Privacy Policy

1. Introduction

Pop by iKvala ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy will inform you about how we handle your personal data, your privacy rights, and how the law protects you.

This Privacy Policy applies to information we collect:

• Through our website pop.ikvala.com
• Through our popup and gamification service
• In email, text, and other electronic communications
• Through mobile and desktop applications

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Personal Information You Provide

When you register for an account or use our Service, you may provide us with:

• Account Information: Name, email address, phone number, company name, website URL, password
• Billing Information: Credit card details, billing address (processed securely through third-party payment processors)
• Profile Information: Business type, industry, preferences
• Communications: Information you provide when contacting our support team
• Content: Popup designs, text, images, and other content you create using our Service

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Usage Data: Pages visited, time spent, features used, clicks, interactions
• Device Information: IP address, browser type, operating system, device type, unique device identifiers
• Location Data: General location based on IP address
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies

2.3 Information from Website Visitors (End Users)

Our Service enables you (our customers) to collect information from your website visitors through popups. This may include:

• Email addresses
• Names
• Phone numbers
• Custom form fields
• Interaction data (clicks, selections)

Important: You are responsible for complying with all applicable privacy laws when collecting information from your website visitors. You must provide appropriate notices and obtain necessary consents.

2.4 Analytics and Performance Data

• Popup performance metrics (views, clicks, conversion rates)
• A/B test results
• Campaign analytics

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• To provide, maintain, and improve our Service
• To create and manage your account
• To process your transactions and send billing information
• To provide customer support and respond to your requests
• To enable the features and functionality of our Service

3.2 Communications

• To send you technical notices, updates, security alerts
• To communicate with you about products, services, and promotional offers
• To respond to your comments and questions
• To send newsletters (with your consent)

3.3 Analytics and Improvement

• To monitor and analyze usage patterns and trends
• To improve our Service, develop new features
• To conduct A/B testing and other product development activities
• To personalize your experience

3.4 Legal and Security

• To comply with legal obligations
• To detect, prevent, and address fraud, security issues, and technical problems
• To enforce our Terms and Conditions
• To protect the rights, property, and safety of Pop by iKvala, our users, and the public

4. Data Sharing and Third Parties

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share data with third-party service providers who perform services on our behalf:

• Payment Processors: To process subscription payments (e.g., Razorpay, Stripe)
• Cloud Hosting: To store data and host our Service (e.g., AWS, Google Cloud)
• Analytics Services: To analyze usage and improve our Service (e.g., Google Analytics)
• Email Services: To send transactional and marketing emails (e.g., SendGrid, Mailchimp)
• Customer Support: To provide customer support services

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• To comply with a legal obligation
• To respond to court orders, subpoenas, or legal processes
• To protect and defend our rights or property
• To prevent or investigate possible wrongdoing
• To protect the personal safety of users or the public

4.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for any other purpose with your consent.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can control and manage cookies in various ways:

• Browser Settings: Most browsers allow you to refuse cookies or delete existing cookies
• Opt-Out Tools: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
• Do Not Track: We currently do not respond to "Do Not Track" signals

Note: Disabling cookies may affect the functionality of our Service.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

6.1 Security Measures

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS
• Secure Storage: Data is stored on secure servers with restricted access
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Security audits and vulnerability assessments
• Password Protection: Passwords are hashed and salted
• Firewalls: Network protection through firewalls and intrusion detection

6.2 Your Responsibility

You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately if you suspect any unauthorized use of your account.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

7.1 Retention Periods

• Account Data: Retained while your account is active and for up to 90 days after account closure
• Billing Information: Retained for 7 years as required by Indian tax law
• Usage Data: Typically retained for up to 24 months
• Support Communications: Retained for up to 3 years
• Legal Hold Data: Retained as required for legal compliance

7.2 Data Deletion

Upon request or after the retention period expires, we will delete or anonymize your personal information in accordance with applicable laws.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 Rights for All Users

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Object: Object to processing of your personal information
• Portability: Request a copy of your data in a machine-readable format
• Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

8.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: support@ikvala.com
• Phone: +91 9999396204

We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

8.3 Right to Complain

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the appropriate data protection authority in your jurisdiction.

9. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. We will take steps to remove such information from our systems.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your country, state, province, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside India and choose to provide information to us, please note that we transfer the data, including personal information, to India and process it there.

We ensure appropriate safeguards are in place to protect your personal information when it is transferred internationally.

11. GDPR Compliance (EU Users)

11.1 Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You have given consent for specific purposes (e.g., marketing communications)
• Contract: Processing is necessary to provide our Service to you
• Legal Obligation: Processing is required to comply with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests

11.2 GDPR Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Data portability
• Object to processing
• Lodge a complaint with a supervisory authority

11.3 Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection team at support@ikvala.com.

11.4 EU Representative

If required by GDPR, we will appoint an EU representative. Contact details will be updated in this Privacy Policy.

12. Indian Law Compliance

Pop by iKvala complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

12.1 Sensitive Personal Data

Under Indian law, sensitive personal data includes:

• Passwords
• Financial information (credit card, bank account details)
• Physical, physiological, and mental health condition
• Sexual orientation
• Medical records and history
• Biometric information

We collect and process sensitive personal data only with your explicit consent and in accordance with Indian law.

12.2 Reasonable Security Practices

We implement reasonable security practices and procedures as required by Rule 8 of the IT Rules, 2011, including:

• Comprehensive information security policy
• Regular security audits
• Employee training on data protection
• Encryption and access controls

12.3 Grievance Officer

In accordance with the Information Technology Act, 2000 and Rules made thereunder, we have appointed a Grievance Officer to address your concerns regarding data protection:

13. Changes to Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending an email notification for material changes
• Displaying a prominent notice on our Service

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Your continued use of the Service after any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to be bound by the modified Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your privacy-related inquiries within 30 days.