PRIVACY POLICY

Effective date: 14 February, 2026

Last Updated: 14 February, 2026

1. Introduction

This Privacy Policy (the “Policy”) sets out the manner in which and the purposes for which we collect, use, store, disclose and, otherwise process and share information that identifies or is capable of identifying an individual, whether directly or indirectly (“Personal data or Personal Information”) for the purposes of providing, promoting and developing our Services. This Privacy Policy also provides contact details and important information about privacy rights. When you use our platform to create content, share content or purchase our Services, “By clicking ‘I Agree’, registering on the Platform, or submitting personal details, you represent that you have read/understood this Policy and provide your specific consent to collect, store and process personal Information.

We explain Our services in detail in the Terms of Use. Please read this Privacy Policy together with our Terms of Use available at https://www.goavo.ai/tos.

2. Who we are

GoAvocado AI Private Limited (“Company”, “We”, “Our” or “Us”) is the data controller and provider of the ‘GoAvo.AI’ application (“Application” or “App”) and/or website https://www.goavo.ai/home/ (“Website”) For the purposes of this Policy, the term (“Platform”) collectively refers to both our Website and App. We at GoAvo.AI are committed to protecting your privacy. This Privacy Policy informs you of our policies regarding the collection, use, storage, share and disclosure of personal information with respect to your use of the Platform. When you provide us information, or use the Platform, you acknowledge that you have read/understood this Policy and consented to the collection, storage, usage, sharing and disclosure of information in accordance with this Policy.

For the purposes of this Policy, References to "you," "your," or the "user(s)" shall mean any individual or entity accessing or using the Platform, whether as a registered user or otherwise.

3. Data we collect

Given that GoAvo.AI operates as a community-based content platform and marketplace, we collect certain personal information from you in connection with your use of the Platform, including the following:

(i) Information You Provide

a) Account Data: Information such as your name, email address, phone number, and age (collected to comply with Clause 14 to verify that you meet the minimum age requirements applicable under law)

b) User-Generated Content (UGC): Content you voluntarily submit or upload on the Application, including photos, videos, comments, and posts.

c) Transaction Data: Information relating to transactions carried out on the Application, such as transaction identifiers, date and time of transactions, billing information, and tax-related details, where required under applicable laws. We may receive information about you when you or another User uploads photos or posts other Personal Information to the Platform.

d) Forms and Survey Data: We collect and receive information about you, when Users fill out forms, surveys, questionnaires, or feedback on the Platform. This includes your responses, preferences, ratings, or any other information you choose to submit. Such data is used solely to improve our services, understand user preferences, and enhance your experience on the Platform.

(ii) Automatically Collected Data

a) Usage Data: : We collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection, including but not limited to interactions with Platform, surveys, advertisements and other usage patterns.

b) Device Data: Technical information such as IP address, browser type, operating system, and unique device identifiers.

c) Location Data: Approximate location information derived from your IP address or device settings, where permitted under applicable law.

d) Cookies and Tracking Data: We use cookies and similar technologies to operate and administer our Services and improve your experience. If you use our Services without creating an account, we store some of the information described in this policy with cookies, for example to help maintain your preferences across browsing sessions. For details, please read our Cookie Policy. However, if you do not accept cookies, you may not be able to use some portions of the Platform.

(iii) Profile Information: We collect, store, and process your preferences and other information that you voluntarily provide, including your username, profile biography, and gender. We also collect login-related information such as your email address or phone number for authentication purposes; Your passwords and authentication credentials are protected using industry-standard security measures, including encryption and access controls, and are not accessible to us in readable or plain-text form. Users are encouraged to maintain the confidentiality of their login credentials and to review the privacy and security practices of any third-party services they use in connection with the Platform.

(iv) Communication Data: We collect information you provide when you contact us for FAQ’s support or make other general inquiries.

(v) Information from other Sources: We collect information about you through our Third Party Service Provider to whom we may be associated with to provide our Services.

(vi) Website Data Collection: The data processing on this platform is carried out by the website operator. The contact details of the website operator can be found in the imprint of this webpage.

4. Information We Collect from Other Sources

We may collect information about you from third-party sources in connection with the features or Services you choose to use on the Platform. We rely on such third parties to have obtained your valid consent or to be otherwise legally authorized to share your information with us, in accordance with applicable data protection laws.

(i) Publicly Available data: We collect and Process information about you from publicly available sources and social media platforms, where permitted under applicable law. This may include information you have chosen to make publicly accessible, such as your name, username or handle, profile photograph, bio or description, professional details, publicly listed contact information, and any other information you make publicly available on such platforms.

(ii) Payment Information: We may receive and process certain information related to your transactions from our Payment Partners, including details such as transaction amounts, dates, transaction identifiers, billing addresses, and payment methods (e.g., credit card type or bank account type). We do not collect or store sensitive financial information such as full card numbers, CVV codes, or PINs. This information is used solely to process payments, maintain records, prevent fraud, and comply with applicable laws.

5. How do we use your Information/Data?

The purpose for using your information includes, but is not limited to the following:

  • (i) To provide the service which we are offering to you
  • (ii) To refer services of affiliates, if any
  • (iii) To comply with statutory and other requirements under law
  • (iv) To make our Platform and services better
  • (v) To send you promotional offers, new services available on our website or third parties with whom we have a tie up
  • (vi) To perform internal analysis
  • (vii) Authenticate and provide access to the Application
  • (viii) Communicate with you
  • (ix) Provide customer care and support
  • (x) To allow you to participate in interactive features of the Platform when you choose to do so.
  • (xi) To detect, prevent and address technical issues
  • (xii) To monitor usage of the Platform
  • (xiii) Improve the Platform

6. Automated decision-making

We use automated decision-making to provide Users with the most relevant content and develop the Service. However, we do not use automated decision-making to make any legally significant decisions about individuals.

7. Your Rights

Rights that you may have, depending on the jurisdiction in which you live, may include:

  • (i) Request information about how we collect, process, use and share your Personal Data (commonly known as a “right to know request” under CCPA and other U.S. state privacy laws)
  • (ii) Accessing, correcting, or requesting deletion of your information;
  • (iii) Appealing any decision made by us about an access, correction, or deletion request.
  • (iv) You may choose to opt in to receive promotional communications at the time of registration or at any time by clicking the “unsubscribe” link included in such communications, updating your preferences in your account settings, or contacting us using the details provided in this Policy. Opting out of promotional communications will not affect transactional or service-related messages that are necessary to provide our services.
  • (v) Objecting to processing of your information, asking us to restrict processing of your information, or requesting the portability of your information. You may withdraw or modify your consent for the processing of Personal Data at any time by adjusting your privacy or cookie settings, disabling non-essential cookies through the cookie banner or settings, and/or submitting a request to us. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal. we will act on your request within the timeframes as prescribed under law, subject to any legal obligations requiring us to retain certain information.
  • (vi) Under applicable U.S. state privacy laws, including the CCPA, you have the right to opt out of the sale or sharing of your personal information. We honour valid opt-out requests, including recognised preference signals such as Global Privacy Control (GPC), as required by law.
  • (vii) Complaining to a data protection authority about our collection and use of your information. For more information, please contact your local data protection authority.

You can exercise your rights by submitting a request to our Data Protection/Grievance Officer at support@goavo.ai.

Privacy laws, including the CCPA, the California Privacy Rights Act (CPRA), and the Virginia Consumer Data Protection Act (VCDPA), provide residents with the right to opt out of the sale, sharing, or targeted processing of their personal information. If you are a resident of these jurisdictions and wish to exercise your opt-out rights, You may exercise your opt-out rights by visiting “Do Not Sell or Share My Personal Information / Opt-Out of Targeted Advertising” link provided below, or separately by submitting a request to our Data Protection/Grievance Officer at support@goavo.ai.

8. Lawful Basis for Processing & Data Retention

(i) We process personal data only where such processing is supported by a valid legal basis and is carried out in accordance with applicable data protection laws, including Article 6 and Article 7 of the General Data Protection Regulation (GDPR), Section 6 of the Digital Personal Data Protection Act, 2023 (DPDP), and the California Consumer Privacy Act, as amended by the CPRA (Cal. Civ. Code §§ 1798.100–1798.199). The legal bases on which we rely include:

a) Consent: When you visit our site, you are shown a cookie banner. By clicking “I Accept,” you consent to the use of cookies. When you register or log in, you have the option to provide or deny consent for collecting certain personal information. Non-essential cookies are collected only with your consent, while essential cookies required for platform functionality are collected automatically.

b) Contractual Necessity: We process data necessary to deliver products or services you purchase, manage your Seller account, or otherwise fulfil obligations under your agreement with us.

