Privacy policy

Your data, respected.

Last updated 20 April 2026

This Privacy Policy explains what information Playvo (“we”, “us”) collects when you use playvo.pk, how we use it, who we share it with, and the choices you have. By using Playvo you agree to the practices described here.

1. Who this applies to

This policy applies to (a) Pakistani businesses that create a booking page on Playvo (“Businesses”) and (b) their end customers who book and pay through those pages (“Customers”).

2. What we collect

From Businesses when you sign up and use Playvo:

  • Phone number (for OTP login, receipts, and account recovery).
  • Business profile: name, slug/URL, optional logo, bio, timezone.
  • Service details: names, descriptions, durations, prices, buffer times, availability.
  • Payout details: EasyPaisa / JazzCash number OR IBAN + bank name + account title. This is used by PayFast to settle your funds.
  • Optional email (for receipts and PayFast contact).

From Customers when they book:

  • Full name, email, and optional phone number.
  • Any notes they add to the booking.
  • Payment card / wallet details — these are collected directly by PayFast on their servers. Playvo does not see or store card numbers, CVVs, or wallet PINs.
  • IP address and customer timezone, for fraud prevention and correctly displaying booking times.

Automatically:

  • Browser type, device type, operating system, referring URL (via Vercel Analytics and Vercel Speed Insights — privacy-preserving, no cookies or cross-site tracking).
  • Server logs for security and debugging.

3. Why we collect it (lawful basis)

  • To deliver the Service — create your account, display your booking page, process a booking, notify customers.
  • To process payments — we share booking details with PayFast to complete a transaction.
  • To send transactional communications — booking confirmations, cancellation emails, payment receipts.
  • For fraud prevention and security — IP address, device fingerprint, repeated-attempt detection.
  • To improve the product — aggregated, anonymised usage metrics (no individual profiling).

4. Who we share data with

We only share personal data with these third parties:

  • PayFast Pakistan (APPS Technologies Pvt. Ltd.)— our payment processor. Receives customer name, email, amount, and booking reference to process the payment. PayFast's own privacy policy governs their handling.
  • Supabase Inc. — database and authentication provider. Stores all account data and sends OTP codes (via Twilio).
  • Vercel Inc. — hosting and analytics. Serves the website and records request metadata.
  • Resend — transactional email delivery (booking confirmations and cancellations).
  • Law enforcement or courts — when legally compelled under Pakistani law.

We do not sell personal data to advertisers, brokers, or anyone else.

5. Business ↔ customer data

When a Customer books through your Playvo page, the Customer's name, email, phone (optional), and notes are shared with you, the Business, so you can fulfill the booking. You are expected to use this data only to deliver the service and to comply with Pakistani data-protection law. Do not add Customer contacts to marketing lists without their consent.

6. How long we keep data

  • Account data: for the life of your account, plus up to 36 months after closure (for tax and dispute-resolution purposes).
  • Booking and payment records: minimum 5 years, as required for Pakistani tax and accounting obligations.
  • Server logs: 30–90 days.

7. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate information.
  • Request deletion of your account and associated personal data, subject to legal retention requirements.
  • Withdraw consent for non-essential processing.

To exercise any of these rights, email [email protected] from the phone-linked email on your account.

8. Security

All traffic to Playvo is served over HTTPS. Account access uses phone-based OTP (no passwords to leak). Database access is restricted to our back-end services. Payment card data is never stored on our servers — it is handled directly by PayFast. Despite our efforts, no system is perfectly secure. If you suspect a breach, email [email protected].

9. Cookies

We use strictly necessary cookies for authentication (Supabase session cookie) and a small amount of privacy-preserving analytics (Vercel Analytics, which does not use cross-site cookies). We do not use advertising or remarketing cookies.

10. Children

Playvo is not intended for users under 18. If you believe a minor has used the Service, please notify us and we will delete the account.

11. International data transfer

Our hosting (Vercel, Mumbai region) and database (Supabase) may transfer and process data outside Pakistan. By using Playvo you consent to these transfers. We select providers that offer industry- standard contractual safeguards.

12. Changes to this policy

If we make material changes, we will notify you by email or an in-app banner at least 7 days before they take effect.

13. Contact

Questions, complaints, or data requests? Email [email protected].