Nichevio Privacy Policy

Nichevio is operated by Zealsync Private Limited (“Nichevio”, “we”, “us”). This policy applies to:

• the Nichevio website at nichevio.com, including Pricing, Help and the Contact and Report Abuse forms;
• Nichevio Accounts, Workspaces and the dashboard;
• public Profiles and Articles hosted by Nichevio, on nichevio.com or on a custom domain connected through Nichevio; and
• Visitors who view Profiles or submit information through them.

It does not apply to the Zealsync corporate website, which has its own privacy policy, or to websites and services run by others that a Profile links to.

Terms with capital letters, such as Account, Workspace, Profile, Profile owner, Visitor and Records, have the meanings given in the Terms of Service.

Information Nichevio handles for its own purposes

Zealsync Private Limited decides how and why personal information is used for the website, Accounts, Workspaces, sign-in and security, billing for Nichevio plans, support, abuse reports and the operation and protection of the Service. For this information, we are responsible for it as a data fiduciary or controller under the law that applies.

Information submitted to a Profile

When a Visitor submits information to a Profile, for example through a contact form, booking request, newsletter signup, Order or RFQ, the Profile owner decides what to collect and how to use it. The Profile owner is responsible for that information. Nichevio stores it, delivers it to the Profile owner’s Workspace and sends related emails on the Profile owner’s behalf and under their instructions.

We also use limited information from these submissions for our own purposes: to keep the Service secure, to prevent spam, fraud and abuse, to investigate reports, to produce statistics that do not identify anyone, and to comply with the law.

If you have a question or request about information you submitted to a Profile, contact the Profile owner first. See Information You Submit to a Profile.

We do not ask for or store full card numbers, card security codes, UPI PINs, banking passwords or one-time passwords from your bank. Payment details for Nichevio subscriptions are entered on the checkout page of Dodo Payments and handled by Dodo Payments.

To show the pricing that applies where you are, we use your IP address to estimate the country you are visiting from. We use it for that purpose at the time of your visit.

We use personal information to:

• create and secure your Account, sign you in and protect against unauthorised access;
• run Workspaces, roles and invitations;
• host, display and publish your Profiles and Articles;
• deliver Records to the Profile owner’s Workspace and send the related notifications, and send Visitors the confirmations and Order status links that go with their submissions;
• show payment instructions to a Visitor after their Order is saved, and keep the history of payment claims and the Profile owner’s decisions;
• process subscriptions, trials and custom-plan offers, and keep billing records;
• answer support requests, custom-plan requests and reports;
• prevent and investigate spam, fraud, abuse and security incidents, and enforce our Terms of Service and Acceptable Use Policy;
• send service messages, such as sign-in codes, security alerts, billing notices and changes to our terms;
• understand how the Service is used, using counts and statistics, so we can run and improve it; and
• comply with legal obligations and respond to lawful requests from authorities.

If we send you marketing about Nichevio, you can opt out at any time using the link in the message, and we will ask for your consent first where the law requires it.

Automated checks help us detect spam, bots and abuse. Reports and moderation decisions are handled under the process described in the Acceptable Use Policy.

We process personal information only where the law allows it. Which ground applies depends on the information, the purpose and where you are.

In India, we process personal information in line with the Information Technology Act, 2000 and its rules and, as its provisions come into force, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. We rely on your consent, which you give for example when you create an Account, configure payment methods or submit a form, and on the legitimate uses the law recognises, such as processing information you have provided voluntarily for a specified purpose and complying with legal obligations.

If the laws of the European Union, the United Kingdom or a similar law apply to you, we rely on these grounds:

For information submitted to a Profile, the Profile owner is responsible for having a legal ground for its use.

Public: the content of published Profiles and Articles, including the names, images, prices, locations and contact details that Profile owners choose to show, and Profile addresses. Anyone can see this information, and it may be shared, copied or, where indexing is enabled, listed by search engines.

Private: drafts, Records, payment claims and proof, merchant payment settings, team membership, Workspace settings and billing. Private information is available only to people in the Workspace whose role and permissions allow it, to Nichevio staff who need it for a specific task, and to our service providers as described below. A location address or coordinates entered for a Branch stay private unless the Profile owner turns on their public display.

