Privacy Policy

GoodyBuddy is a local-experience platform operated by Psyczar (OPC) Private Limited (referred to as “GoodyBuddy”, “we”, “us”, or “our”). This Privacy Policy applies to our websites, mobile applications, communications, and related services (collectively, the “Services”).

By using the Services, you acknowledge the practices described here. Where applicable law requires consent, we will ask for it separately and you may withdraw it as described below. This policy does not replace any specific notice shown when we collect information for a particular feature.

Depending on how you use GoodyBuddy, we may collect the following:

• Account and contact information: name, email address, mobile number, login method, account identifiers, OTP verification status, and account status.
• Profile information: profile and banner images, date of birth or age, gender, nationality, city and region, work details, languages, culture, food preferences, interests, social-profile links, biography, and other information you choose to add.
• Host and business information: experience descriptions, schedules, images, safety information, addresses, bank or UPI payout details, account-holder information, GSTIN, billing address, company documents, and tax or invoice information.
• Identity and safety-verification information: Aadhaar or other verification details that you choose or are required to submit, verification transaction references, and verification results or status.
• Location information: country, state, city, postal code, street or landmark details, place identifiers, and latitude/longitude for experience and arrival locations. We may also use location you provide or permit your device to share to help complete an address or show nearby experiences.
• Booking and transaction information: experiences viewed or booked, dates and times, guest count and guest details, food preference, price, taxes, service fees, cancellation or refund details, invoice data, payment status, and payment/order identifiers.
• Content and communications: messages between users, reviews, ratings, shout-outs, reports, support requests, attachments, feedback, and other content you submit.
• Technical and usage information: IP address, device and browser type, operating system, app version, request and error logs, session activity, notification token, pages or features used, and locally stored preferences.

Please do not submit sensitive information that a feature does not request. If you provide personal data about another person, such as a guest, you must have authority to provide it and inform them about this policy.

• Directly from you when you register, complete a profile, host or book an experience, communicate, pay, or contact support.
• Automatically from your browser, device, and interactions with the Services.
• From another GoodyBuddy user when they invite you, include you in a booking, message you, or report an issue.
• From service providers involved in sign-in, maps and places, identity verification, payments, messaging, cloud hosting, and notifications.

If you choose “Continue with Google”, Google sends us an identity credential. We verify it and receive your verified email address, first and last name, and a stable Google account identifier. We use this information only to create or locate your GoodyBuddy account, authenticate you, prevent duplicate or fraudulent accounts, and provide account support.

GoodyBuddy does not receive your Google password and does not request access to your Gmail, Google Drive, contacts, calendar, or other Google account content. We do not sell Google user data, use it for advertising, or transfer it for unrelated purposes. Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect GoodyBuddy from your Google Account permissions page. Disconnecting Google does not automatically delete your GoodyBuddy account; contact us or use the available account-deletion controls to request deletion.

We use personal data to:

• register, authenticate, secure, and maintain accounts;
• complete profiles and enable users to host, discover, invite, and book experiences;
• show relevant listings, maps, approximate locations, availability, and recommendations;
• process bookings, payments, host payouts, invoices, cancellations, refunds, and taxes;
• enable chats, reviews, invitations, service messages, and notifications;
• verify identity, reduce fraud, enforce platform rules, and protect users and the public;
• respond to support requests, reports, disputes, and emergencies;
• operate, troubleshoot, measure, improve, and develop the Services;
• comply with legal, regulatory, accounting, and law-enforcement obligations; and
• send promotional communications where permitted, subject to your communication choices.

We process personal data with your consent, to provide services you request, for uses permitted by applicable law, and where necessary to meet legal obligations or protect legitimate interests such as safety, security, fraud prevention, and service improvement.

GoodyBuddy is a community marketplace. Profile names and images, public profile details, hosted experiences, selected listing information, ratings, and reviews marked visible may be shown to other users or the public. Messages, payout information, identity documents, and private support communications are not public.

To protect hosts, exact experience and arrival-location details are generally limited to the host and eligible participants associated with a confirmed or completed booking. Other visitors may receive an approximate location such as a city, locality, or rounded map position. Do not include an exact private address in a public title, image, or description.

