Privacy & Data Protection Policy

1. Information We Collect

To provide a safe, identity-verified companionship environment, we collect and process the following categories of personal data:

• Account Credentials: Name, phone number, email address, city, gender, and securely salted and hashed passwords (bcrypt).
• Identity Verification (KYC) Data: For companions and verified members, government identification images (Aadhaar / PAN / Passport / DL) and real-time live selfie images. These are encrypted with AES-256 and used solely for trust and verification.
• Outing & Booking Data: Scheduled outing details, categories (movies, cafes, travel), timestamps, city location, and encrypted 4-digit Meetup OTP verification records.
• Payment & Transaction Logs: We process membership pass payments through certified PCI-DSS Level 1 compliant gateways (Razorpay). Duozy never stores credit/debit card numbers, CVVs, or UPI PINs on its servers.
• Device & Security Logs: IP address, browser type, and secure session cookies required to authenticate and safeguard user sessions against unauthorized account access.

2. How We Use Your Data

Your data is collected strictly for lawful, legitimate platform operations under the DPDP Act 2023:

• To verify identity and prevent fake, fraudulent, or underage accounts.
• To facilitate seamless communication and meetup scheduling between verified members.
• To power our encrypted 4-digit Meetup OTP verification handshake.
• To respond immediately to 24/7 Safety SOS alerts and provide customer support.
• To comply with statutory legal requirements under the laws of India.

3. Profile Privacy & Phone Number Shielding

We treat user contact details with the highest degree of confidentiality:

• No Public Phone Display: Your phone number and email are never publicly displayed on search engines or publicly crawlable pages.
• Credit-Protected Contact Unlock: Contact information is accessible only to active, verified members who have unlocked contact credits through an authenticated Membership Pass.
• Companions Control: Companions can adjust their availability status, visibility, and accepting/declining preferences at any time.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to advertisers or third-party marketing brokers under any circumstances.

Data is shared exclusively with certified technical infrastructure partners essential to service delivery:

• Payment Processing: Razorpay (PCI-DSS Level 1 certified).
• SMS & OTP Authentication: Licensed Indian telecom gateway partners.
• Law Enforcement Disclosure: In cases of formal police warrants, cybercrime subpoenas, or emergency safety investigations under Section 91 of CrPC/BNSS.

5. Your Rights as a Data Principal (DPDP Act 2023)

Under Indian data protection regulations, you hold full sovereignty over your personal data:

• Right to Access: You can review all personal data and profile information stored in your dashboard.
• Right to Correction: You can update outdated phone numbers, email addresses, or cities at any time.
• Right to Erasure & Account Deletion: You may request permanent deletion of your account and KYC records by contacting our Data Protection Desk.
• Right to Grievance Redressal: Any privacy grievances are reviewed and addressed by our designated officer within 7 working days.

6. Grievance Officer & Contact Details

In accordance with the Information Technology Act 2000 and DPDP Act 2023 rules, the details of our designated Grievance Officer are: