Privacy policy.

Who we are

Daizy is Daizy Digital & Media Private Limited (CIN U73100GJ2026PTC184333, GSTIN 24AANCD1243N1ZI), registered at A-63, Bhaktinagar, IOC Road, Chandkheda, Gandhinagar, Ahmedabad 382424, Gujarat, India. We put lit advertising boards inside auto-rickshaws and sell that space to local businesses. Under the Act we are the data fiduciary for what this page describes.

Questions about your data go to Rajvansh Manav, at info@daizy.co.in or +91 82000 78779. We answer within 30 days.

If you ask us to call you

The call-back form asks for three things: your name, your mobile number and the name of your business. We use them for one purpose, to ring you back about advertising with us. You give them for that purpose, which is a legitimate use under section 7 of the Act, and you can withdraw them at any time by asking us to delete them.

The form sends those three things to us as an email. We do not keep a database of enquiries. The email is read by the two founders and nobody else.

If you message us on WhatsApp or ring us, we keep that conversation as our record of what was said and agreed, the way any business keeps its messages.

If you advertise with us

To run a campaign we keep what the order form and the invoices need: your business name, the name, mobile number and email of the person we deal with, your GSTIN if you have one, and your artwork. We use them to run the campaign, send your weekly report, invoice you, and meet our tax and accounting obligations.

If you scan the QR code on a board

Every board has a QR code. When you scan it, we count the scan for the advertiser and send you on to their page. We store the board, the time, the type of phone and its operating system, and an approximate city. We also store a scrambled form of your internet address, mixed with a secret value, which tells us whether the same phone scanned twice but cannot be turned back into the address.

We never store your name, number or anything that identifies you, and the advertiser only ever sees how many scans there were. The page the code sends you to belongs to the advertiser, and their own privacy policy applies there.

Visiting this site

Our hosting provider keeps ordinary server logs, which include your IP address, browser and the pages you opened, for security and to keep the site running. We do not store IP addresses ourselves. The contact form's rate limit holds a hashed version of your address for at most an hour, from which the address cannot be recovered.

What we do not do

• No cookies, no advertising pixels, no cross-site tracking.
• No accounts and no passwords on this site. There is nothing to sign up for.
• We do not sell your details, share them for anyone else's marketing, or use them to build a profile of you.
• We do not send marketing messages. If we contact you, it is because you asked us to or you are running a campaign with us.
• We never share the names, numbers or documents of the drivers who carry our boards with advertisers.
• This site is for businesses. We do not knowingly collect anything from anyone under 18, and there is nothing on the site for children.

Who else sees it

These services touch what you send us or what a scan records, each one only for its job.

• Resend delivers the contact form's email to us. Its servers are in the United States, so the three things you typed leave India for that delivery. Resend does not use them for anything else.
• Our hosting provider serves the site and keeps the server logs described above. Today that is Vercel, in the United States. If that changes, this page changes.
• Supabase hosts the database where scans and campaign records are kept, on servers in Mumbai, India.
• WhatsApp, if you use it to message us. Your conversation with us is processed by Meta under WhatsApp's own terms and privacy policy, which are not ours.

How long we keep it

If you ask for a call and do not become a customer, we delete the email within twelve months of our last contact with you. If you become a customer, we keep what we need to run your campaign and to meet our tax and accounting obligations, which in India is eight years for invoices.

Ask us to delete your details at any time and we do it within 30 days, unless the law requires us to keep a record, in which case we tell you what and why.

Your rights

Under the Act you can ask us, at any time and free of charge:

• What we hold about you, and to see it.
• To correct anything that is wrong or out of date.
• To delete it, and to stop contacting you.
• To withdraw your consent to any processing that was based on it. Withdrawing is as easy as giving it: one message.
• To nominate someone to exercise these rights for you.

If you are not satisfied

Write to us first at info@daizy.co.in. We answer within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India, which is the authority under the Act.

How we protect it

The site is served only over HTTPS, with security headers that stop it being embedded or scripted from elsewhere. The form is validated on the server, rate-limited, and guarded against bots, and what you send through it exists only as an email in two people's inboxes. Campaign records are kept in a database where each person can read only what is theirs. If a breach ever affects your data, we will tell you and the Data Protection Board as the Act requires.

Changes

If this page changes, the date at the top changes with it. If a change affects what we collect or why, we say so here plainly.