Payment instructions configured by a Profile owner are shown to a Visitor only after that Visitor’s Order is saved.

If you submit information to a Profile, it goes to the Profile owner and the members of their team whose roles allow them to see it. You will see a confirmation, and for Orders, a private status page that only someone with the link can open.

Booking requests are requests. The Profile owner confirms an appointment with you directly.

If you subscribe to a Profile owner’s newsletter through their Profile, Nichevio keeps a record of your consent and of any withdrawal you make through Nichevio, such as on the unsubscribe page for that Profile where it is available. After you withdraw, we may keep a minimal record so that you are not added again by mistake.

A Profile owner may send newsletters with their own email tools. How those emails are sent, and how to stop receiving them, is the owner’s responsibility; contact them, or use the unsubscribe option in their email if it has one. Withdrawing through Nichevio updates the record Nichevio holds; tell the Profile owner as well if you want them to stop using your address elsewhere.

If you place an Order, the Profile owner may show you payment instructions. Payments go directly to the business, not to Nichevio. If you tell the business that you have paid and attach proof, the proof is stored privately and is visible only to team members with permission to review payment evidence. Your claim does not confirm the payment; the business confirms it.

If you choose to continue an Order in WhatsApp, WhatsApp opens with a prepared message. What you send is handled by WhatsApp and the business; Nichevio does not see it.

To access, correct or delete information you submitted, or to withdraw consent, contact the Profile owner using the contact details on their Profile. If you cannot identify or reach them, send your request through the Contact page, with Legal selected, and include the Profile address. We will review it and may pass it to the Profile owner.

We share personal information only as described here.

Service providers

These companies provide parts of the Service and process personal information for us:

AI Media Assistant providers

When the AI Media Assistant is available for your Plan, your instructions and image request are sent through Vercel AI Gateway to OpenAI, which generates the image with its GPT Image 1.5 model. Instructions and generated images are also checked by a separate automated moderation step before and after generation. We do not send identity images, customer photos or payment proof for this purpose.

OpenAI and Vercel process these requests under their own terms and policies and may keep request records for a limited period, for example for abuse monitoring. Deleting a generated image from Nichevio does not delete records these providers keep.

Dodo Payments

Dodo Payments sells Nichevio subscriptions as merchant of record. When you buy a plan, Dodo Payments collects your payment details, processes the payment, calculates any taxes and issues the invoice under the Buyer Terms of Dodo Payments ↗ and the Privacy Policy of Dodo Payments ↗. We share with Dodo Payments the information needed to set up and manage your subscription, and Dodo Payments shares with us the status of your subscription and payments.

Others

• Profile owners and their authorised team members receive the Records submitted to their Profiles.
• Members of your Workspace can see information according to their roles.
• Anyone can see what is published on a Profile.
• Authorities, courts or other parties when the law requires it, or when it is necessary to protect the rights, safety or property of Visitors, customers, Nichevio or the public.
• A successor organisation, if the business that operates Nichevio is reorganised, merged or sold, under protections equivalent to this policy.
• Anyone else, with your consent.

Our service providers operate in several countries. Information may be stored and processed in India and in other countries where those providers or their subcontractors operate, which may be outside the country where you live.

We transfer personal information across borders in line with the requirements of the law that applies at the time, including any restrictions the Government of India notifies under the Digital Personal Data Protection Act, 2023 and, where they apply, the transfer rules of the European Union or the United Kingdom.

We keep personal information only for as long as we need it for the purposes in this policy, and then delete or anonymise it. How long that is depends on these criteria:

• whether your Account, Workspace or Profile is still active;
• the retention that applies to a Profile’s Plan, for Records and statistics, as shown in the dashboard;
• whether a Profile owner has deleted the Record or content;
• whether we need the information to resolve a dispute, a report, a security incident or a payment question;
• whether the law requires us to keep it, for example billing and tax records; and
• whether a request from you or an authority is still open.

