Privacy Policy

ZipXO ("ZipXO," "we," "our," or "us") is operated by the persons operating the ZipXO Platform pending incorporation. This Policy applies to Personal Data processed in connection with zipxo.in, the ZipXO applications, and related services, whether you are a visitor, Brand, Creator, authorised representative, or someone who writes to us.

It applies however you access the Platform (website, app, or integration). Statutory rights under the Digital Personal Data Protection Act, 2023 and other Applicable Data Protection Laws are not limited by this Policy.

This Policy should be read with the Terms and Conditions. Capitalised commercial terms (ZIP, XO, Safe Pay, Brand, Creator, Collaboration) have the meanings in the Terms. If this Policy and the Terms conflict on Personal Data, this Policy prevails for privacy and data protection only. The Terms continue to govern everything else.

Necessary processing to run your account, Collaborations, Safe Pay, KYC, tax, and security is described here and is not based on mere browsing. Optional processing (marketing, non-essential analytics where consent is required) needs a separate consent you can withdraw. If you do not accept this Policy, do not create an account or submit Personal Data.

We may update this Policy for law, security, or Platform changes. Material changes will be notified through the Platform or email where required. The Last Updated date at the top is the current revision. Authenticated use after a material update takes effect is acknowledgment, except where DPDP requires fresh consent for a new optional purpose.

• "Applicable Data Protection Laws" means the Digital Personal Data Protection Act, 2023 and any other binding rules on Personal Data that apply to ZipXO or you.
• "Consent" means a free, specific, informed, unconditional, and unambiguous indication of agreement to processing of Personal Data, where DPDP requires it.
• "Cookies" means cookies, pixels, SDKs, local storage, and similar technologies on a browser or device.
• "Data Fiduciary" means the person who determines the purpose and means of processing Personal Data. Until incorporation, that is the persons operating the ZipXO Platform pending incorporation; after incorporation, the incorporated entity named in an updated version of this Policy.
• "Data Principal" means the individual to whom Personal Data relates.
• "Personal Data" means any data about an identified or identifiable individual as defined under DPDP.
• "Processing" means any operation on Personal Data, including collection, storage, use, sharing, transfer, or deletion.
• "Sensitive Personal Data" is not a separate DPDP category in the same way as older Indian SPDI rules; we still treat KYC, government IDs, and payment identifiers with stricter access controls.

• Directly from you (registration, KYC, briefs, chat, support).
• From official social APIs after you authorise them (Google, Meta, YouTube).
• From Razorpay (payment status, payout, refund, chargeback signals).
• Generated by the Platform (logs, audit trails, matching scores, verification status).

You must only submit Personal Data you are allowed to share. Brands and Creators remain responsible for Personal Data they put in briefs, Deliverables, or chat about third parties.

Withdrawing marketing or social-connect consent does not unwind processing already done, or processing we must keep for tax, AML, Disputes, or security.

• Essential: session cookie (zipxo_session) and security cookies needed to stay logged in. Disabling these breaks the app.
• Errors: Sentry may receive technical diagnostics (which can include IP or device data) to fix crashes.
• Product analytics: PostHog may receive anonymous and authenticated usage events (page views, funnel steps) and masked session recordings. Recordings are off on login, chat, onboarding, and payment screens. Inputs are masked. We do not send email, phone, passwords, OTPs, or payment details as analytics identifiers.
• Push: OneSignal may store a device push token if you allow notifications.

You can block non-essential cookies in your browser. Marketing is not bundled into the session cookie; it needs its own consent.

You may sign in with Google using your email and basic profile only. That sign-in does not grant YouTube channel or analytics access. Creators may separately connect Instagram, YouTube, or Facebook through official OAuth/APIs. We request only the permissions needed to verify the account and show analytics to Brands. We do not take passwords for those platforms.

When you connect YouTube, with your consent we use Google APIs in two ways. youtube.readonly is authenticated YouTube Data API access to list channels you own (including Brand Accounts), read channel identity (name, handle, profile image, and channel ID), and read owner-authorized statistics such as subscriber count, including when the public count is hidden. We use that to verify you own the channel, set marketplace tiers and rates, show the connected channel on your profile, and match live payout posts to that stored channel ID.

yt-analytics.readonly is separate: it reads private YouTube Analytics reports for your connected channel (and, after a Collaboration, for a specific video) such as views, watch time, and audience breakdowns when Google provides them. Those reports are shown to you and, as a summary on your profile, to Brands considering a Collaboration.

