Privacy Policy
Last updated: October 2026
1. Information We Collect
Account details you give us: your name, email address and password, or your WhatsApp number if you sign up with WhatsApp, and an optional profile photo. Content you add: business listings (with their photos, contact numbers and address), reviews and review photos, and replies. When you buy a plan or an ad on our website: the payment reference and the payment screenshot you upload. When you claim a business: the proof of ownership you upload. We also collect usage data — pages viewed and search queries — and, when you use Near Me or the map, your device's location (see section 2).
2. How We Use Your Information
Your email or WhatsApp number is used to sign you in, to recover your account and for important service messages. Business listing information is shown publicly to help customers find you. Payment screenshots and ownership proofs are used only to verify a payment or a claim. Your location is sent to our servers only to find listings near you; we never store your precise location — our request log keeps it rounded to about 1 km, and deletes it after 30 days (section 8).
3. Who Processes Your Data
We do not sell or rent your personal information, or share it for anyone else's marketing. Business contact information in listings (phone, WhatsApp, address) is public, as intended. Payment screenshots and ownership proofs are visible only to Findoo staff. To run Findoo we use these service providers, each only for its task: Supabase (database and sign-in), Cloudflare (storage of photos, payment screenshots and ownership documents, and delivery of images), Vercel (hosting), Upstash (rate limiting, which sees IP addresses), Axiom (storage of the security and abuse logs described in section 8, in the United States), our email provider Zoho Mail (service emails), Meta's WhatsApp Business platform or Twilio (WhatsApp sign-in codes), our AI provider (section 5), and Google (Analytics and AdSense, sections 7 and 9).
4. Data Storage & Security
Data is stored on Supabase (PostgreSQL) with row-level security enforced at the database layer. Photos are stored on Supabase Storage; payment screenshots and ownership proofs are kept in private storage that only staff can open. All data travels over HTTPS.
5. AI Features & Your Data
Findoo is an AI-powered directory. When you use an AI feature — the AI description writer, AI search, review screening or review summaries — only the minimum text needed for that task (for example, the facts you enter, your search query, or public review text) is sent to our AI provider, which is Google (Gemini), OpenAI, Anthropic or Z.ai depending on the feature. AI providers never receive your account credentials or direct access to our database, and we do not let them train on your data. A person stays in the loop: you approve AI-written descriptions, and our team moderates reviews.
6. Cookies
We use essential cookies for authentication and session management (via Supabase Auth) and to remember preferences such as your theme. We also set one strictly-necessary first-party cookie ("findoo_vid") containing a random identifier, used only to avoid counting the same visitor twice in a business's own view and contact statistics. It holds no personal information, is never shared with anyone, and is not used to build a profile or to track you across other websites. With your consent — by choosing "Accept All" on our cookie banner — we also set Google Analytics cookies (see below). Where advertising is shown on Findoo, our advertising partners may also set cookies; see "Advertising" below.
7. Analytics
With your consent, we use Google Analytics (measurement ID G-DMTN85XGV3) to understand how visitors use Findoo so we can improve it. Analytics loads only if you choose "Accept All" in our cookie banner; if you choose "Essential Only", no analytics cookies are set. Google Analytics may collect data such as pages viewed, approximate location, and device and browser type. We do not use it for advertising. You can change your choice at any time by clearing Findoo's cookie-consent setting in your browser.
8. Security & Abuse Logs
To keep Findoo available and to detect automated scraping, we keep a technical log of requests to our servers. Each entry records the IP address, the page requested (with any location in it rounded to about 1 km), the time, and the browser or client identification your software sends (the "user agent"), along with the referring page and the country your request came from. These logs are used only to protect the service and to distinguish real visitors from automated traffic; they are never used for advertising, never sold, and never combined into a profile of you. Access is restricted to Findoo staff, and entries are automatically deleted after 30 days, after which only anonymous daily totals remain. These logs are stored with our logging provider, Axiom, in the United States, and are deleted there after 30 days.
9. Advertising
Findoo shows advertising, including listings promoted by businesses themselves and, where enabled, ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to Findoo or to other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet. You can opt out of personalised advertising by visiting Google Ads Settings at https://adssettings.google.com, and you can opt out of third-party vendors' use of cookies for personalised advertising at https://www.aboutads.info/choices. Advertising partners receive only the information your browser sends them (such as your IP address, device type and the page you are viewing); we never share your account details, phone number or email address with them.
10. How Long We Keep Data
Account details, reviews and uploads are kept for as long as your account exists. Request logs are deleted after 30 days. Payment and claim records are kept while your account exists, so a plan or an ownership decision can be checked later. Business listings are business information, not personal data, and stay on Findoo after the account that added them is deleted.
11. Deleting Your Account
You can delete your account yourself at any time: sign in, open Dashboard → Profile, and choose Delete account. It takes effect straight away and also removes your reviews, saved businesses, notifications, profile photo, review photos and payment screenshots. Full details, and what to do if you can't sign in: findoo.pk/delete-account.
12. Children
Findoo is not directed at children. You must be at least 13 years old to create an account, and at least 18 to list a business or to pay for a plan or an ad.
13. The Findoo Android App
The Findoo app on Google Play shows this same website, so this policy applies to it in full. The app collects nothing beyond what is described here. It asks for your location only when you use Near Me, and taking a photo opens your phone's own camera.
14. PDPA Compliance
Findoo complies with Pakistan's Personal Data Protection Act (PDPA). You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at hello@findoo.pk.
15. Contact
For any privacy concerns, contact: hello@findoo.pk