Privacy Policy
HzVela ("we", "us", "the Platform") is an appointment booking platform operated by HzMinds, India. This Privacy Policy explains what information we collect when you use the HzVela mobile app and website (app.hzvela.com), how we use it, and the choices you have. By using HzVela you agree to this policy.
1. Information we collect
Account details. Name, email address, mobile number, and a password (stored only as a one-way hash). If you sign in with Google, we receive your name and email from Google. Businesses also provide business name, category, address, GST/registration number (optional), working hours, services and prices.
Location. If you allow it, your device location is used to show businesses near you. Businesses place a map pin for their premises during registration. You can use the app without sharing your location by searching by name.
Photos. Profile pictures, business logos, gallery and service photos that you choose to upload. The app asks for access to your photo library only when you pick an image.
Booking and activity data. Appointments, services booked, reviews and ratings, concerns or issues you report, favourites, and in-app chat messages between a customer and a business. Chat messages are stored encrypted.
Payment information. Payment for a service is made directly between the customer and the business (for example cash or UPI); we record that a payment was made and its amount. Businesses paying for a subscription are redirected to our payment partners (Cashfree or Razorpay). We do not store card or bank details.
Device and technical data. A push-notification token for your device, IP address and request logs used for security and rate limiting, and crash information.
2. How we use your information
- To create and secure your account, including one-time passwords (OTP) sent by SMS, WhatsApp or email.
- To show businesses near you, let you book, reschedule or cancel appointments, and let businesses manage them.
- To send booking confirmations, reminders, invoices and notifications by push notification, email, SMS or WhatsApp.
- To provide reports to businesses and to review complaints, ratings and policy violations.
- To prevent fraud and abuse, keep the Platform secure, and fix problems.
We do not sell your personal data. We do not use it for third-party advertising.
3. Who we share information with
Between customers and businesses. When you book, the business sees your name, booking details and, depending on the business’s settings, your mobile number. Customers see a business’s public listing, photos, location and prices.
Service providers that process data on our behalf: Hostinger (hosting of our servers and database), Amazon S3 (storage of uploaded photos), Google Firebase (push notifications), SMS/WhatsApp messaging providers (OTP and notifications), an email delivery provider, and payment partners (Cashfree, Razorpay) for business subscriptions. They may only use data to provide their service to us.
Legal. We may disclose information if required by law or to protect the rights and safety of users and the Platform.
4. Data storage and security
Our API and database are hosted on Hostinger servers, and data is transmitted over HTTPS. Passwords are hashed, chat messages and sensitive credentials are encrypted, and access to production data is restricted. No system is completely secure, but we work to protect your information.
5. Data retention
We keep your information while your account is active and as needed to provide the service, resolve disputes and meet legal or accounting obligations. When your account is deleted we remove or anonymise your personal data, except records we are required to keep (for example payment and invoice records).
6. Your choices, access and account deletion
You can view and update your profile and mobile number in the app, turn off location or notification permissions in your device settings, and opt out of marketing messages.
To request deletion of your account and associated data, email info@hzminds.com from the email address registered on your account with the subject “HzVela account deletion request”. We will verify the request and complete deletion within 30 days. You may also ask for a copy of your data or a correction using the same address.
7. Children
HzVela is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.
8. Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows the latest version, and continued use of the Platform means you accept the updated policy.
9. Contact us
HzMinds — info@hzminds.com, or use the in-app “Report an Issue” screen.