Privacy Policy

1. Introduction

Zimmify Private Limited, operating as NameWick ("we", "us", or "our"), respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our surprise page platform at namewick.com (the "Service").

2. Information We Collect

Information You Provide

• Name/Username: The display name you enter when creating a page.
• Account Information: Your email address, authentication provider, and internal account identifiers used to link verified sign-ins from Google OAuth and email/password into one account.
• Photos: Images you upload for display on your chosen domains.
• Captions: Text captions you provide for your pages.
• Payment Information: Payment details are collected and processed by Dodo Payments for the current web checkout flow, and may be processed by Apple, Google, or other platform billing providers in future native apps. We do not store your full card or bank account details.
• Takedown Requests: The name, email address, report type, domain name, and reason you provide when requesting content removal.

Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the Service.
• Device Information: Browser type, operating system, and device type.
• IP Address: Collected for security, fraud prevention, and analytics purposes.
• Checkout Acceptance Metadata: When you confirm the required checkout attestation, we record the timestamp, the exact attestation text and version shown, the legal document versions in effect, your IP address, browser user-agent string, and preferred language header. This record is stored on the booking and in a tamper-resistant audit log to evidence your informed consent.
• Takedown Request Metadata: When you submit a takedown request, we may process your name, email address, report type, complaint details, IP address, and browser user-agent to prevent abuse, investigate the report, contact you, notify the page owner, and protect affected users.

3. How We Use Your Information

• To provide and operate the surprise page service
• To display your uploaded content (including any edits you make) on your chosen domains during the active period
• To protect bookings with optional password or username/password access gates
• To moderate uploaded content for policy compliance using automated systems
• To process payments through our payment provider
• To prevent double-booking and maintain a single source of truth for domain availability
• To respond to takedown requests and support inquiries
• To share complaint details with an affected uploader where needed to investigate or resolve a takedown report
• To prevent fraud and abuse of the Service
• To improve and optimize the Service

4. Content Moderation

Uploaded photos are automatically analyzed by our content moderation system. This automated analysis checks for inappropriate content such as nudity, violence, and other policy violations. We do not use this technology for facial recognition or identification purposes.

5. Data Storage and Retention

• Page Data: Booking records (domain, display name, caption, timing, and access lock settings metadata) are retained for roughly 48 hours after the booking ends, then automatically deleted.
• Photos: Uploaded photos are stored securely and are automatically deleted after the retention period expires.
• Payment Records: Transaction records are maintained by our payment provider in accordance with their data retention policies and applicable tax/legal requirements.

6. Third-Party Services

We use the following third-party services:

• Payment Provider: Dodo Payments acts as the Merchant of Record for the current web checkout flow. Future native apps may use Apple or Google billing where platform rules require it. Your payment information is subject to the relevant provider's privacy policy.
• Cloud Infrastructure: Third-party cloud services for hosting, file storage, database, and content moderation.
• Error Monitoring: Sentry may process technical diagnostics and limited error-session replay data so we can detect, investigate, and fix application failures.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to your personal data
• Request deletion of your personal data
• Request content removal via our takedown process
• Object to certain processing of your data

To exercise these rights, contact us at contact@namewick.com.

9. Cookies

We use essential cookies required for the Service to function, including login sessions, optional dev-environment access gates, and domain unlock sessions for password-protected bookings. We do not use advertising cookies.

10. Minors

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at contact@namewick.com or write to Zimmify Private Limited, Bangalore, Karnataka 560045, India.