Privacy Policy
Your privacy and the security of your group financial data are fundamental to us.
1. Introduction
Welcome to Organizo ("we," "our," or "us"). Organizo provides a mobile application designed to assist users with organizing group trips and events, coordinating shared expenses, tracking collections, and computing optimal peer-to-peer repayments.
This Privacy Policy explains how we collect, use, disclose, and protect your information when you access or use the Organizo mobile application and our informational website at organizo.co.in. By using Organizo, you agree to the practices described in this policy.
2. Information We Collect
We collect information that you provide directly to us, as well as essential identifiers required to operate the app:
- Account & Profile Details: Full Name, Email Address, and Mobile Phone Number provided during account registration or profile setup.
- Group Financial & Event Records: Event and trip names, dates, budgets, expense items, amounts, split allocations, contributor names, and settlement transactions logged within your groups.
- Event Admin Payment QR Codes: Event creators and designated event admins may optionally upload or capture an image of their UPI payment QR code to facilitate peer-to-peer collections from participants. Because users select images from their device, users are solely responsible for any photo or image they choose to upload; Organizo does not pre-screen, endorse, or verify user-submitted media. Aside from this optional payment image, Organizo does not access, collect, or store any other personal photos, media, or files from your device.
- Push Notification Identifiers: A unique device token generated by our notification service to deliver real-time group expense updates, settlement confirmations, and organizer announcements to your device.
3. Device Permissions & Why We Need Them
The Organizo mobile application may request the following permissions strictly to enable specific user-initiated features:
- Camera Access: Used exclusively if an event creator or admin chooses to take a photo of their UPI payment QR code directly within the app. We never access your camera without your explicit tap and consent.
- Photos & Media Library Access: Used exclusively if an event creator or admin chooses to select an existing UPI payment QR code image from their device gallery. We do not read or access any other personal photos, videos, or documents.
- Push Notifications: Used to send real-time alerts when group expenses are logged, settlements are cleared, or payment confirmations are requested. You can disable notifications at any time in your device settings.
- Network & Internet Connectivity: Used to communicate securely with our backend API servers and detect offline mode so you can continue creating trips and expenses without an active internet connection.
Strict User Control & Content Disclaimer: We never access your camera or photo library in the background or without your explicit action. Users are solely responsible for any photos or images they choose to upload, and Organizo assumes no liability for user-submitted media.
4. Third-Party Service Providers & Data Disclosures
We partner with trusted infrastructure service providers strictly to deliver core app functionality:
- Razorpay: Handles secure payment processing for optional digital pass upgrades. Payment and card details are handled directly by Razorpay in compliance with global PCI-DSS security standards.
- OneSignal: Dispatches real-time push alerts and reminders to your device over encrypted channels (HTTPS / TLS 1.2+).
- Supabase Storage: Provides secure, encrypted cloud storage strictly for event admin-uploaded UPI payment QR code images. Organizo is not liable for user-uploaded media.
- Transactional Email (Zoho ZeptoMail): Used exclusively to deliver 6-digit authentication verification codes (OTP) and official payment receipts to your registered email address.
Peer-to-Peer Payment Verification Disclosure: When a participant claims an online UPI payment in an event, their name and mobile number are displayed to the designated event admin within the in-app notification card. This is done solely to enable the admin to cross-check and reconcile the transaction against their UPI/bank statement. Once the claim is accepted or rejected by the admin, the phone number is automatically masked.
We do not sell, rent, or trade your personal information to third-party data brokers, marketers, or advertisers.
5. Data Security, Retention & Automated QR Cleanup
All data transmitted between your device and Organizo servers is protected using industry-standard Transport Layer Security (TLS / HTTPS) encryption. User authentication is completely passwordless and handled via secure, time-limited 6-digit One-Time Passwords (OTPs) that auto-expire and are permanently removed from the database. User sessions are verified using cryptographically signed JSON Web Tokens (JWT) with zero password storage.
Your data is retained for as long as your account remains active to provide ongoing group history, expense calculations, and settlement summaries.
30-Day Automated Event QR Code Deletion: To protect user privacy and avoid retaining obsolete payment media, any payment QR code images uploaded by event organizers are automatically and permanently deleted from our storage servers 30 days after the event reaches its scheduled end/expiry date.
6. Account & Data Deletion (Your Rights)
In compliance with Google Play Developer Policies and applicable data protection regulations, you have the right to permanently delete your account and personal data at any time through either of the following methods:
- Method 1 (Instant In-App Deletion): Open the Organizo app → navigate to Profile → scroll to the bottom and tap Delete Account.
- Method 2 (Web-Based Self-Service Deletion with OTP): If you have uninstalled the app or cannot access your device, visit our dedicated deletion portal at organizo.co.in/delete-account.html. Simply enter your registered phone number or email, verify your identity with a 6-digit OTP, and your account will be permanently deleted immediately.
Data Retention & Ledger Anonymization Policy:
- Personal Profile (Name, Email, Phone): Permanently erased from our systems.
- Push Device Tokens & Inbox: Permanently deleted.
- Shared Group Ledgers & Splits: Automatically anonymized as "Former Member" so that remaining group members' balances and debt math remain mathematically intact.
7. Contact Information
If you have any questions, feedback, or privacy-related requests regarding this Privacy Policy, please contact us at:
Email: support.organizo@gmail.com
Website: https://organizo.co.in