Privacy Policy

1. Information We Collect

We collect information you provide directly, and information generated automatically as you use the Service:

• Account information - full name, username, email address, phone number, and optionally a profile photo, bio, gender, date of birth, and country;
• Login & authentication information - your password (stored as a one-way hash, never in plain text), OTP verification records, and device session identifiers used to enforce single-device login;
• Subscription & payment information - your selected plan, subscription status, transaction references, and payment amounts (see Section 4 for what we do not store);
• Rental & delivery information - orders, delivery addresses, and pickup/return details for physical book rentals;
• Support information - support tickets, ticket attachments, and live chat messages exchanged with our support team;
• Feedback - bug reports, suggestions, and app ratings you submit through Help & Feedback;
• Reading activity - reading history, progress, bookmarks, favorites, reviews, and forum posts;
• Device & technical information - device type, browser/user-agent string, and IP address, primarily for security and single-device enforcement;
• Notification preferences and the notifications we've sent you;
• Consent records - which version of these Terms/this Privacy Policy you accepted, and when;
• Application usage information - general interaction with the Service needed to provide and maintain it (e.g. which pages/features you use).

2. How We Use Information

We use the information above to:

• Create and manage your account;
• Provide the services you request, including digital reading access and physical book rental/delivery;
• Process applicable subscription payments, deposits, and fees;
• Respond to support tickets and live chat requests;
• Facilitate communication between you and authorized staff;
• Send important account, order, and service notifications;
• Maintain the security of your account and the Service;
• Prevent fraud, abuse, and unauthorized access;
• Improve the Service's functionality and reliability;
• Maintain administrative and audit records of account and staff activity;
• Comply with applicable legal obligations.

3. Chat & Support Privacy

When you contact us through Support Tickets, live chat, or Help & Feedback:

• Your conversation and any attachments are stored so we can track and resolve your request;
• Your messages are accessible to the authorized staff member(s) handling your request;
• Support tickets and chat may be reviewed by any staff member whose role has permission to manage support, tickets, or feedback, according to their assigned access level;
• Internal notes or status changes staff make while handling your request are not visible to you unless shared as part of a response;
• Conversations and tickets are retained in line with Section 7 (Data Retention) below, and are not used for any purpose beyond providing support, security, and quality review.

4. Payment Information

Subscription and deposit payments are processed by our third-party payment gateway. We do not store your full card number, CVV, UPI PIN, or net-banking credentials - that information is entered directly with the payment provider, not with us. We store only the resulting transaction reference, payment amount, status, and method type (e.g. card, UPI, netbanking, wallet) needed for your order history and invoices. The payment provider's own privacy policy also applies to the payment step of a transaction.

5. Data Security

We apply technical and organizational measures to protect your information, including:

• Password hashing and secure session management, with single-device enforcement and automatic session expiry;
• Role-based access control - staff only see and act on what their assigned role permits;
• CSRF protection and server-side validation on every state-changing request;
• Restricted, permission-gated access to administrative tools and data;
• Activity/audit logging of key administrative actions;
• Reasonable monitoring for suspicious activity such as repeated failed logins;
• Routine backups intended to support recovery in the event of data loss.

No online service can guarantee absolute security. We work to protect your information but cannot promise it will never be compromised, and we encourage you to use a strong, unique password and keep your login details confidential.

6. Your Privacy Rights

Depending on applicable law, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information (via your profile settings, or by contacting us);
• Request deletion of your account and associated personal data, where legally available - the Service already provides self-service account deletion from your profile;
• Request information about how your data is processed;
• Manage certain notification preferences from your account settings;
• Contact us with any privacy concern or request, using the details in Section 11.

These rights may be subject to legal exceptions (for example, information we must legally retain) and will be handled according to Solapur, Maharashtra's applicable data protection law.

7. Data Retention

We retain personal information only for as long as reasonably necessary to provide the Service, maintain your account, process transactions, resolve support requests, protect against fraud and security threats, meet legal/regulatory obligations, and resolve any disputes. We have not defined a single fixed retention period for every category of data; where a specific retention period is required by law or business policy, it will be published here.

8. When We Share Information

We do not sell your personal information. We share information only:

• With our payment gateway, to process a transaction you initiate;
• With our email delivery provider, to send account-related emails (e.g. OTPs, receipts, notifications);
• With our own authorized staff, strictly as needed to provide the Service (see Section 3);
• Where required to comply with a legal obligation, court order, or valid government request;
• With your consent, or at your direction.

9. Children's Privacy

The Service is not directed at children under the age of 18 without the involvement of a parent or guardian acting on their behalf. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can address it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the version number and effective date above will change, and where the update is material you will be asked to review and accept the new version - your previous acceptance record is kept, never deleted.

11. Contact

Questions or requests about this Privacy Policy can be sent to palavimobileliabrary@gmail.com, or raised through Support Tickets / Chat with Support inside the app once you're logged in.

Palavi Mobile Library (Reg. No. 002907-MAH/012)
Survey No. 346, Nagoba Chowk, Barshi Tulajapur Road, Rui Gaudgaon, Tal. Barshi, Dist. Solapur, Maharashtra, 413406