c) Legitimate Interests: We process data to prevent fraud, maintain the security of the platform, and improve features such as recommendation algorithms, content personalization, and overall user experience, provided these interests do not override your rights and freedoms.

d) Legal Obligation: We process data to comply with applicable laws and regulatory requirements in the jurisdictions where we operate and laws of other countries to the extent applicable, where our services are available.

e) Data Retention: Personal Data shall be retained only for the minimum period necessary to achieve the purposes for which it is collected and processed, including compliance with applicable legal, regulatory, contractual, or statutory obligations, and for the establishment, exercise, or defence of legal claims. Where processing is based on consent, such Personal Data shall be retained until consent is withdrawn, unless continued retention is required or expressly permitted under Applicable Data Protection Laws. Upon completion of the applicable retention period or receipt of a valid deletion request, Personal Data shall be securely erased or anonymised in accordance with applicable data protection laws.

(ii) In the event your account becomes inactive, we may delete or anonymize your personal data once it is no longer necessary for the purposes for which it was collected, in accordance with applicable laws, including GDPR, CCPA/CPRA, and DPDP. Certain information may be retained if required to comply with any legal obligations, resolve disputes, enforce agreements, or for legitimate business purposes.

9. Controller Of Your Information

For the purposes of the GDPR, the Company shall act as the “Data Controller”, as defined under the GDPR. In this capacity, the Company, including its subsidiaries and business partners acting on its behalf, may collect, store, use and otherwise process your Personal Information in accordance with applicable data protection laws.

10. Who We Share the Information With

(i) You acknowledge that we may share your personal information with our data partners/service providers/affiliates and payment partners who assist in providing services (including their services) to the Company. We restrict the collection and use of your personal information.

(ii) The Company does not let anyone use your account information and any other personal identifiable information. Third parties, if any, who have tie up with us may contact you for specific purposes and tell you about our services but with a limited access and they are required to maintain the confidentiality of the information as mentioned in the contract with us.

(iii) You agree and acknowledge that we may share your personal information to the government agencies under the law in case of identity verification, investigation of cyber incidents, hearings and punishment of offences, or where disclosure of information is required for the legal purpose. We may also need to disclose the information to third parties under the law.

(iv) Except as stated in this Policy, we may need to share your information with our employees and other third party service providers who are engaged by us in order to assist us in providing the service. Such sharing occurs only on a need-to-know basis and only with those who maintain appropriate confidentiality and security practices.

(v) We may also share the information with governmental agencies and other third parties in order to (i) comply with applicable laws, (ii) protect the rights and safety of our users, employees and general public, and (iii) to prevent fraud. We do not sell or trade the information collected by us with respect to your use of the Application.

11. Third Party Service Provider and External Links

(i) We share and receive certain Personal Data from the third-party service providers to operate and improve the Platform. These may include:

  • External platforms and tools (such as YouTube, Google Forms, and Google Drive links) that are integrated with the Platform to provide content, surveys, forms, or file storage.
  • The Company works with RazorPay and Cashfree Payments collectively (“Payment Partners”) for payment processing. If you use Payment Partners for payment processing, the data relevant to such payments undertaken using Payment Partners, is processed directly in Payment Partners system and is not stored on our platform. This is data such as name, address and email address, order details and price/currency as well as the payment data such as credit card number or IBAN. We may disclose your information to Payment Partners and other payment providers, if applicable and thereafter, the use of your information is dependent on their privacy policies for which we are not responsible.
  • We use third-party Database to store and manage information collected through the Platform in accordance with this Privacy Policy.

(ii) These third-party service providers act as data processors or independent service providers, and they process personal data in accordance with their own privacy policies and applicable law. We recommend that you read and understand their policies.

13. Cross-Border Data Transfers

Your personal information may be collected, transferred to, stored, and processed in India. Where such transfers occur, we implement appropriate safeguards required under applicable laws, including contractual protections and legally recognized transfer mechanisms under the GDPR, as well as compliance measures required under applicable U.S. state privacy laws, including the CCPA. By using the Platform, you represent that you understand and provide your specific consent that your personal information may be transferred, stored, and processed in accordance with this Policy and applicable legal safeguards.

14. U.S. State Data Privacy Notice

(i) The California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”), and other U.S. state privacy laws require businesses that collect personal information of California residents to disclose how they collect, use, retain and disclose such information. This Section addresses those requirements. For a description of all of our data collection, use and disclosure practices, please read this Policy in its entirety.

