Privacy Policy

This Privacy Policy describes how Vtoba Software Private Limited ("Vtoba", "we", "us", or "our") collects, uses, discloses, and safeguards personal data when you use the Vtoba mobile applications (Android package com.vtoba.app, iOS bundle com.vtoba.app), websites (including https://vtoba.com), and related services (collectively, the "Services").

We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and applicable rules, and other requirements that apply to our Services. For questions or requests, contact privacy@vtoba.com or see Grievance Redressal.

1. Who we are (Data Fiduciary)

Under the DPDP Act, Vtoba Software Private Limited is the Data Fiduciary responsible for determining the purpose and means of processing personal data on the Services.

Registered / operating address: Plot No. 386/B, Vandanapuri Colony, Beeramguda, Hyderabad, Telangana 502032, India.
Support: support@vtoba.com
Privacy: privacy@vtoba.com
Phone: +91 99593 56357

2. Personal data we collect

2.1 Data you provide

• Account details (name, username, email, mobile number, password)
• Profile content (bio, photos, videos, education, work, brands)
• Location preferences (current / home locations you set)
• User-generated content (posts, reels, reviews, status updates, civic issue reports, compliments, messages)
• Support communications and feedback

2.2 Data collected automatically

• Device and app data (OS, model, app version, language)
• Usage logs, diagnostics, crash reports, and performance metrics
• Approximate or precise location if you grant permission (used for rankings, nearby discovery, and civic reporting)
• Cookies and similar technologies on our website
• IP address and security signals used to prevent abuse and fraud

2.3 Data from others / device permissions

• Contacts you choose to import (only with your permission, for friend discovery)
• Camera, microphone, and photo library access when you choose to capture or upload media
• Public brand / place metadata from partners or public sources
• Information from app stores or analytics providers

3. Purpose of processing

We process personal data to:

• Provide, personalize, secure, and improve the Services
• Verify accounts (including OTP via SMS/email), authenticate users, and prevent fraud
• Compute community rankings, popularity scores, and recommendations
• Enable discovery of people, brands, and places
• Moderate content and enforce our Terms and Community Guidelines
• Send transactional messages (OTP, security, account notices) and, where permitted, product updates
• Comply with law and respond to lawful requests
• Analyze aggregated trends to improve product quality

We process personal data for specified purposes and do not use it in a manner that is likely to have a detrimental effect beyond what a Data Principal may reasonably expect.

4. Legal grounds

Depending on the activity, we rely on:

• Consent (for example, optional permissions, marketing where required)
• Contract / service performance (creating an account and delivering core features)
• Legitimate uses permitted by law (security, fraud prevention, employment/business uses where applicable, and compliance with legal obligations)

Where processing is based on consent, you may withdraw consent as described in Section 11, without affecting processing already lawfully completed.

5. Sharing of information

We may share personal data with:

• Other users, according to your privacy and profile settings
• Service providers / Data Processors (hosting, analytics, messaging/OTP, email, customer support, crash reporting) under contractual confidentiality and purpose limits
• Professional advisors and auditors
• Authorities when required by law or to protect rights, safety, and security
• Parties in a merger, acquisition, or asset transfer, subject to appropriate safeguards

We do not sell your personal information.

6. Location data

Location features are central to Vtoba (geo rankings, nearby discovery, civic reports). You control OS-level location permissions. Disabling location may limit core functionality.

7. Cookies and similar technologies

Our website may use essential cookies for security and preferences, and analytics cookies to understand traffic. You can control cookies via browser settings. See also our website practices described on this page. Continuing to use the site may constitute acceptance of essential cookies needed to operate the site.

8. Retention

We retain personal data only for as long as necessary for the purposes described, including while your account is active, to comply with legal obligations, resolve disputes, and enforce agreements. After account deletion or deactivation, we delete or anonymize personal data within a reasonable period, except where retention is required by law or for security/fraud prevention.

9. Security safeguards

We implement reasonable technical and organizational measures appropriate to the nature of the data and risks involved. No method of transmission or storage is 100% secure; please use a strong password and keep credentials private.

10. Children

Under the DPDP Act, a "child" means an individual under 18 years of age. The Services are intended for users who can lawfully consent to digital personal data processing. If you are under 18, you may use the Services only with verifiable consent of a parent or lawful guardian where required by law. If you believe a child has provided personal data without required consent, contact privacy@vtoba.com to request deletion.

11. Your rights (Data Principal)

Subject to the DPDP Act and other applicable law, you may request:

• Summary / access to personal data we hold about you
• Correction and updating of inaccurate or incomplete data
• Erasure of personal data when it is no longer necessary
• Withdrawal of consent where processing is consent-based
• Grievance redressal regarding our processing of your data

In-app: you can update profile information and deactivate your account in Settings. For permanent deletion instructions, see Delete your account.

Email privacy requests to privacy@vtoba.com with the subject "Privacy Request". We may need to verify your identity before fulfilling requests.

12. Cross-border processing

Personal data may be processed on servers in India or other countries where our service providers operate, consistent with applicable transfer restrictions under Indian law. We take steps designed to ensure appropriate contractual and security safeguards.

13. Third-party links and stores

Google Play, Apple App Store, social links, and third-party sites have their own privacy practices. We are not responsible for their policies.

14. Grievance redressal

If you have a complaint about personal data processing, please use our Grievance Redressal process. We aim to acknowledge and resolve grievances within timelines required by applicable law and platform policies.

15. Changes

We may update this Policy from time to time. We will post the revised version with an updated date. Material changes may be communicated in-app or by email where appropriate.

16. Contact

Vtoba Software Private Limited
Plot No. 386/B, Vandanapuri Colony, Beeramguda, Hyderabad, Telangana 502032, India
Support: support@vtoba.com
Privacy: privacy@vtoba.com
Grievance: grievance@vtoba.com
Phone: +91 99593 56357