Privacy Policy

Important Notice

Creating an account requires you to separately confirm that you agree to our Terms of Service and that you consent to the processing of your personal data as described in this Privacy Policy. Non-essential tracking (analytics and session recording, described in Section 3) only runs after you accept it through the cookie banner — it is off by default.

1. Introduction

Welcome to AdTown, a product of Aivirex Innovations LLP ("Company", "we", "us", or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our platform (the "Platform" or "Service"). It also explains your rights regarding your personal data and how you can exercise them, including rights available to you under India's Digital Personal Data Protection Act, 2023.

AdTown is a two-sided marketplace platform connecting advertising space owners with advertisers. This Policy applies to all users of the Platform, including Space Owners and Advertisers.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

Account Information:

• Full name
• Email address
• Phone number
• Password (stored in encrypted form)
• Profile picture (optional)

Business Information (for Space Owners):

• Business/Company name
• A link to your GST certificate, trade license, or other business-registration proof, which you submit yourself (e.g. via a shared document link) for our verification team to review
• Business address and contact information
• Business type and category

Listing Information (for Space Owners):

• Advertising space details (type, size, location)
• Photographs and images of advertising spaces
• Pricing and availability information
• GPS coordinates or location data
• Technical specifications

Booking Information (for Advertisers):

• Name, email, phone, and business name (optional) supplied with each booking
• Campaign details, design briefs, and creative files you upload
• Proof-of-display photos or videos uploaded by the Space Owner, which may include GPS coordinates and device information embedded in the file

2.2 Information Collected Automatically

Once you have accepted analytics cookies (see Section 3), we automatically collect certain information about your device and usage patterns, such as pages viewed, device and browser type, and approximate location derived from your IP address.

3. Cookies and Analytics

AdTown uses three analytics tools: Google/Firebase Analytics (usage statistics), Firebase Performance (page-load performance), and Microsoft Clarity (session recordings and heatmaps that help us see how the interface is used). None of these are essential to using the Platform.

• These tools do not run, and no analytics identifier is set, until you click "Accept analytics" on the cookie banner shown on your first visit.
• If you click "Decline", or take no action, none of this tracking runs.
• You can change your choice at any time via Cookie Preferences in the footer of any page.

Essential functionality — signing in, keeping you logged in, and remembering your booking in progress — relies on Firebase Authentication's own storage and is not affected by your analytics choice.

4. How We Use Your Information

Purpose	Description
Platform Operations	To provide, maintain, and improve our Platform and Services. Note that on-platform payment processing is not live yet, so AdTown does not currently handle any financial transactions between users.
Account Management	To create and manage your account; to authenticate your identity; to provide customer support.
Communication	To send you service-related notifications, updates, security alerts, and administrative messages.
Safety & Security	To detect and prevent fraud, abuse, and security incidents; to verify user identity and business credentials.
Legal Compliance	To comply with applicable laws and regulations, including tax record-keeping and requests from courts or authorities.

5. Data Storage, Retention and Security

Important Security Notice

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5.1 Data Storage

Your data is stored using Google Firebase. Our backend compute (Cloud Functions) runs in Google's Mumbai, India region (asia-south1). Firestore, Authentication, and Storage run on Google's broader Firebase infrastructure, which may include data centers outside India as part of Google's global network. See Section 8 for cross-border transfer details.

5.2 Data Retention

• Account data is kept for as long as your account is active, and deleted or anonymized within 90 days of a verified deletion request (see Section 6).
• Booking records (including advertiser contact details attached to a booking) are retained for 7 years after completion, in line with standard tax and dispute-resolution record-keeping obligations in India.
• Business verification links/documents are retained only while your verification is pending or your listing is active, and are not needed afterwards.
• Analytics and session-recording data (only collected if you opt in) is retained under Google Analytics' and Microsoft Clarity's own default retention settings, which you can review in their respective privacy documentation.

5.3 Security Measures

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication mechanisms
• Regular security assessments and audits
• Access controls and employee training
• Firebase security rules and protocols

6. Your Rights and Choices

Access and Portability

• Access the personal information we hold about you
• Download a copy of your data in a portable JSON format using "Export my data" in your Profile settings
• View and update your information through account settings

Correction and Update

• Update or correct your personal information anytime
• Use account settings for direct updates
• Contact us for information that cannot be updated directly

Erasure

• Request deletion of your account using "Delete my account" in your Profile settings, or by contacting our Grievance Officer
• We aim to complete verified deletion requests within 90 days
• Some data may be retained where the law requires it — see Section 5.2

Withdrawing Consent

• Turn analytics tracking off at any time via "Cookie Preferences" in the footer
• Withdraw consent to data processing generally by requesting account deletion
• If you are not satisfied with how we handle your request, you may raise it with the Data Protection Board of India

7. Children's Privacy

AdTown is intended for use by individuals who are at least 18 years old, as stated in our Terms of Service. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will delete that information promptly.

Where we are required to process the personal data of a child or a person with a lawful guardian, we will seek verifiable consent from the parent or guardian as required by law. If you believe a child has provided us with personal information, please contact our Grievance Officer (Section 10).

8. International Data Transfers

AdTown is operated from India and serves users in India and the UAE. Our Cloud Functions run in India (asia-south1); the broader Google Firebase infrastructure we rely on for Authentication, Firestore, and Storage may store or process data in other countries as part of Google's global network.

By using the Platform, you understand that your data may be transferred to and processed in a country other than the one you access AdTown from. We do not transfer personal data to any country that the Government of India has restricted under the Digital Personal Data Protection Act, 2023.

9. Data Breach Notification

If a breach of your personal data occurs, we will notify the Data Protection Board of India and affected users as required under applicable law, describing what happened, the likely consequences, and the steps we are taking in response. We maintain an internal process to detect, assess, and respond to security incidents involving personal data.

10. Contact Us / Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices — including access, correction, erasure, or consent-withdrawal requests — please contact our Grievance Officer:

Aivirex Innovations LLP

S2 Authreayaa Flats, 24th Street Shankar Nagar,

Pammal, Chennai, Kanchipuram,

Tamil Nadu - 600075, India

Email: adtown.space@gmail.com
Phone: +91 63827 29213

Response Time: We aim to acknowledge all inquiries within 30 days and resolve data-related grievances within 90 days, in line with applicable Indian data protection law.

AdTown is a product of Aivirex Innovations LLP