Legal
Privacy Policy
Effective Date: August 9, 2026 · Last Updated: August 9, 2026
1. Introduction
Welcome to Zynvo (zynvosocial.com). We operate a social platform that helps college students discover clubs, events, and people across campuses, and helps clubs and colleges run those experiences end-to-end.
This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the rights and choices you have. It applies to our website, our mobile applications, and any other service that links to this page.
By creating an account or using Zynvo, you agree to this Policy. If you do not agree, please do not use the service.
2. What Data We Collect
We collect information you give us directly, information we get from your use of the service, and a small amount of information from third-party login providers.
2.1 Account & identity
- Name and display name
- Email address (verified via Clerk)
- Profile photo
- College / institution
- Course, academic year, and club memberships
- Bio, interest tags, and other optional profile fields you fill in
- Phone number, if you choose to add one
- Social handles you choose to link (Instagram, LinkedIn, X / Twitter)
2.2 Content you create
- Posts, comments, replies, and announcements
- Event RSVPs, waitlist entries, and team registrations
- Answers you submit to organizers' registration questions
- Uploaded images and payment screenshots
2.3 Authentication & device data
- Authentication data managed by Clerk (sessions, sign-in method, hashed credentials). Zynvo never sees your raw password.
- Push notification tokens from Firebase Cloud Messaging (FCM), stored with your device platform (for example iOS, Android, or web), so we can deliver event reminders, announcements, and account alerts. These tokens are used only to deliver notifications.
- Device type, operating system, app version, locale, and time zone
2.4 Analytics & usage data
- Product analytics via PostHog (events, page views, feature usage, performance metrics). We use this to improve Zynvo and to debug problems. We do not sell this data.
- Error reporting via Sentry and Vercel Analytics / Speed Insights for the website
- In-product engagement recorded to operate the service: posts you upvote or downvote, waves you send or receive, offers you view, save, or click, and whether you have read a notification
- Server logs (IP address, request timestamps, user agent)
2.5 Payment data
For paid events we only store payment proof screenshots you upload, which are shared with the event organizer to confirm your registration. We do not collect, store, or process debit/credit card numbers, UPI PINs, net-banking credentials, or any other payment instrument directly. Payments are made to event organizers outside Zynvo.
2.6 Location
Zynvo does not collect precise or approximate location from your device. Our club and campus maps are built from location details supplied by clubs and organizers, not from your device's GPS or location services.
3. Why We Collect It (How We Use Your Data)
- To create and authenticate your account
- To show your profile and content to other users
- To let you RSVP to events, join teams, and follow clubs
- To deliver push notifications you have opted into
- To detect abuse, spam, and security incidents, and to enforce our Terms
- To understand how Zynvo is used and to improve features and performance
- To respond to support requests and legal / regulatory inquiries
4. Who We Share Your Data With
We do not sell your personal data. Period. We also do not rent, trade, or share it for advertising purposes.
We share the minimum data necessary with the following service providers, all bound by confidentiality and data-processing agreements:
| Provider | Purpose | Data shared |
|---|---|---|
| Clerk | Authentication & account management | Name, email, OAuth profile, session info |
| Google Cloud Platform | Primary hosting for our backend & database | All account and content data at rest |
| Render | Secondary hosting for our backend API | Account and content data processed by the API |
| Vercel | Hosting our website & web application | Requests to the website, IP, user agent |
| ImageKit | Image storage & delivery | Uploaded media files |
| SendGrid | Transactional email (verification, password reset) | Name, email address, message content |
| Redis | Temporary caching to speed up the API | Short-lived cached copies of API responses |
| PostHog | Product analytics | Anonymous & authenticated event data, IP, user agent |
| Sentry / Vercel | Error & performance monitoring | Error stack traces, performance metrics |
| Firebase Cloud Messaging (Google) | Push notification delivery | Device push tokens, notification content |
| Event organizers (your RSVPs) | Operate the events you register for | Your name, email, college, RSVP form answers, payment proof |
| Club administrators | Manage membership of clubs you join | Your name, email, college, and profile details |
We may also disclose information when required by law, valid legal process, or to protect the safety, rights, or property of Zynvo, our users, or the public.
5. Cookies & Local Storage
Zynvo uses cookies and similar local storage for authentication (Clerk session), analytics (PostHog), and to remember your preferences (theme, locale, last seen). You can disable non-essential cookies in your browser, but the service may not work correctly without them.
6. Your Rights & Controls
You can always do the following:
- Edit your profile from the in-app profile editor at any time.
- Delete your account and all associated data via the in-app settings, or by visiting zynvosocial.com/delete-account. See Section 7 below.
- Export your data — email zynvosocial@zynvosocial.com and we will provide a copy within 30 days.
- Turn off push notifications at any time from your device or browser settings, which stops us from sending to that device.
- Opt out of analytics by using the “Do Not Track” browser signal or by emailing us to be excluded.
- Withdraw consent for optional processing at any time without affecting the lawfulness of processing carried out before withdrawal.
7. Account Deletion
You can request deletion of your Zynvo account and associated data in either of these ways:
- In the app: Settings → Account → Delete account.
- On the web: visit zynvosocial.com/delete-account. You can sign in with Clerk for a one-click request, or use the email-verification fallback if you can't sign in.
When deletion is confirmed, we delete your profile, posts, RSVPs and waitlist entries, teams, registration answers, comments, uploaded media, notifications, sessions, and push tokens within 30 days. Your linked Clerk authentication record is deleted at the same time. We may retain limited information for legitimate reasons (see Section 8).
8. Data Retention
We keep personal data only as long as needed for the purposes described in this Policy, and then delete or anonymize it. Specific retention rules:
- Account data: deleted within 30 days of a confirmed deletion request.
- Posts & RSVPs: deleted with your account; cached copies may persist in backups for up to 90 days before being overwritten.
- Payment proof & financial records: retained for up to 8 years where required by tax / accounting law.
- Abuse & legal-hold records: retained for up to 2 years after account closure when there has been a Terms violation, fraud, or an active legal dispute.
- Aggregated analytics: retained indefinitely in a form that can no longer identify you.
Records held independently by an event organizer or club you interacted with are governed by that organizer's own retention practices.
9. Data Security
We protect your data with industry-standard controls: HTTPS/TLS in transit, encryption at rest on our cloud database, hashed credentials (managed by Clerk), role-based access for staff, and ongoing monitoring via Sentry. No system is 100% secure, but we work continuously to reduce risk.
10. International Transfers
Zynvo is operated from India, and our primary infrastructure is on Google Cloud in the Asia-South region. By using Zynvo, you understand your data may be transferred to and processed in countries other than your own. We rely on standard contractual clauses with our processors for such transfers.
11. Children's Privacy
Zynvo is intended for users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at zynvosocial@zynvosocial.com and we will delete it. See our Child Safety Standards page for our full policy on protecting minors, including how to report a concern.
12. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top. For material changes, we will notify you via the app or by email before the change takes effect.
13. Contact Us
For any privacy question, request, or complaint, contact our privacy team:
Privacy email: zynvosocial@zynvosocial.com
General support: zynvosocial@gmail.com
Website: https://app.zynvosocial.com
Delete account: zynvosocial.com/delete-account
This page is also available in plain text at /_markdown/privacy for screen readers and agentic tools. See also our Child Safety Standards.