(ii) During the preceding twelve (12) months, we have collected, used, and disclosed categories of personal information for business and commercial purposes as described in this Privacy Policy. We do not collect or process Sensitive Personal Information as defined in CCPA.

(iii) We do not “sell” or “sold” personal information, where the term “sell” or “sold” shall have the meaning assigned to it under the California Consumer Privacy Act and similar U.S. state privacy laws. During the preceding twelve (12) months, we have not sold or shared personal information, including for cross-context behavioral advertising purposes. We do not sell or share personal information of individuals under sixteen (16) years of age.

(iv) During the preceding twelve (12) months, we may have disclosed personal information to service providers or contractors for business purposes, including operational support, analytics, payment processing, customer support, platform security, and service improvement, subject to contractual obligations requiring confidentiality and data protection safeguards.

15. Database

We store and process personal data using secure databases and infrastructure provided by MongoDB (“Database”), our third-party database and cloud service provider. Personal data may be stored on servers operated by the Database or its authorized sub-processors, including in jurisdictions outside your country of residence, subject to applicable data protection laws and appropriate safeguards. The Database processes personal data on our instructions and in accordance with its applicable privacy and security policies. By accessing the Platform, you give your consent to store Personal Data using Database’s infrastructure. We recommend that you read and understand the Database’s policies.

16. Children’s / Minor’s Data

(i) The Platform is not intended for use by individuals below the age of 18 years (or such age as may be prescribed under applicable law). We do not knowingly collect, use, or process personal data of minors.

(ii) If we become aware that personal data of a minor has been collected without valid and verifiable consent from a parent or legal guardian, we will take reasonable steps to delete such data in accordance with applicable law.

(iii) Users represent and warrant that they are legally competent to use the Platform and to provide personal data. Parents or guardians who believe that a minor has provided personal data may contact us using the details provided in this Policy.

17. Modifications To the Policy

(i) We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email and/or through a prominent notice on the Platform, and we will update the “Effective Date” accordingly.

(ii) It is your responsibility to read and understand this updated policy. Your continued use of the Platform after the updated Privacy Policy becomes effective constitutes your acknowledgment that you have read and understood the revised terms. Where applicable law requires your consent, we will obtain such consent through a clear and affirmative action.

18. Information Security

We use industry standard measures to protect the Personal Information against unauthorized access, loss, misuse, or alteration, in accordance with Article 32 of the GDPR, Section 8 of the Digital Personal Data Protection Act, 2023 (India), and applicable obligations under the CCPA/CPRA. Access to personal data is restricted to authorized personnel and service providers acting under contractual confidentiality and security obligations. You hereby acknowledge that the Company is not responsible for any unauthorised use, access, or disclosure of information, you hereby release us from any and all claims arising out of or related to the use of information in any unauthorized manner. If you have any concerns regarding the security of your data, we encourage you to write to us at support@goavo.ai. If you have any questions about this Privacy Policy, please contact us by sending an email to support@goavo.ai.

19. Applicable Law

Your use of this Website will be governed by and construed in accordance with the laws of India. The Users agree that any legal action or proceedings arising out of your use may be brought exclusively in the competent courts/tribunals having jurisdiction in Hyderabad, India and irrevocably submit themselves to the jurisdiction of such courts/tribunals.

20. Complaints and Grievance Redressal

If you contact us to provide feedback, register a complaint, or ask a question, we will record any Personal Information and other content that you provide in your communication so that we can effectively respond to your communication. Any complaints or concerns in relation to your Personal Information or content of this Website or any dispute or breach of confidentiality or any proprietary rights of User during use of the Website or any intellectual property of any User should be immediately informed to the Data Protection Officer at the co-ordinates mentioned below in writing or by way of raising a grievance ticket through the hyperlink mentioned below:

Data Protection/Grievance Office

Grievance Officer

GoAvocado AI Private Limited

Address: 1/817, SMR Vinay Harmony County, Bandlaguda Jagir, Don Bosco Nagar, Rajendranagar, Hyderabad – 500086, Telangana, India.

Email Address: support@goavo.ai

21. Additional Terms

During the registration process, we indicate fields that are mandatorily required to be filled and fields that are optional. The Users may decide whether or not to provide such information to Us. In case you choose to decline to submit information on the Platform, we may not be able to provide certain services to You and We shall not be liable and or responsible for non-provision of services to You. Any information provided by You will not be considered as sensitive and confidential if it is freely available and/or accessible in the public domain.