Legal

Privacy Policy

Last updated: 25 August 2026

This policy explains what personal data LivZio collects when you use livzio.in, why we collect it, who else sees it, how long we keep it, and what you can require us to do about it. It is written to meet our obligations as a Data Fiduciary under the Digital Personal Data Protection Act, 2023, and as an intermediary under the Information Technology Act, 2000.

In short

  • Reviews are public. Your name and the apartment you name appear on them, and there is no anonymous option for signed-in users today.
  • Your LivTrack projects, saved quotes and uploaded files are private to your account. Our staff cannot read them.
  • Quotation documents you upload for analysis are sent to Anthropic to be processed. Do not upload anything you would not want processed by a third party.
  • We do not sell your data, and we do not share it with designers.
  • You can ask us for a copy of your data, ask us to correct it, or ask us to delete it.
  • Complaints go to our Grievance Officer, named at the bottom of this page.

This summary is for convenience only. The full sections below are what apply.

1.Who we are

LivZio is operated by LivZio (sole proprietorship), at Tower 3, 621, S&P Courtyard, Kamarajar Street, Kil Ayanambakkam, Chennai 600095, Tamil Nadu, India. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described in this policy — we decide why and how it is processed. Our Grievance Officer, whose details appear at the end of this policy, handles both data-protection requests under the DPDP Act and grievances under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

2.What we collect

We collect the following, and nothing is collected by us that is not described here. Account and profile — when you sign up and complete your profile: • Your name • Your email address, if you sign in with Google or an email link • Your mobile number, if you sign in by OTP. To be exact: your number is used to send the code, and it is also stored on your profile record. An earlier version of our sign-in screen suggested it was used for verification only; that was inaccurate and has been corrected. • Your city, and the apartment or society name, tower and unit number you enter • A plan label (free, pro or enterprise) which only we can set Reviews you submit: • The designer, city, locality and apartment the review concerns • Project type, budget range, ratings, whether the project was delayed and by how long • Your written account of the project • Files you attach — invoices, contracts, site photographs, screenshots • The display name shown as the author Discussion posts — the title and body of threads and replies, and the display name shown as the author. LivTrack, if you use it — project name, apartment, unit, city, designer, budget, amounts paid, dates, milestones, payment schedule, materials, daily site logs and photographs, files you upload as evidence, and the names, phone numbers, email addresses and company details of people you add as project contacts. Quote analyser, if you use it — the quotation or bill of materials file you upload, and the project type and city you select. Where you save an analysis, the analysis and the original file name are stored on your account. Contacting us — your name, email, subject and message. Automatically — pages visited and the full page address including any query parameters, approximate location inferred from your IP address, device and browser type. This is collected through Google Analytics as described below. We do not collect payment details, because we do not take payments. We do not collect government identity documents, and we do not ask for Aadhaar, PAN or bank details. Please do not send them to us; if a document you upload contains them, mask them first.

3.Data about other people that you give us

Some features let you enter information about people other than yourself. LivTrack project contacts is the clearest example: when you add your carpenter, site supervisor or designer with their phone number and email, you are giving us another person's personal data. When you do that: • Only you can see it. It is stored inside your own account area and is not published, not shared with us operationally, and not used for any purpose of ours. • You are responsible for having a proper basis to record their details, and for the accuracy of what you enter. • Do not add people who would object, and do not enter more about them than you need. The same applies to documents and photographs you upload that contain other people's details. Mask what you can before uploading. If someone tells us you have recorded their data and asks us to remove it, we will contact you.

4.Why we use it, and on what basis

We process your personal data on the basis of the consent you give when you create an account, submit a review, or use a feature — and, where the DPDP Act permits, because you have voluntarily provided the data for the purpose in question and have not indicated otherwise. We use it to: • Create and operate your account, and authenticate you • Publish your review, with the author name and apartment shown on it • Moderate content against our Review Policy and Community Guidelines, including assessing attached files • Compute designer scores and aggregate statistics — these are derived from moderated reviews • Run LivTrack for you, and generate a shared report when you ask for one • Analyse a quotation you upload, and return the analysis to you • Match you to your apartment's community board • Respond to your messages and grievances, and keep a record of them • Detect and prevent fake reviews, manipulation and abuse • Understand how the platform is used, so we can improve it • Meet our legal obligations, and establish or defend legal claims We do not use your personal data to make automated decisions that produce legal effects for you. Moderation decisions are made by a person. We do not sell personal data. We do not share it with designers. We do not use it for advertising, and we do not run behavioural advertising.

