Legal

Privacy Policy

Effective Date: August 9, 2026 · Last Updated: August 9, 2026

1. Introduction

Welcome to Zynvo (zynvosocial.com). We operate a social platform that helps college students discover clubs, events, and people across campuses, and helps clubs and colleges run those experiences end-to-end.

This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the rights and choices you have. It applies to our website, our mobile applications, and any other service that links to this page.

By creating an account or using Zynvo, you agree to this Policy. If you do not agree, please do not use the service.

2. What Data We Collect

We collect information you give us directly, information we get from your use of the service, and a small amount of information from third-party login providers.

2.1 Account & identity

  • Name and display name
  • Email address (verified via Clerk)
  • Profile photo
  • College / institution
  • Course, academic year, and club memberships
  • Bio, interest tags, and other optional profile fields you fill in
  • Phone number, if you choose to add one
  • Social handles you choose to link (Instagram, LinkedIn, X / Twitter)

2.2 Content you create

  • Posts, comments, replies, and announcements
  • Event RSVPs, waitlist entries, and team registrations
  • Answers you submit to organizers' registration questions
  • Uploaded images and payment screenshots

2.3 Authentication & device data

  • Authentication data managed by Clerk (sessions, sign-in method, hashed credentials). Zynvo never sees your raw password.
  • Push notification tokens from Firebase Cloud Messaging (FCM), stored with your device platform (for example iOS, Android, or web), so we can deliver event reminders, announcements, and account alerts. These tokens are used only to deliver notifications.
  • Device type, operating system, app version, locale, and time zone

2.4 Analytics & usage data

  • Product analytics via PostHog (events, page views, feature usage, performance metrics). We use this to improve Zynvo and to debug problems. We do not sell this data.
  • Error reporting via Sentry and Vercel Analytics / Speed Insights for the website
  • In-product engagement recorded to operate the service: posts you upvote or downvote, waves you send or receive, offers you view, save, or click, and whether you have read a notification
  • Server logs (IP address, request timestamps, user agent)

2.5 Payment data

For paid events we only store payment proof screenshots you upload, which are shared with the event organizer to confirm your registration. We do not collect, store, or process debit/credit card numbers, UPI PINs, net-banking credentials, or any other payment instrument directly. Payments are made to event organizers outside Zynvo.

2.6 Location

Zynvo does not collect precise or approximate location from your device. Our club and campus maps are built from location details supplied by clubs and organizers, not from your device's GPS or location services.

3. Why We Collect It (How We Use Your Data)

  • To create and authenticate your account
  • To show your profile and content to other users
  • To let you RSVP to events, join teams, and follow clubs
  • To deliver push notifications you have opted into
  • To detect abuse, spam, and security incidents, and to enforce our Terms
  • To understand how Zynvo is used and to improve features and performance
  • To respond to support requests and legal / regulatory inquiries

4. Who We Share Your Data With

We do not sell your personal data. Period. We also do not rent, trade, or share it for advertising purposes.

We share the minimum data necessary with the following service providers, all bound by confidentiality and data-processing agreements:

ProviderPurposeData shared
ClerkAuthentication & account managementName, email, OAuth profile, session info
Google Cloud PlatformPrimary hosting for our backend & databaseAll account and content data at rest
RenderSecondary hosting for our backend APIAccount and content data processed by the API
VercelHosting our website & web applicationRequests to the website, IP, user agent
ImageKitImage storage & deliveryUploaded media files
SendGridTransactional email (verification, password reset)Name, email address, message content
RedisTemporary caching to speed up the APIShort-lived cached copies of API responses
PostHogProduct analyticsAnonymous & authenticated event data, IP, user agent
Sentry / VercelError & performance monitoringError stack traces, performance metrics
Firebase Cloud Messaging (Google)Push notification deliveryDevice push tokens, notification content
Event organizers (your RSVPs)Operate the events you register forYour name, email, college, RSVP form answers, payment proof
Club administratorsManage membership of clubs you joinYour name, email, college, and profile details

We may also disclose information when required by law, valid legal process, or to protect the safety, rights, or property of Zynvo, our users, or the public.

5. Cookies & Local Storage

Zynvo uses cookies and similar local storage for authentication (Clerk session), analytics (PostHog), and to remember your preferences (theme, locale, last seen). You can disable non-essential cookies in your browser, but the service may not work correctly without them.

6. Your Rights & Controls

You can always do the following:

  • Edit your profile from the in-app profile editor at any time.
  • Delete your account and all associated data via the in-app settings, or by visiting zynvosocial.com/delete-account. See Section 7 below.
  • Export your data — email zynvosocial@zynvosocial.com and we will provide a copy within 30 days.
  • Turn off push notifications at any time from your device or browser settings, which stops us from sending to that device.
  • Opt out of analytics by using the “Do Not Track” browser signal or by emailing us to be excluded.
  • Withdraw consent for optional processing at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Account Deletion

You can request deletion of your Zynvo account and associated data in either of these ways:

  • In the app: Settings → Account → Delete account.
  • On the web: visit zynvosocial.com/delete-account. You can sign in with Clerk for a one-click request, or use the email-verification fallback if you can't sign in.

When deletion is confirmed, we delete your profile, posts, RSVPs and waitlist entries, teams, registration answers, comments, uploaded media, notifications, sessions, and push tokens within 30 days. Your linked Clerk authentication record is deleted at the same time. We may retain limited information for legitimate reasons (see Section 8).

8. Data Retention

We keep personal data only as long as needed for the purposes described in this Policy, and then delete or anonymize it. Specific retention rules:

  • Account data: deleted within 30 days of a confirmed deletion request.
  • Posts & RSVPs: deleted with your account; cached copies may persist in backups for up to 90 days before being overwritten.
  • Payment proof & financial records: retained for up to 8 years where required by tax / accounting law.
  • Abuse & legal-hold records: retained for up to 2 years after account closure when there has been a Terms violation, fraud, or an active legal dispute.
  • Aggregated analytics: retained indefinitely in a form that can no longer identify you.

Records held independently by an event organizer or club you interacted with are governed by that organizer's own retention practices.

9. Data Security

We protect your data with industry-standard controls: HTTPS/TLS in transit, encryption at rest on our cloud database, hashed credentials (managed by Clerk), role-based access for staff, and ongoing monitoring via Sentry. No system is 100% secure, but we work continuously to reduce risk.

10. International Transfers

Zynvo is operated from India, and our primary infrastructure is on Google Cloud in the Asia-South region. By using Zynvo, you understand your data may be transferred to and processed in countries other than your own. We rely on standard contractual clauses with our processors for such transfers.

11. Children's Privacy

Zynvo is intended for users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at zynvosocial@zynvosocial.com and we will delete it. See our Child Safety Standards page for our full policy on protecting minors, including how to report a concern.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top. For material changes, we will notify you via the app or by email before the change takes effect.

13. Contact Us

For any privacy question, request, or complaint, contact our privacy team:

This page is also available in plain text at /_markdown/privacy for screen readers and agentic tools. See also our Child Safety Standards.