Privacy Policy

Shoonay (shoonay.ai) gives you a username, a Social Account Number (SAN), a public page and a digital visiting card. This policy explains what personal data we handle and why, under India's Digital Personal Data Protection Act, 2023 and the IT Act, 2000.

From Google, when you sign in: your name, email address, profile photo and Google's ID for your account. We never see your Google password.

What you give us: your username, the name and photo on your page, and anything you add to your visiting card, such as your job title, business, phone, WhatsApp, email, address and website.

To keep you signed in: a sign-in cookie (sh_session), a cookie that tells the page you may be signed in (sh_in), and two short-lived cookies used only while you sign in or sign up (sh_oauth, 10 minutes; sh_pending, 30 minutes). Your browser also keeps a copy of your account so the studio opens quickly.

Technical data: like every website, our host (Cloudflare) receives your IP address and browser details with each request. We use them only to run the site and protect it from abuse.

Your username, SAN, name and photo are public. On your visiting card, each contact detail has its own setting: Everyone (anyone with your link can see it) or Only me (never sent to anyone else's browser).

Your Google email is hidden on your card until you choose to show it.

Search: people can find your page by your name, username or SAN in Shoonay search, and search engines such as Google can list your page and card. To be left out of both, turn off "Show me in search" in Studio, then Settings, then Privacy. Your link keeps working either way.

Link previews: when your card's link is shared (on WhatsApp, for example), the app shows a picture of your card's front, made from what your card already shows to everyone.

To create and run your account, show your page and card the way you set them, keep your account secure, and answer you when you contact us.

We do not sell your personal data. We do not show you ads based on your data.

Only the services that run Shoonay for us: Cloudflare (hosting, the database, and making the pictures of cards used for link previews) and Google (sign-in). They may process data outside India, under their own security and privacy commitments.

We share data with the authorities only when Indian law requires it.

Until you delete your account. Deleting it (Studio, then Settings, then Delete account) removes your page, card and account from our database straight away. Copies in our database backups are gone within 30 days.

You can see and correct your data in the studio at any time, and delete your account yourself. You can also ask us for a summary of your data, to correct or erase it, or to name someone to act for you, by writing to our Grievance Officer. We reply within 30 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Shoonay is for people aged 18 and over. We do not knowingly create accounts for children.

When identity verification launches, it will run through DigiLocker or a licensed provider. We will never store or show your Aadhaar number.

If we change this policy in a way that matters, we will tell you on the site before it applies.

Questions or complaints: Grievance Officer, Shoonay, grievance@shoonay.ai, Shoonay, Jaipur, Rajasthan, India.