5.What becomes public

This is the section worth reading twice, because some of it is not obvious. Published reviews are public to anyone on the internet, including people who are not signed in. A published review shows: • The author name — which is your profile display name if you have one, otherwise the part of your email address before the @, otherwise "Anonymous" • The apartment or society you entered • The city, project type, budget range, ratings and your written account There is no anonymous-review option today. If you are signed in, your name is published. If this matters to you, set a display name you are comfortable with before submitting, or contact us. Apartment pages are public. Entering an apartment name creates or contributes to a public page at /apartment/… carrying that apartment's name, the designers who worked there, and a count of homeowners who reviewed. Discussion posts are public once approved, showing your display name. Shared LivTrack reports are public to anyone holding the link. They are excluded from search engines, but the link is not secret and cannot be recalled. A report can include your apartment, unit number, budget, amount paid and payment schedule. Share deliberately. Files you attach to a review are not displayed publicly. They are visible to our moderators. What is never public: your email address, your phone number, your tower, your LivTrack projects, your saved quotes, your project contacts, and your messages to us.

6.Who else processes your data

We use the following service providers. Each processes data on our behalf for the purpose stated, and we remain accountable for it. Google — Firebase and Google Cloud (Ireland/United States and other Google regions) Authentication, database and file storage. Effectively all data described in this policy is stored on Google's infrastructure. Google reCAPTCHA is used to protect phone sign-in from abuse. Anthropic — Claude API The quote analyser and the materials importer send your uploaded document to Anthropic for processing. Be clear about what this means: the complete file is transmitted — the designer's name, the line items, the prices, and anything else printed on it. Where the file is a spreadsheet or text document, its contents are transmitted as text. We do not send your name, email or account identifier with it. Only the document and the project type and city you selected are sent. If you would rather this did not happen, do not use the quote analyser. Google Maps Platform — Places API When you search for a designer by name, what you type is sent to Google to return suggestions, and we retrieve the business's public details. Google Analytics and Google Tag Manager Usage measurement. This records the full address of pages you visit, which for some pages includes identifiers in the URL — a shared report link, or an apartment page. Approximate location is inferred from your IP address. Vercel — hosting Serves the site and processes request data including IP addresses in the ordinary course of delivering pages. We also disclose personal data where we are required to by law, to a court or an authorised government agency acting under lawful process, and where necessary to establish, exercise or defend a legal claim. Our Takedown Policy sets out how we handle demands for user information, including that we do not hand over a reviewer's details because a designer has asked. Some of these providers process data outside India. The DPDP Act permits transfer outside India except to territories the Central Government restricts, and we will comply with any such restriction.

7.How we store and protect it

Data is held in Google Cloud services configured so that: • Your account area — LivTrack projects, materials, site logs, project contacts, saved quotes and uploaded evidence — is readable only by you. Our administrators cannot read it; the access rules exclude them by design. • Reviews awaiting moderation are readable only by administrators. • Files attached to reviews are readable only by administrators. • Administrative functions require a separately granted administrator role, verified on our servers rather than in your browser. Access to administrative functions is limited to the people who need it. Traffic to the site is encrypted in transit. No system is perfectly secure, and we do not claim otherwise. If a personal data breach occurs we will notify each affected person without delay, in plain language describing what happened, its likely consequences, what we are doing about it and what you can do; and we will report it to the Data Protection Board of India within 72 hours, as section 8(6) of the DPDP Act and Rule 7 of the DPDP Rules require. Security logs are retained for at least one year under Rule 6. Your browser also stores some information locally to make the site work — which city you selected, which reviews you marked helpful, and the email address you are signing in with. You can clear this through your browser.

8.How long we keep it

Account and profile data — for as long as your account exists, and then deleted or anonymised when you close it, except where we must keep something longer by law. Published reviews — indefinitely while published, because they remain useful to homeowners. If you withdraw a review it is removed from the designer's profile and their scores. If you close your account, tell us whether you want your published reviews withdrawn as well; otherwise they may remain with the author name removed. Moderation records — including rejected reviews and the reasons for decisions, for as long as needed to apply our policies consistently and to defend a decision if it is challenged. LivTrack and saved quotes — until you delete them or close your account. Files attached to reviews — while the review is live and for a reasonable period after moderation. Grievances and takedown correspondence — for the period required under the IT Rules, 2021 and to defend legal claims. Statutory retention we cannot shorten: • Removed content and associated records — 180 days, under Rule 3(1)(g) of the IT Rules, and longer if a court or authorised agency directs • Registration information after an account is cancelled — 180 days, under Rule 3(1)(h) • Security logs — at least one year, under Rule 6 of the DPDP Rules These periods apply even where you have asked us to erase data, because they are obligations imposed on us rather than choices we make. Outside them, we keep personal data only as long as the purpose it was collected for requires.

