Privacy Policy

1. Introduction

Zimmify Private Limited, operating as Namewick ("we", "us", or "our"), respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the Namewick surprise-page platform (the "Service").

2. Information We Collect

Information You Provide

• Name/Username: The display name you enter when creating a page.
• Account Information: Your email address, authentication provider, and internal account identifiers used to link verified sign-ins from Google OAuth and email/password into one account.
• Photos: Images you upload for display on your chosen domains.
• Captions: Text captions you provide for your pages.
• Payment Information: Payment details are collected and processed by Paddle for the current web checkout flow, and may be processed by Apple, Google, or other platform billing providers in future native apps. We do not store your full card or bank account details.
• Takedown Requests: The name, email address, report type, domain name, and reason you provide when requesting content removal.

Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the Service.
• Device Information: Browser type, operating system, and device type.
• IP Address: Collected for security, fraud prevention, and analytics purposes.
• Checkout Acceptance Metadata: When you confirm the required checkout attestation, we record the timestamp, the exact attestation text and version shown, the legal document versions in effect, your IP address, browser user-agent string, and preferred language header. This record is stored on the booking and in a tamper-resistant audit log to evidence your informed consent.
• Takedown Request Metadata: When you submit a takedown request, we may process your name, email address, report type, complaint details, IP address, and browser user-agent to prevent abuse, investigate the report, contact you, notify the page owner, and protect affected users.
• Product Analytics Data: Microsoft Clarity collects page views, clicks, scrolling, navigation, device and performance diagnostics, and session playback data so we can understand how the Service is used. Clarity always operates in limited cookieless mode: Namewick denies both advertising and analytics storage, does not allow Clarity to set analytics cookies, and does not send an internal account identifier, email address, or Google sign-in ID. Clarity therefore does not create a persistent cross-page or cross-visit profile. Sensitive inputs are masked by default, and Namewickexplicitly masks customer-created rental, account, and editor content from Clarity recordings.

3. How We Use Your Information

• To provide and operate the surprise page service
• To display your uploaded content (including any edits you make) on your chosen domains during the active period
• To protect bookings with optional password or username/password access gates
• To moderate uploaded content for policy compliance using automated systems
• To process payments through our payment provider
• To prevent double-booking and maintain a single source of truth for domain availability
• To respond to takedown requests and support inquiries
• To share complaint details with an affected uploader where needed to investigate or resolve a takedown report
• To prevent fraud and abuse of the Service
• To improve and optimize the Service

4. Content Moderation

Uploaded photos are automatically analyzed by our content moderation system. This automated analysis checks for inappropriate content such as nudity, violence, and other policy violations. We do not use this technology for facial recognition or identification purposes.

5. Data Storage and Retention

• Page Data: Booking records (domain, display name, caption, timing, and access lock settings metadata) are retained for roughly 48 hours after the booking ends, then automatically deleted.
• Photos: Uploaded photos are stored securely and are automatically deleted after the retention period expires.
• Payment Records: Transaction records are maintained by our payment provider in accordance with their data retention policies and applicable tax/legal requirements.

6. Third-Party Services

We use the following third-party services:

• Payment Provider: Paddle acts as the Merchant of Record for the current web checkout flow. Future native apps may use Apple or Google billing where platform rules require it. Your payment information is subject to the relevant provider's privacy policy.
• Cloud Infrastructure: Third-party cloud services for hosting, file storage, database, and content moderation.
• Error Monitoring: Sentry may process technical diagnostics and limited error-session replay data so we can detect, investigate, and fix application failures.
• Product Analytics: Microsoft Clarity processes browser interaction data and provides aggregate metrics, heatmaps, and session recordings so we can improve the Service. Clarity loads directly from Microsoft and always runs in limited cookieless mode. We send denied consent for both advertising and analytics storage, do not identify signed-in accounts to Clarity, do not use Clarity for targeted advertising, and do not sell your data. Authoritative payment and server-error records remain in our secured operational logs and Sentry rather than being sent to Clarity.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to your personal data
• Request deletion of your personal data
• Request content removal via our takedown process
• Object to certain processing of your data

To exercise these rights, contact us at contact@namewick.com.

9. Cookies

We use essential cookies required for the Service to function, including login sessions, optional dev-environment access gates, and domain unlock sessions for password-protected bookings. We do not use advertising or product-analytics cookies. Microsoft Clarity always runs in limited cookieless mode with advertising and analytics storage denied, and Namewick does not offer a control that enables Clarity cookies.

10. Minors

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at contact@namewick.com or write to Zimmify Private Limited, Bangalore, Karnataka 560045, India.