Privacy Policy

When you create an account or make a booking, we collect your name, email address, phone number and the booking details you submit (plan type, dates, seats and number of members).

We automatically record technical information such as your IP address, browser type and timestamps of requests. This is used for security, rate limiting and fraud prevention.

If you visit our coworking space, we record check-in logs (booking reference, seat and date) as attendance evidence.

To create and authenticate your account, confirm bookings, send booking confirmations and process cancellations or refunds.

To operate the coworking space: allocate seats, verify attendance and manage capacity.

To comply with accounting, taxation and legal obligations, and to respond to payment disputes or chargebacks.

We do not use your data for advertising and we do not sell your personal information to any third party.

All payments are processed by Razorpay Software Private Limited, a PCI DSS compliant payment gateway. Your card number, CVV, UPI PIN and netbanking credentials are entered directly on Razorpay's secure interface.

Infivit never receives, stores or has access to your card numbers, UPI IDs or banking credentials. We only store the Razorpay order ID, payment ID, refund ID, amount and payment status, which are required to reconcile your booking.

Razorpay processes this data under its own privacy policy, available at razorpay.com/privacy.

We share the minimum data necessary with the service providers that run our platform: Razorpay (payment processing), Neon (database hosting), Vercel (application hosting), Upstash (rate limiting) and Google / Gmail (transactional email delivery).

These providers act as processors on our behalf and are bound to use the data only to deliver their service.

We may disclose information where required by law, a court order, or a lawful request from a government authority, or where necessary to establish or defend a legal claim.

We use a single essential session cookie to keep you signed in after authentication. It is set with the HttpOnly, Secure and SameSite attributes so it cannot be read by scripts or sent across sites.

We do not use advertising cookies, third-party trackers or cross-site analytics profiling. Disabling cookies will prevent you from signing in.

Booking records, payment references and check-in logs are retained for 8 years to satisfy Indian accounting, GST and audit requirements.

One-time passwords (OTPs) and temporary seat holds expire within minutes and are automatically purged.

Inactive account data is removed on request, except records we are legally required to retain.

Under the Digital Personal Data Protection Act, 2023, you have the right to access the personal data we hold about you, to request correction of inaccurate data, and to request erasure of data we are not legally required to keep.

You may also withdraw consent for non-essential processing and lodge a grievance with us at any time.

To exercise any of these rights, email coworking@infivit.com from your registered email address. We will respond within 30 days.

Data is transmitted over HTTPS/TLS only. Passwords are hashed with bcrypt and are never stored in plain text. Payment webhooks are verified using HMAC SHA256 signatures.

Access to production data is restricted to authorised personnel. While we apply industry-standard safeguards, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

For any privacy question, data request or grievance, contact our Grievance Officer:

Email: coworking@infivit.com

Phone: +91 91561 61044

Address: Nashik, Maharashtra, India

This Privacy Policy is effective as of September 2026. We may update it from time to time; the revised version will be published on this page with a new effective date.