Privacy Policy

1. Who we are

Aivora Technologies ("Aivora", "we", "us") builds and operates ERP and CRM software, including Aivora Gym ERP and Aivora CRM. This policy explains what data we collect from you and the businesses that use our software, why we collect it, and how it is handled.

2. What we collect

• Account and business details you give us when you sign up or request a demo (name, gym/business name, phone number, email).
• Data your team enters into the ERP/CRM to run your business — for example member names, contact details, attendance, payments and, where applicable, identity documents.
• Basic technical data such as device/browser type and pages visited, used to keep the product working and secure.

3. Why we collect it

To provide and support the software, process payments, respond to enquiries, send service updates, and improve reliability and security. We do not sell personal data.

4. Who can access it

Access inside the product is role-based — staff only see what their role in your business allows. Aivora staff access customer data only to provide support or maintain the system, and only as needed.

5. Third parties

We use trusted providers to run the service — for example payment processing (Razorpay) and, where enabled, an AI assistant (Google Gemini) to answer in-product questions. These providers only receive the data needed to perform their function, and are contractually required to keep it confidential and secure.

6. Aadhaar and other identity documents

Where a business chooses to store Aadhaar or other government ID numbers for member verification, this data is collected only where the business enables that feature, is restricted to authorised staff roles within that business's account, and is never shared with third parties except where required by law. We recommend businesses using our software collect the minimum identity information actually needed and avoid storing full Aadhaar numbers where a partial or alternative ID would do.

7. Data retention & deletion

We retain data for as long as your account is active, or as required by law. When a subscription is cancelled, your business data is retained for 30 days to allow export, after which it is permanently deleted from our production systems (backups are purged on our regular backup-rotation schedule thereafter). You can request export or earlier deletion of your business's data by contacting us — see Section 10.

8. Security

We use industry-standard measures such as encrypted connections (HTTPS), access controls and regular backups. No system is 100% secure, and we encourage you to use strong passwords and limit staff access appropriately.

9. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable law, you may request access to, correction of, or deletion of personal data we hold about you, and may withdraw consent for optional processing, subject to any legal or contractual retention requirements.

10. Grievance Officer & contact

For any privacy questions, requests or complaints, contact our Grievance Officer:

Nikhil Trivedi, Founder — Aivora Technologies
Email: nikhiltrivedi9971@gmail.com
Phone: 81262 14334
Location: Lucknow, Uttar Pradesh, India

We aim to acknowledge privacy requests within 7 days and resolve them within 30 days.

11. Changes to this policy

We may update this policy as our product or applicable law changes. Material changes will be reflected on this page with a new "last updated" date.