After the channel is identified, public profile video galleries, public view counts, and public video lookup used to check a live post URL use the YouTube Data API with an API key. Those public lookups are not why youtube.readonly is requested.

OAuth tokens are stored encrypted. Analytics are cached in short-lived snapshots on our systems. Connected channel stats may be visible to Brands as part of the marketplace. Retention and deletion follow Section 11 of this Policy and our Data deletion page. Disconnect YouTube in ZipXO Settings to stop future collection, and revoke ZipXO at https://myaccount.google.com/permissions.

Disconnecting a social account stops future collection from that platform. Analytics already used for a completed Collaboration may be kept with that deal record. You can also revoke access in Google or Meta account settings. If Meta or Google change or shut an API, related features may stop; that is not extra collection by us.

We may use automated systems on Personal Data and usage data to match Brands and Creators, rank search, flag fraud or spam, and assist moderation. These are operational tools. They are not legal, tax, or investment advice — the Terms cover that disclaimer.

We do not make solely automated decisions that produce legal or similarly significant effects (for example, a court-like determination of your rights) without human involvement where DPDP or other law requires it. Account enforcement and Safe Pay fund routing are not decided by an unsupervised model acting as a court.

ZipXO does not sell, rent, or trade Personal Data for money. Sharing happens only as described here.

Each processor is bound by its contract and its own policy. We also disclose data if required by law, a court, or a regulator, or to protect Users and the Platform from crime or serious harm.

The Platform is a marketplace. Creator profiles and connected social statistics are visible to Brands. During a Collaboration, both parties see what they need to finish the deal (names, submissions, shipping details after Safe Pay). PAN, bank, and UPI details are never shown to the other User.

Some processors (including Supabase, Stream, Cloudinary, Sentry, PostHog, Netlify, Railway, Google, and Meta) may process or store Personal Data outside India. We transfer data only as needed to run the Platform and in line with DPDP and any government restriction list then in force. We use contracts, access control, and encryption in transit as reasonable safeguards. Destination laws may differ from India's.

• Account delete from Settings: the account is hidden immediately. You may restore it by signing in within 30 days.
• After that window, Personal Data is removed from active systems. Encrypted backups and logs are cleared within 90 days.
• Transaction, invoice, KYC, and tax records are retained as required by Indian tax, accounting, and AML law (typically several years), in identifiable or anonymised form as the law allows.
• Dispute files are kept as long as needed to resolve and document the Dispute.
• If you do not use ZipXO for 3 years, we will send a 48-hour warning (push and in-app). If you still do not sign in, we erase Personal Data from active systems the same way as a completed deletion, subject to legal holds.

Subject to DPDP and legal exceptions, you may: access Personal Data we hold; correct it; request erasure (subject to legal retention); withdraw consent for optional processing (marketing, connected social accounts); nominate another person to exercise rights; and raise a grievance.

Send requests to privacy@zipxo.com or the Grievance Officer below. We may need to verify identity. We acknowledge grievances within 24 hours and aim to dispose of them within 15 days.

ZipXO is not for anyone under 18. We do not knowingly collect Personal Data from minors. If you believe a minor has an account, contact us and we will delete it.

We use encryption in transit, access controls, and restricted handling of KYC. No system is perfectly secure. Keep your credentials confidential and tell us if you suspect unauthorised access.

If a Personal Data breach is likely to cause harm, we will investigate, contain it, and notify affected Data Principals and the Data Protection Board where DPDP requires. This Policy does not add a liability cap; that is in the Terms.

Promotional email or push is sent only with consent (or another lawful basis if the law allows). You can opt out in settings or the message itself. We still send service messages (payments, deadlines, security, legal notices).

• Data Fiduciary: ZipXO (the persons operating the ZipXO Platform pending incorporation)
• CIN and GSTIN will be published on this page after incorporation and GST registration.
• Correspondence address: Ho no 4673, Sector 11, Jind, Haryana, 126102
• Grievance Officer: Tarun Awasthi, +91-7018556080
• Grievance email: grievance@zipxo.com
• Privacy requests: privacy@zipxo.com
• Support: Zipxosupport@zipxo.com
• Website: https://zipxo.in