Privacy Policy

ZipXO ("ZipXO," "we," "our," or "us") is operated by the persons operating the ZipXO Platform pending incorporation. This Policy applies to Personal Data processed in connection with zipxo.in, the ZipXO applications, and related services, whether you are a visitor, Brand, Creator, authorised representative, or someone who writes to us.

It applies however you access the Platform (website, app, or integration). Statutory rights under the Digital Personal Data Protection Act, 2023 and other Applicable Data Protection Laws are not limited by this Policy.

This Policy should be read with the Terms and Conditions. Capitalised commercial terms (ZIP, XO, Safe Pay, Brand, Creator, Collaboration) have the meanings in the Terms. If this Policy and the Terms conflict on Personal Data, this Policy prevails for privacy and data protection only. The Terms continue to govern everything else.

Necessary processing to run your account, Collaborations, Safe Pay, KYC, tax, and security is described here and is not based on mere browsing. Optional processing (marketing, non-essential analytics where consent is required) needs a separate consent you can withdraw. If you do not accept this Policy, do not create an account or submit Personal Data.

We may update this Policy for law, security, or Platform changes. Material changes will be notified through the Platform or email where required. The Last Updated date at the top is the current revision. Authenticated use after a material update takes effect is acknowledgment, except where DPDP requires fresh consent for a new optional purpose.

• "Applicable Data Protection Laws" means the Digital Personal Data Protection Act, 2023 and any other binding rules on Personal Data that apply to ZipXO or you.
• "Consent" means a free, specific, informed, unconditional, and unambiguous indication of agreement to processing of Personal Data, where DPDP requires it.
• "Cookies" means cookies, pixels, SDKs, local storage, and similar technologies on a browser or device.
• "Data Fiduciary" means the person who determines the purpose and means of processing Personal Data. Until incorporation, that is the persons operating the ZipXO Platform pending incorporation; thereafter Replace[LEGAL ENTITY NAME — insert on incorporation].
• "Data Principal" means the individual to whom Personal Data relates.
• "Personal Data" means any data about an identified or identifiable individual as defined under DPDP.
• "Processing" means any operation on Personal Data, including collection, storage, use, sharing, transfer, or deletion.
• "Sensitive Personal Data" is not a separate DPDP category in the same way as older Indian SPDI rules; we still treat KYC, government IDs, and payment identifiers with stricter access controls.

• Directly from you (registration, KYC, briefs, chat, support).
• From official social APIs after you authorise them (Google, Meta, YouTube).
• From Razorpay (payment status, payout, refund, chargeback signals).
• Generated by the Platform (logs, audit trails, matching scores, verification status).

You must only submit Personal Data you are allowed to share. Brands and Creators remain responsible for Personal Data they put in briefs, Deliverables, or chat about third parties.

Withdrawing marketing or social-connect consent does not unwind processing already done, or processing we must keep for tax, AML, Disputes, or security.

• Essential: session cookie (zipxo_session) and security cookies needed to stay logged in. Disabling these breaks the app.
• Errors: Sentry may receive technical diagnostics (which can include IP or device data) to fix crashes.
• Push: OneSignal may store a device push token if you allow notifications.

You can block non-essential cookies in your browser. Marketing is not bundled into the session cookie; it needs its own consent.

You may sign in with Google. Creators may connect Instagram, YouTube, or Facebook through official OAuth/APIs. We request only the permissions needed to verify the account and show analytics to Brands. We do not take passwords for those platforms.

Disconnecting a social account stops future collection from that platform. Analytics already used for a completed Collaboration may be kept with that deal record. You can also revoke access in Google or Meta account settings. If Meta or Google change or shut an API, related features may stop; that is not extra collection by us.

We may use automated systems on Personal Data and usage data to match Brands and Creators, rank search, flag fraud or spam, and assist moderation. These are operational tools. They are not legal, tax, or investment advice — the Terms cover that disclaimer.

We do not make solely automated decisions that produce legal or similarly significant effects (for example, a court-like determination of your rights) without human involvement where DPDP or other law requires it. Account enforcement and Safe Pay fund routing are not decided by an unsupervised model acting as a court.

ZipXO does not sell, rent, or trade Personal Data for money. Sharing happens only as described here.

Each processor is bound by its contract and its own policy. We also disclose data if required by law, a court, or a regulator, or to protect Users and the Platform from crime or serious harm.

The Platform is a marketplace. Creator profiles and connected social statistics are visible to Brands. During a Collaboration, both parties see what they need to finish the deal (names, submissions, shipping details after Safe Pay). PAN, bank, and UPI details are never shown to the other User.

Some processors (including Supabase, Stream, Cloudinary, Sentry, Netlify, Railway, Google, and Meta) may process or store Personal Data outside India. We transfer data only as needed to run the Platform and in line with DPDP and any government restriction list then in force. We use contracts, access control, and encryption in transit as reasonable safeguards. Destination laws may differ from India's.

• Account delete from Settings: the account is hidden immediately. You may restore it by signing in within 30 days.
• After that window, Personal Data is removed from active systems. Encrypted backups and logs are cleared within 90 days.
• Transaction, invoice, KYC, and tax records are retained as required by Indian tax, accounting, and AML law (typically several years), in identifiable or anonymised form as the law allows.
• Dispute files are kept as long as needed to resolve and document the Dispute.
• If you do not use ZipXO for 3 years, we will send a 48-hour warning (push and in-app). If you still do not sign in, we erase Personal Data from active systems the same way as a completed deletion, subject to legal holds.

Subject to DPDP and legal exceptions, you may: access Personal Data we hold; correct it; request erasure (subject to legal retention); withdraw consent for optional processing (marketing, connected social accounts); nominate another person to exercise rights; and raise a grievance.

Send requests to privacy@zipxo.com or the Grievance Officer below. We may need to verify identity. We acknowledge grievances within 24 hours and aim to dispose of them within 15 days.

ZipXO is not for anyone under 18. We do not knowingly collect Personal Data from minors. If you believe a minor has an account, contact us and we will delete it.

We use encryption in transit, access controls, and restricted handling of KYC. No system is perfectly secure. Keep your credentials confidential and tell us if you suspect unauthorised access.

If a Personal Data breach is likely to cause harm, we will investigate, contain it, and notify affected Data Principals and the Data Protection Board where DPDP requires. This Policy does not add a liability cap; that is in the Terms.

Promotional email or push is sent only with consent (or another lawful basis if the law allows). You can opt out in settings or the message itself. We still send service messages (payments, deadlines, security, legal notices).

• Data Fiduciary: Replace[LEGAL ENTITY NAME — insert on incorporation] (pending incorporation: the persons operating the ZipXO Platform pending incorporation)
• CIN: Replace[CIN — insert on incorporation]
• GSTIN: Replace[GSTIN — insert when registered]
• Correspondence address: Ho no 4673, Sector 11, Jind, Haryana, 126102
• Grievance Officer: Replace[GRIEVANCE OFFICER NAME / PHONE — insert]
• Grievance email: grievance@zipxo.com
• Privacy requests: privacy@zipxo.com
• Support: Zipxosupport@zipxo.com
• Website: https://www.zipxo.in

The Grievance Officer name and phone are placeholders until appointment. Use the grievance and privacy emails above in the meantime.