Effective Date: January 15, 2025
Last Updated: October 9, 2026
This Cookie Policy explains how Flevv / Xplora Technologies uses cookies and similar technologies on our website, and points to related mobile-app tracking described in the Privacy Policy.
1. What Are Cookies?
Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit websites or use applications. They help recognize your device and remember information about your preferences or past actions.
2. Types of Cookies We Use
2.1 Essential Cookies (Strictly Necessary)
These cookies are required for core functionality and cannot be disabled:
- Authentication Tokens: JWT tokens to maintain your logged-in session
- Session Management: Cookies to identify your active session
- Security Cookies: CSRF tokens and security measures
- Load Balancing: Technical cookies for service distribution
Legal Basis: Contractual necessity (GDPR Article 6(1)(b)) - these cookies are essential to provide services you've requested.
2.2 Functional Cookies
These cookies enhance functionality and personalization:
- Language Preferences: Remember your selected language (en, hi, tl, ta, ml)
- Theme Preferences: Remember your display preferences
- Recent Workspaces: Remember your last accessed projects
Legal Basis: Legitimate interests (GDPR Article 6(1)(f)) - to improve user experience.
2.3 Analytics Cookies
These cookies help us understand how users interact with our services:
- Usage Analytics: Pages visited, features used, time spent
- Performance Monitoring: API response times, error rates
- Feature Analytics: Which features are most/least used
Legal Basis: Legitimate interests (GDPR Article 6(1)(f)) - to improve and optimize our services.
2.4 Third-Party Cookies
Some third-party services we use may set their own cookies:
- Google Sign-In: Authentication cookies for Google OAuth
- Apple Sign-In: Authentication cookies for Apple ID
- Razorpay: Payment processing cookies (PCI-DSS compliant)
- Firebase Cloud Messaging: Push notification management
These third-party cookies are governed by the respective companies' privacy policies.
3. Mobile Application Tracking
In addition to the website, our Android app uses tracking technologies similar to cookies:
3.1 Local Storage
- Authentication tokens stored securely on device
- User preferences and settings
- Cached data for offline functionality
3.2 Device Identifiers
- Device ID: Unique identifier for your device
- FCM Token: For push notifications
- Device Type: Android identification (iOS not launched yet)
3.3 Analytics SDKs
- App usage analytics
- Crash reporting and error monitoring
- Performance metrics
4. Purpose of Cookie Usage
We use cookies and similar technologies to:
- Authenticate You: Keep you logged in across sessions
- Remember Preferences: Language, theme, and display settings
- Security: Detect fraud, prevent abuse, protect against attacks
- Analytics: Understand usage patterns to improve services
- Performance: Monitor and optimize app performance
- Personalization: Provide relevant content and recommendations
5. Cookie Duration
5.1 Session Cookies
- Temporary cookies deleted when you close the app/browser
- Used for active session management
5.2 Persistent Cookies
- Authentication Tokens: 7 days (refreshable)
- Preferences: 1 year
- Analytics: Up to 2 years
6. Managing Cookies and Tracking
6.1 Mobile App Settings
- Device Settings: Manage app permissions in Android settings
- App Permissions: Control storage, notifications, and tracking permissions
- Clear Data: Clear app cache and data from device settings
- Logout: Logging out removes authentication tokens
6.2 Push Notifications
- Disable push notifications in device settings or app settings
- FCM tokens will no longer be used for notifications
6.3 Third-Party Tracking
- Android: Reset advertising ID or opt out of personalization
6.4 Consequences of Disabling Cookies
Disabling essential cookies will:
- Prevent you from logging in
- Disable core functionality
- Reset preferences on each session
- Impact service performance
7. Do Not Track (DNT)
Flevv currently does not respond to "Do Not Track" browser signals as there is no universal standard for DNT signal interpretation. However, you can manage tracking through the methods described in Section 6.
8. Data Sharing
Cookie data may be shared with:
- Service Providers: Infrastructure and analytics providers (under strict data processing agreements)
- Third-Party Authentication: Google, Apple for OAuth authentication
- Payment Processors: Razorpay for payment processing
We do not sell cookie data to third parties.
9. International Data Transfers
Cookies and tracking data may be transferred to servers located in:
- India (primary servers)
- United States (Google, Apple, OpenAI services)
- Other countries where our service providers operate
All transfers comply with GDPR requirements through Standard Contractual Clauses or adequacy decisions.