Some specific points:

• Sign-in codes expire after 10 minutes and are not usable after that.
• Payment proof images are kept separately from the Order. An image is deleted a limited period after the Order and its payment are resolved, and is kept longer while a payment claim is unresolved or a hold applies, for example for a dispute, a fraud or abuse investigation or a legal requirement. A record of the claim and of the business’s decision can remain with the Order after the image is deleted.
• When a trial or a paid Plan ends, information above the limits of the new Plan is locked rather than deleted straight away, and is then removed according to the retention rules for that Plan.
• Deleted information can remain in backups for a limited period until those backups are replaced.
• We may keep records of security events, moderation decisions and consent withdrawals for longer where we need them to protect the Service or to show that we complied with the law.

You can edit or delete most Profile content in your dashboard at any time. An Owner can delete Records where the dashboard allows it and can unpublish and delete Profiles.

To delete your Account or a Workspace you own, use the options in your dashboard where they are available, or send a request through the Contact page with Legal selected. We will confirm who you are and whether you have the authority to delete the Workspace, and explain what will be deleted before we proceed.

We may not be able to delete some information straight away, or at all, where:

• we must keep it by law, for example billing and tax records;
• it is needed for an active subscription, an open dispute or a payment question;
• it is evidence in a security, fraud or abuse investigation;
• it is part of the history of an Order or another Record that a Profile owner must keep;
• it is a minimal record that prevents us from emailing you after you have unsubscribed; or
• it is in a backup that has not yet been replaced.

Where we keep information for one of these reasons, we use it only for that reason.

We use technical and organisational measures appropriate to the information, including:

• sign-in with one-time email codes instead of passwords, with optional additional security such as an authenticator app or a passkey;
• encryption of information in transit between your browser and the Service;
• additional encryption for sensitive fields, such as merchant payment details, sign-in tokens from Google and backup codes;
• role-based access for team members, with separate permissions for payment evidence and payment decisions;
• private storage for payment proof, with access through short-lived links;
• separation between the information of different Workspaces; and
• logging of important actions and limits on how often sensitive actions can be repeated.

No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires. See Security and Privacy Practices for more about how the Service behaves.

Depending on the law that applies to you, you can ask us to:

• give you access to the personal information we hold about you and a summary of how we use it;
• correct, complete or update inaccurate or incomplete information;
• erase information that is no longer needed or that you have withdrawn consent for, subject to the exceptions in Deleting Information;
• stop processing based on your consent, by withdrawing it; and
• nominate another person to exercise your rights on your behalf in the event of your death or incapacity, where the law provides for this.

If the laws of the European Union, the United Kingdom or a similar law apply to you, you can also object to processing based on our legitimate interests, ask us to restrict processing, and ask for a copy of information you gave us in a portable format.

Withdrawing consent does not affect processing that took place before you withdrew it. If you withdraw consent that is needed to provide a feature, we may no longer be able to provide that feature.

To make a request, use the Contact page, with Legal selected. Start your message with “Privacy request” and enter the email address your request is about; if you have an Account, use the email address of your Account. You do not need a Nichevio Account to make a request, for example as a Visitor who submitted information to a Profile. We may need to confirm your identity before we act. We respond within the time that the applicable law requires.

For information you submitted to a Profile, contact the Profile owner first, as explained in Information You Submit to a Profile.

You can manage optional cookies at any time from Cookie Settings, as described in the Cookie Policy.

Nichevio is not directed at children, and we do not knowingly collect personal information from children for our own purposes. If you believe a child has created an Account or that a child’s information has been published without the consent the law requires, tell us through the Contact page, with Legal selected, and we will review it.

We use cookies and similar technologies that are needed to sign you in, keep the Service secure, remember a cart or show a confirmation. With your permission, we also remember your last sign-in method on your device. We measure Profile views without cookies. The Cookie Policy lists each technology and explains your choices.

We will update this policy when our practices, the Service or the law change. The version and date at the top of this page show which version applies. If we make a material change, we will tell Account holders by email or in the dashboard before it applies.

Privacy requests and questions, from Account holders and Visitors alike: the Contact page, with Legal selected. For a complaint about how we handled your information, start your message with “Privacy grievance”. We will acknowledge it, look into it and tell you the outcome.

If you are not satisfied with our response, you may be able to complain to the Data Protection Board of India once the relevant provisions apply, or to the data protection authority where you live.

Nichevio is operated by Zealsync Private Limited. Postal address: 11/131, Elanthoor, Pathanamthitta – 689643, Kerala, India.