advertising: we may show ads through Google AdSense. Google and its partners may use cookies or device identifiers to serve and measure ads, limit how often you see them, and personalise ads where the law and your choices allow. See how Google uses data for advertising and manage Google Ads Settings. You can also control cookies in your browser.

More detail is in our Cookie Policy.

14. Changes to this policy

We may update this policy. The version and date at the top show the current text. For material changes we will notify you or ask you to agree again.

15. Contact and Grievance Officer

For privacy questions, to use your rights, or to complain:

SURENDRA PRASAD GARIKIPATI
Phone: +91 97015 47708
Registered address: Flat No 107, Block No 3, Floor 1, Navayuga Estates, Near Rainbow School, Nava Nagar, Ameenpur, Hyderabad, Telangana, India, 502032