Privacy Policy
This policy explains what personal data Sree Yogam collects, why, who we share it with, and your rights under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. Who runs this service
Sree Yogam Portal is operated by iLive Technologies Private Limited ("iLive", "we", "us") on behalf of Sree Yogam, a yoga studio run by Sreekonda Subrahmanyam Sarma ("Sharma ji").
For privacy questions or grievances, contact our Grievance Officer at privacy@ilivetec.com.
2. What we collect
When you sign in with Google, we receive from Google:
- Your email address
- Your full name
- Your Google profile picture URL (not stored)
When you make a payment, our payment processor (Razorpay) receives:
- The payment amount and currency
- Your contact details for the payment receipt (email; optionally a phone number you enter on Razorpay's checkout)
- Your payment method details (card / UPI / netbanking) — these stay with Razorpay; we never see or store them.
We do not collect or store your payment instrument details. Sree Yogam is out of scope for PCI-DSS because we never handle card data.
3. Why we collect it
- Email + name: to identify you across sessions and address you by name.
- Payment records: to track which 30-day window you have access to, show your "Active until" status, and provide payment receipts.
- Aggregate counts (admin only): to let Sharma ji see total active members, recent signups, and class attendance trends.
4. Who we share it with
We share data only with service providers strictly necessary to operate the service:
- Google LLC— for sign-in (you authorize this when you click "Continue with Google"). See Google's privacy policy.
- Supabase Inc. — for database + authentication hosting. Data stored in Mumbai (ap-south-1), India. See Supabase's privacy policy.
- Razorpay Software Private Limited — for payment processing. Razorpay is RBI-licensed. See Razorpay's privacy policy.
- Vercel Inc.— for application hosting. The application code runs on Vercel's infrastructure. See Vercel's privacy policy.
We do not sell your personal data. We do not share it with advertisers, marketers, or analytics platforms.
5. How long we keep it
- Account data (email, name, payment history): for as long as your account is active, plus 12 months after your last payment for tax and accounting purposes.
- Payment records: retained for 8 years as required by Indian tax law.
- Diagnostic logs (server access logs, error reports): 30 days.
6. Your rights under the DPDP Act
You have the right to:
- Access your personal data — email us and we'll send you a copy within 30 days.
- Correct incorrect or incomplete data — email us with the correction.
- Erase your account and personal data — see our Account Deletion page. Some payment records may be retained for tax compliance even after deletion.
- Withdraw consent for future processing — by deleting your account.
- Grievance redressal — escalate concerns to our Grievance Officer at privacy@ilivetec.com. If unresolved within 30 days, you may approach the Data Protection Board of India.
7. Cookies and local storage
We use essential cookies only:
- A Supabase authentication cookie that keeps you signed in.
- An origin / CSRF token used by Next.js Server Actions.
We do not use any analytics, tracking, or advertising cookies.
8. Security measures
- All traffic is encrypted in transit using HTTPS (TLS 1.2+).
- Database is encrypted at rest by Supabase.
- Payment processing is delegated to Razorpay; we never receive card or UPI credentials.
- Administrative access requires Google account authentication and is restricted by email.
- We follow the principle of least privilege — students can only see their own data; only the studio admin can see aggregate data.
9. Children
Our service is intended for adults (18+). If you are under 18, you may use Sree Yogam only with verifiable parental or guardian consent. If we discover we have collected data from a child without such consent, we will delete it.
10. Changes to this policy
We'll update the "Last updated" date at the top whenever we change this policy. Material changes will be communicated via email to your account address at least 7 days before they take effect.
11. Contact
For any privacy-related questions:
iLive Technologies Private Limited
Grievance Officer
privacy@ilivetec.com