This (“Policy”) governs the collection, processing, use, disclosure, transfer, retention, and protection of personal information by Gupio Services Pvt. Ltd. (“Company”, “we”, “us”, or “our”). This Policy applies to all users (“User”, “you”, “your”) who access, use, or interact with the Company's Application, Website, and associated Services (collectively, the “Service”). This Policy is prepared in compliance with applicable Indian data protection laws, including the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as amended, and is aligned with global frameworks such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Interpretation and Definitions
Capitalized terms used in this Policy shall have the meanings assigned below. This Policy shall be interpreted strictly and in accordance with prevailing data protection regulations.
- Account: A unique account created for the User to access and utilize the Service.
- Affiliate: Any entity that directly or indirectly controls, is controlled by, or is under common control with the Company.
- Application: Refers to Gupio, the proprietary mobile and web‑based application.
- Company: Gupio Services Pvt. Ltd., incorporated under the Companies Act, 2013, with its registered office in Karnataka, India.
- Controller: For GDPR purposes, the Company is the Data Controller of your information.
- Country: The Republic of India.
- Device: Any device (computer, smartphone, tablet, or similar) used to access the Service.
- Personal Data: Any information that identifies, relates to, describes, or can reasonably be linked with an identified or identifiable individual.
- Processor: Any natural or legal person that processes data on behalf of the Company.
- Service: Collectively refers to the Application, Website, and related offerings.
- Website: The Company's official website accessible at https://www.gupio.in.
- You: The natural person or legal entity accessing or using the Service.
Collection of Personal Data
The Company may collect the following categories of Personal Data:
- Identification Data (e.g., name, email address, phone number, address)
- Authentication and Account Data
- Transactional Data (e.g., service usage, booking records, payments)
- Technical Data (e.g., IP address, browser type, device identifiers, operating system)
- Location Data (if enabled)
- Communications Data (e.g., inquiries, customer support interactions)
In addition, the Company may collect data from:
- Automated technologies such as cookies and tracking tools
- Third‑party social media services (Google, Facebook, LinkedIn, Instagram, Twitter), if you link your account
- Publicly available sources or lawful third‑party providers
Use of Personal Data
The Company shall process Personal Data lawfully, fairly, and for legitimate purposes, including but not limited to:
- Provision and operation of the Service
- Account management, authentication, and security
- Fulfillment of contractual obligations
- Compliance with legal and regulatory obligations
- Communication of service‑related notices and updates
- Marketing and promotional activities, subject to your opt‑out rights
- Analytics, monitoring, and Service improvement
- Business continuity and restructuring transactions
User Rights
Subject to applicable laws, you have the following rights with respect to your Personal Data:
Under GDPR
- Right of Access – Obtain confirmation regarding the processing of your data
- Right to Rectification – Request correction of inaccurate or incomplete data
- Right to Erasure – Request deletion of your data under lawful grounds
- Right to Restrict Processing – Request limitation of processing under certain conditions
- Right to Data Portability – Receive a copy of your data in a structured format
- Right to Object – Object to the processing of your data, including for marketing purposes
Under CCPA
- Right to Know – Request disclosure of categories and specific pieces of personal information collected
- Right to Delete – Request deletion of personal information
- Right to Opt‑Out – Opt out of the sale or sharing of personal information
- Right to Non‑Discrimination – Not be discriminated against for exercising your privacy rights
Under Indian IT Rules
- Right to Review – Review and correct your personal information
- Right to Withdraw Consent – Withdraw consent to data processing at any time, subject to legal restrictions
- Right to Grievance Redressal – File a complaint with the appointed Grievance Officer
Disclosure and Sharing of Data
The Company may disclose Personal Data under strictly regulated circumstances, including:
- With Service Providers bound by contractual confidentiality obligations
- With Affiliates and subsidiaries for legitimate corporate purposes
- In the event of a merger, acquisition, or corporate restructuring
- In response to lawful requests from regulators, courts, or enforcement agencies
- Where disclosure is necessary to protect the rights, property, or safety of the Company, its Users, or the public
- With your explicit consent
Data Retention and Deletion
Personal Data shall be retained only for as long as necessary to fulfill the purposes stated in this Policy or as required by law. Once retention is no longer necessary, data will be securely deleted, anonymized, or otherwise disposed of in accordance with industry practices.
Data Security
The Company implements commercially reasonable technical, administrative, and organizational safeguards to ensure the confidentiality, integrity, and availability of Personal Data. However, no system is completely secure, and the Company disclaims liability for unauthorized access or breaches beyond its reasonable control.
Cross‑Border Data Transfer
Your Personal Data may be transferred to and maintained outside your state or country, including jurisdictions that may not have equivalent data protection laws. In such cases, the Company ensures that appropriate contractual, technical, and organizational safeguards are in place.
Children's Privacy
The Service is not intended for children under 13 years of age. The Company does not knowingly collect or process Personal Data of minors. If such data is inadvertently collected, it shall be deleted promptly.
Amendments to this Policy
The Company reserves the right to amend, revise or update this Policy at its direction, subject to applicable law. Changes shall take effect upon publication on the website, unless otherwise mandated by law.