Acche Vibes

Privacy Policy

Last Updated: January 2025

Your privacy is important to us. This Privacy Policy explains how Acche Vibes collects, uses, and protects your personal information.

Who We Are and What This Policy Covers

Body Chi Me India Pvt Ltd ("Acche Vibes", "we", "us", or "our") operates the bodychime.in website and mobile applications. We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy applies to information we collect when you use our Services, including when you:

  • Browse our website or use our mobile applications
  • Create an account as a consumer or business
  • Search for or book beauty and wellness services
  • List your business on our platform
  • Communicate with us or other users
  • Participate in surveys, contests, or promotions
Information We Collect

Information You Provide to Us

We collect information you provide directly to us, including:

  • Account Information: Name, email address, phone number, password, and profile photo
  • Business Information: Business name, address, description, services offered, pricing, operating hours, and business images
  • Booking Information: Service details, preferred dates and times, special requests, and payment information
  • Payment Information: Credit card details, billing address (processed securely through Razorpay)
  • Communications: Messages you send to businesses, customer support inquiries, reviews, and ratings
  • Identity Verification: Government-issued ID and business registration documents (for business verification)

Information Automatically Collected

When you use our Services, we automatically collect:

  • Usage Information: Pages viewed, search queries, booking history, and interaction with businesses
  • Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
  • Location Information: Approximate location based on IP address, or precise location if you grant permission
  • Cookies and Similar Technologies: Session data, preferences, and analytics (see our Cookie Policy)
  • Log Information: Access times, error logs, and referring URLs

Information From Other Sources

  • Social Media: Profile information when you connect via Google, Facebook, or other social platforms
  • Third-Party Services: Google Business Profile data for businesses that integrate with us
  • Payment Processors: Transaction confirmation from Razorpay and other payment gateways
  • Public Sources: Business information from public directories and government registries
How and Why We Use Information

We use the information we collect for the following purposes:

To Provide and Improve Our Services

  • Process bookings and inquiries between consumers and businesses
  • Facilitate communication between users
  • Process credit purchases and payments
  • Display personalized search results and recommendations
  • Improve our algorithms and user experience

For Safety and Security

  • Verify user identities and business credentials
  • Detect and prevent fraud, spam, and abuse
  • Enforce our Terms of Service and other policies
  • Protect the security of our platform and users

To Communicate With You

  • Send booking confirmations, reminders, and updates
  • Respond to your inquiries and support requests
  • Notify you about platform updates and new features
  • Send promotional communications (with your consent)

For Business Operations

  • Analyze platform usage and user behavior
  • Generate business insights and reports
  • Comply with legal obligations and regulatory requirements
  • Resolve disputes and enforce agreements
Sharing Information

We share information in the following circumstances:

With Other Users

When you book a service or send an inquiry, we share your contact information and booking details with the relevant business.

With Service Providers

  • Payment Processing: Razorpay and other payment gateways (India-based)
  • Communication Services: Email and SMS providers for notifications
  • Analytics: Google Analytics and similar services for platform improvement
  • Cloud Hosting: Vercel and database hosting providers

For Legal Reasons

We may disclose information to comply with legal obligations, protect our rights, respond to lawful requests from authorities, or prevent harm.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

With Your Consent

We may share your information in other ways with your explicit consent.

India Data Storage

All user data for Indian users is primarily stored on servers located in India, in compliance with Indian data protection regulations. We work with service providers that maintain robust security standards.

How Long We Keep Information

We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

  • Account Information: Until you delete your account, plus 90 days for recovery
  • Transaction Records: 7 years for tax and accounting purposes
  • Communication Logs: 3 years for customer support and dispute resolution
  • Marketing Data: Until you unsubscribe or opt-out
  • Legal Compliance: As required by Indian law and regulations

After these periods, we either delete or anonymize your information. Some information may be retained in backup systems for up to 30 additional days.

Security

We implement industry-standard security measures to protect your personal information:

  • Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3
  • Secure Storage: Passwords are hashed using bcrypt, and sensitive data is encrypted at rest
  • Access Controls: Strict role-based access to user data, with regular security audits
  • Payment Security: We never store full credit card numbers; all payments are processed through PCI-DSS compliant providers
  • Monitoring: Continuous monitoring for suspicious activity and potential security threats

While we strive to protect your information, no security system is impenetrable. We encourage you to use strong passwords and enable two-factor authentication.

Your Choices

You have several choices regarding your information:

Account Information

You can update your profile information anytime through your account settings.

Marketing Communications

You can opt out of promotional emails by clicking "unsubscribe" or adjusting your notification preferences.

Cookies

You can control cookies through your browser settings. See our Cookie Policy for more details.

Location Information

You can disable location services through your device settings, though this may limit some features.

Account Deletion

You can request account deletion by contacting us at support@acchevibes.com. Some information may be retained as required by law.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

For All Users

  • Access: Request a copy of your personal information
  • Correction: Update inaccurate or incomplete information
  • Deletion: Request deletion of your account and data
  • Portability: Receive your data in a machine-readable format

For EU/EEA Users (GDPR)

  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for specific processing activities
  • Complaint: Lodge a complaint with your local data protection authority

For Indian Users

Under the Digital Personal Data Protection Act 2023, you have the right to access, correct, and delete your personal data, as well as the right to nominate someone to exercise your rights in case of death or incapacity.

To exercise any of these rights, please contact us at support@acchevibes.com. We will respond to your request within 30 days.

How to Reach Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Body Chi Me India Pvt Ltd

Mumbai, Maharashtra, India

Data Protection Officer: Available upon request

Privacy Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email if the changes are material
  • Post a notice on our website for 30 days
  • Request your consent if required by law

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after changes are made constitutes acceptance of the updated policy.

Your Privacy Matters

We are committed to protecting your privacy and being transparent about our data practices. If you have any concerns or questions, please don't hesitate to reach out to us.

Privacy Policy | Acche Vibes