We may share personal data in the following circumstances:

• Between marketplace users: information reasonably needed by hosts, guests, invitees, or booking participants to arrange and complete an experience, communicate, address safety concerns, or resolve a dispute.
• Service providers: vendors that provide cloud hosting and storage, payment processing, maps and place search, Google Sign-In, identity verification, SMS and email delivery, customer support, security, and notifications. They may process data only for the services they provide to us and under applicable contractual or legal duties.
• Legal and safety reasons: government authorities, courts, regulators, emergency services, insurers, professional advisers, or other parties when required by law or reasonably necessary to protect rights, safety, security, and prevent fraud or abuse.
• Business changes: a prospective or actual investor, acquirer, successor, or restructuring party, subject to appropriate confidentiality and data-protection safeguards.
• With your direction: when you request or clearly authorize a disclosure.

We do not sell or rent personal data to third parties.

Guest payments are processed through Razorpay or another payment provider displayed at checkout. The provider processes your payment instrument under its own privacy terms. GoodyBuddy receives transaction identifiers, amounts, status, and related booking information, but does not intend to store full card numbers, CVV values, or online-banking passwords.

Identity verification may be performed by an external verification provider, including TruthScreen or its relevant partners. Information submitted for verification is processed by that provider and may also be received or retained by GoodyBuddy where necessary for verification, fraud prevention, safety, dispute handling, and legal compliance.

Our website and apps use cookies, session storage, local storage, secure app storage, and similar technologies to keep you signed in, protect sessions, remember settings, preserve draft experiences, record tour preferences, and operate features. You can remove browser storage through your browser settings, but doing so may sign you out or reset features. We will provide additional consent choices if we introduce non-essential advertising or analytics technologies that require them.

We retain personal data only for as long as reasonably necessary for the purposes described here, including while your account is active and as needed to complete bookings, maintain transaction and tax records, resolve disputes, prevent fraud, enforce agreements, and comply with law. Retention periods vary by data type and legal requirement.

When deletion is appropriate, we delete or anonymise the data. Some records may remain in protected backups for a limited period or be retained where law requires it or where necessary to establish, exercise, or defend legal claims.

We use reasonable administrative, technical, and organisational safeguards designed to protect personal data, including access controls, encrypted transport, password hashing where passwords are used, provider credential verification, and restricted access to operational systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please protect your OTPs, account credentials, and devices, and contact us if you suspect unauthorised access.

GoodyBuddy and its service providers may process information in India and in other countries where they operate. Those countries may have different data protection laws. Where required, we use contractual, organisational, or other lawful safeguards for cross-border processing and comply with restrictions notified under applicable Indian law.

Subject to applicable law, you may:

• access a summary of personal data we process and how it is used or shared;
• correct, complete, or update inaccurate personal data;
• request erasure of personal data that is no longer required;
• withdraw consent where processing is based on consent;
• manage profile visibility and communication or device-notification preferences;
• request account deletion through the available account settings or by contacting us;
• raise a grievance and, where applicable, escalate it to the relevant authority; and
• nominate another person to exercise applicable data rights in the event of death or incapacity.

We may need to verify your identity before acting on a request. Certain information may be retained where permitted or required by law. Withdrawing consent does not affect processing already completed, and some Services may not function if required information is removed.

GoodyBuddy accounts and hosting or booking features are intended for adults who are at least 18 years old. Children may attend an experience only as a guest under the responsibility of an adult where the listing permits it. We do not knowingly permit a child to create an account. If you believe a child has provided personal data directly to us, please contact us so we can take appropriate action.

The Services may contain links to third-party websites, maps, payment pages, social networks, or other services. Their privacy practices are governed by their own policies, not this one. We encourage you to review those policies before providing information.

We may update this policy to reflect product, legal, or operational changes. We will post the revised policy here and update the date above. If a change is material, we will provide additional notice through the Services or by another appropriate method and request consent when required by law.

Psyczar (OPC) Private Limited is responsible for the personal data described in this policy. For privacy questions, rights requests, account deletion, or grievances, contact our Privacy and Grievance team:

Please use the subject “Privacy request” and describe your request clearly. We will acknowledge and respond in accordance with applicable law.