10. Children's Privacy
Flevv is not intended for users under 16 (or 13 in certain jurisdictions). We do not knowingly collect cookies or tracking data from children. Parents can contact support@flevv.com to request deletion of such data.
11. Your Rights (GDPR/CCPA)
You have the right to:
- Access: Request information about cookies and tracking data we've collected
- Deletion: Request deletion of cookie data (may impact service functionality)
- Objection: Object to non-essential cookie usage
- Portability: Receive your cookie preferences in machine-readable format
Exercise these rights by emailing support@flevv.com.
12. Updates to This Policy
We may update this Cookie Policy to reflect:
- Changes in our tracking practices
- New technologies or cookies
- Legal or regulatory requirements
Changes will be communicated via:
- Updated "Last Updated" date on this page
- In-app notification for material changes
- Email for significant changes affecting your rights
13. Cookie List
| Cookie Name | Type | Purpose | Duration |
|---|---|---|---|
| auth_token | Essential | JWT authentication | 7 days |
| session_id | Essential | Session management | Session |
| locale | Functional | Language preference | 1 year |
| device_id | Functional | Device identification | Persistent |
| fcm_token | Functional | Push notifications | Until updated |
| analytics_id | Analytics | Usage tracking | 2 years |
14. Contact Information
For questions about cookies and tracking:
- All inquiries: support@flevv.com (use subject "Privacy" or "Cookies" when relevant)
Your choice
We use strictly necessary cookies to run Flevv, and these are always on. We use analytics and advertising cookies only if you click "Accept" in our cookie banner. If you click "Reject" or close the banner, they are not set and those tags do not load. You can change your choice at any time from the Cookie settings link in the footer of every page; withdrawing is as easy as giving consent and does not affect processing done before you withdrew. ⚖ (DPDP Act 2023 s.6(1), s.6(4))
Strictly necessary cookies (set by Flevv)
| Cookie | Purpose | Lasts |
|---|---|---|
| __cf_bm | Set by Cloudflare, our security/CDN provider, to tell people from bots | 30 minutes |
| flevv_portal_role | Remembers which portal view (e.g. job seeker / employer) you chose | 30 days |
| author_id, author_name | Keep blog authors signed in to the blog editor | 7 days |
| admin_id, admin_username | Keep Flevv staff signed in to admin tools | 6 hours |
| registration_success | Shows a one-time "account created" message | 60 seconds |
| flevv_session | Keeps you signed in to the support chat | 7 days |
Signing in on the Flevv website keeps only your user ID in your browser's session storage, which is cleared when you close the tab. The support chat keeps its sign-in token in your browser's local storage (flevv_support_token, flevv_support_user_id) until you sign out.
Analytics and advertising cookies (only after "Accept")
| Service | Provider | Why we use it | Cookies | Lasts (vendor default) |
|---|---|---|---|---|
| Google Analytics | Google LLC / Google Ireland Ltd | Count visits and see which pages and features are used, to improve Flevv | _ga, _ga_<ID> | 2 years |
| Google Ads (conversion tracking) | Google LLC | Measure whether our Google ads lead to sign-ups or purchases | _gcl_au (also _gcl_aw after an ad click) | 90 days |
| Meta Pixel | Meta Platforms Ireland Ltd / Meta Platforms, Inc. | Measure our Facebook/Instagram ads and show our ads to people who visited Flevv | _fbp | 90 days [CONFIRM: _fbp lifetime on Meta's cookies page] |
Browsers may shorten these (Chrome caps at 400 days, Safari 7 days for script cookies).
What these partners receive: the page address you visit, referring page, device/browser details, IP address, cookie identifiers and events such as "signed up". We do not send your resume content, contact details or vCard details to them. ⚖
Who receives it and where: Google and Meta, who act as independent controllers / processors under their own terms ⚖, and process data on servers outside India, including in the United States. Transfers outside India are allowed unless a country is restricted by the Central Government under DPDP Act s.16 ⚖. Their policies: policies.google.com/privacy, facebook.com/privacy/policy.
Opt-out elsewhere: Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), adssettings.google.com, Meta ad preferences.
Public resume and vCard pages
Public resume and digital business card (vCard) pages that you share do not load Google Analytics, Google Ads or Meta Pixel, so visitors to your page are not tracked for analytics or advertising.