Privacy Policy

Stively ("Stively", "we", "us", or "our") builds websites, web applications, SaaS platforms, AI solutions, and related digital services for businesses. This Privacy Policy explains what personal information we collect through https://www.stively.com, why we collect it, how it's used, who it's shared with, and the choices you have.

This policy applies to visitors, prospective clients who contact us, registered users of our student/business portal, and clients who purchase a service through our website. If you don't agree with how we handle your information as described here, please don't use the site or submit your information to us.

We only collect information that a specific feature of the site actually needs to work:

• Account information. If you register or sign in, we collect your name, email address, and, if you sign in with a password rather than Google, a securely hashed password. We never store your password in plain text.
• Google account information. If you choose "Continue with Google", Google shares your name, email address, and profile photo with us for the purpose of creating and signing you into your account. We don't receive your Google password.
• Contact and enquiry information. When you submit a contact form, request a proposal, or book a consultation, we collect what you provide - typically your name, email, phone number, company name (for business enquiries), and the details of your message or project.
• Order and payment information. When you purchase a service, we record the offering purchased, the amount, and a payment reference from our payment processor, Razorpay. We do not collect or store your card, UPI, or bank account details - Razorpay handles payment data directly and shares only the confirmation and reference we need to fulfil your order. See Payments below.
• Usage information. Like most websites, we automatically collect some technical information when you visit - your IP address, browser and device type, pages viewed, and referring page - through Google Analytics. See Cookie Policy for details.
• Content you provide within the portal. If you have an account, we store the information tied to your use of the platform - your role, submitted assignments or requests, enrollment and order history, and any messages you send through the platform (for example, to an assigned mentor).

We do not knowingly collect sensitive personal data such as health information, government ID numbers, or financial account details beyond what's described above.

• To create and maintain your account, and to authenticate you when you sign in.
• To respond to enquiries, proposals, and consultation requests.
• To process payments, confirm orders, and deliver the service you've purchased.
• To send transactional communications - order confirmations, meeting notifications, account and security emails, and support responses.
• To understand how the site is used, so we can find and fix problems and improve it.
• To detect and prevent fraud, abuse, and security incidents (for example, locking an account after repeated failed sign-in attempts).
• To meet our legal, accounting, and tax obligations.

We use a small number of essential cookies to keep you signed in and secure, plus Google Analytics to understand site usage. We don't use advertising or cross-site tracking cookies. The full list of cookies we use, what each one does, and how to control them is in our Cookie Policy.

All online payments on Stively are processed by Razorpay, a licensed payment aggregator regulated by the Reserve Bank of India. When you pay for a service, your card, UPI, net-banking, or wallet details are entered directly into Razorpay's secure checkout - they pass through Razorpay's systems, not ours, and we never see or store your full payment credentials.

Razorpay shares a payment confirmation and a transaction reference with us so we can mark your order as paid and grant you access to what you purchased. Razorpay's own handling of your payment data is governed by Razorpay's Privacy Policy, which we encourage you to review.

We don't sell your personal information, and we don't share it with third parties for their own marketing purposes. We share information only with the service providers that help us run Stively (our "sub-processors"), and only to the extent each one needs to do its job:

• Razorpay - payment processing (see Payments above).
• Google - sign-in via Google OAuth, and Google Analytics for site usage insights.
• Resend - delivery of transactional emails (verification, password reset, order and meeting notifications).
• Neon - our managed PostgreSQL database provider, where account and platform data is stored.
• Vercel - our hosting and infrastructure provider, which serves the website and runs our servers.

We may also disclose information if required by law, to comply with a valid legal process, or to protect the rights, property, or safety of Stively, our users, or the public. If Stively is ever involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction - we'd notify affected users before that happens.

We keep account and order information for as long as your account is active, and for a reasonable period afterward to meet accounting, tax, and legal record-keeping obligations. Contact form submissions that don't lead to an account are retained only as long as needed to respond to and follow up on the enquiry. You can ask us to delete your account and associated personal data at any time - see Your rights below.

We take reasonable technical and organizational measures to protect your information, including:

• Passwords are hashed (never stored in plain text) and accounts lock temporarily after repeated failed sign-in attempts.
• All traffic to the site is encrypted in transit (HTTPS), enforced with HSTS.
• The site sets a strict Content Security Policy and modern security headers to reduce the risk of common web attacks.
• Access to production data is limited to the people who need it to operate and support the platform.

No method of transmission or storage is 100% secure, and we can't guarantee absolute security. If we become aware of a data breach affecting your personal information, we'll notify you and the relevant authorities as required by applicable law.

Depending on where you're located, you may have rights over your personal information, including the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and personal data, subject to our legal retention obligations.
• Withdraw consent for optional processing (for example, by asking us not to send non-essential emails).
• Ask us who we've shared your information with.

To exercise any of these rights, email team@stively.com. We'll respond within a reasonable time and may need to verify your identity before acting on your request.

Stively's services are intended for businesses and for students old enough to independently pursue training, internships, or project work. We don't knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, contact us and we'll delete it.

Our application and database infrastructure runs on cloud providers with data centers in the Asia-Pacific region. Because our service providers (see above) operate globally, your information may be processed in countries other than your own. Wherever it's processed, we require our providers to protect it consistently with this policy.

Our site may link to third-party websites - for example, a client's live project, or a payment provider's checkout page. We aren't responsible for the privacy practices of sites we don't operate. We encourage you to review the privacy policy of any site you visit.

We may update this policy as our services, tools, or legal obligations change. If we make a material change, we'll update the "Last updated" date above, and where appropriate, notify registered users by email. Continuing to use Stively after a change takes effect means you accept the updated policy.

For any question about this policy or how we handle your information, contact us at team@stively.com. We aim to respond to every privacy enquiry within a reasonable time, generally within a few business days.