9.Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to: • Obtain a summary of the personal data we hold about you and how we process it, and the identities of others we have shared it with • Have inaccurate or incomplete data corrected, completed or updated • Have your personal data erased, where we no longer need it for the purpose it was collected for and are not required to keep it • Withdraw your consent at any time, as easily as you gave it. Withdrawal does not undo processing already carried out lawfully. • Have a grievance heard by us, through the officer named below • Nominate another person to exercise these rights on your behalf if you die or become incapable of exercising them To exercise any of these, write to privacy@livzio.in or to our Grievance Officer. We may need to confirm your identity before acting, particularly for erasure. We redress data-protection grievances within 90 days, the period set by Rule 14 of the DPDP Rules, 2025, and usually far sooner. On erasure and published reviews: where you close your account, we anonymise reviews you have published rather than deleting them, unless you ask us to withdraw them. Removing the author’s identity satisfies the erasure of your personal data, while the review itself remains useful to other homeowners and remains part of the record we are required to keep. We tell you this here so that your consent covers it. The Act also places duties on you: not to impersonate someone else when providing data, not to suppress material information, and not to raise false or frivolous grievances. If you are not satisfied with how we handle your request, you may complain to the Data Protection Board of India.

10.Children

LivZio is intended for adults arranging interior work. You must be at least 18 to create an account or submit content. We do not knowingly collect personal data from anyone under 18. We do not currently verify age beyond requiring you to confirm it, which we recognise is a limitation rather than a safeguard. The DPDP Act requires verifiable parental consent before processing a child's personal data, and prohibits tracking, behavioural monitoring and targeted advertising directed at children. We do not run advertising of any kind and do not profile users for advertising. If you believe a child has given us personal data, tell our Grievance Officer and we will delete it.

11.Cookies and similar technologies

We use: • Strictly necessary storage — to keep you signed in and to remember where you are in a form. The site does not work without it. • Preference storage — the city you selected, and posts you marked helpful. • Analytics cookies — set by Google Analytics and Google Tag Manager, to measure usage. We do not use advertising cookies and we do not permit third-party advertising trackers. You can block or delete cookies through your browser. Blocking strictly necessary storage will prevent you from signing in. You can also opt out of Google Analytics using Google's browser add-on.

12.Changes to this policy

We will update this policy as the platform changes, and as the DPDP Act and its Rules are brought fully into force. The Rules commence in phases, with the substantive obligations on notice, consent, rights, retention and breach reporting applying from 13 May 2027; we are building to that standard now rather than waiting, because consent collected under a non-compliant flow cannot be validated retrospectively. The date at the top shows when this policy was last revised. We will remind you of this policy and of any material change at least once a year, as Rule 3(1)(f) of the IT Rules requires. Where a change materially affects how we use data you have already given us, we will bring it to your attention rather than relying on you noticing the date. Superseded versions are available on request from our Grievance Officer.

13.Contacting us, and complaining

For anything in this policy, write to privacy@livzio.in. For a formal grievance, write to our Grievance Officer, named below. We acknowledge grievances within 24 hours and aim to dispose of them within 7 days. If we do not resolve your data-protection complaint to your satisfaction, you may take it to the Data Protection Board of India. For grievances about content rather than data, you may appeal to the Grievance Appellate Committee under the IT Rules, 2021, as described in our Takedown Policy.

Grievance Officer & Data Protection contact

Published under Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and as the point of contact for questions about processing under the Digital Personal Data Protection Act, 2023.

Name
Poovarasi Parthipan
Designation
Grievance Officer & Co-founder
Data requests
privacy@livzio.in
Address
Tower 3, 621, S&P Courtyard, Kamarajar Street, Kil Ayanambakkam, Chennai 600095, Tamil Nadu, India
Response
Acknowledged within 24 hours; disposed of within 7 days
Questions? Contact us