Privacy Policy

Platform: Zepo IT Effective Date: May 5, 2026 Jurisdiction: Republic of India

1. Introduction

Zepo IT ("we," "us," "our") is committed to protecting the privacy and personal data of all Users of its mobile marketplace platform. This Privacy Policy ("Policy") describes the types of information we collect, how we use and store it, and the rights available to Users with respect to their personal data.

This Policy is published in compliance with applicable Indian data protection principles, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and emerging obligations under the Digital Personal Data Protection Act, 2023.

By using the Platform, you consent to the collection and use of your information as described in this Policy.

2. Information We Collect

2.1 Categories of Personal Data Collected

We collect the following categories of personal data from Users:

Category

Data Points

Identity Information

Full name, profile photograph

Contact Information

Registered email address

Financial Information

Bank account details, UPI IDs (for payment disbursements to Editors)

Platform Activity

Project history, ratings, reviews, Warning Marks

Communications

In-platform chat messages between Clients and Editors

Technical Data

Device identifiers, IP address, app usage data (for security and analytics)

3. How We Store Your Data

3.1 Data Storage Architecture

Zepo IT employs a privacy-by-design storage architecture:

• Profile photographs and account data are stored on Zepo IT's secure servers.

• Raw footage uploaded by Clients and final edited videos produced by Editors are not stored on Zepo IT's servers. All video files are managed through the Google Drive API, whereby files are stored directly in the respective User's own Google Drive account. Zepo IT acts only as a facilitator of this integration and does not retain copies of video files on its own infrastructure.

• Chat messages are stored on the Platform's servers for a limited period for the purpose of facilitating dispute resolution and are thereafter subject to deletion in accordance with our data retention schedule.

• Financial data (bank and UPI details ) is encrypted and stored in compliance with applicable payment industry standards.

4. Data Security

4.1  Security Measures

Zepo IT implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption of sensitive financial information in transit and at rest.

• Access controls restricting employee access to personal data on a need-to-know basis.

• Secure server infrastructure with regular security audits.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. Users are advised to maintain the confidentiality of their account credentials and to notify us immediately of any suspected unauthorised access.

5. How We Use Your Data

Your personal data is collected and used exclusively for the following purposes:

• Creating and managing your User account.

• Facilitating connections between Clients and Editors.

• Processing and disbursing payments through our authorised payment gateway.

• Communicating with you regarding your account, projects, and platform updates.

• Investigating and resolving disputes between Users.

• Complying with legal obligations and regulatory requirements.

• Improving Platform functionality, safety, and user experience through aggregate analytics.

6. Data Sharing & Third-Party Disclosure

6.1 Data Sharing Policy

Zepo IT does not sell, rent, trade, or otherwise commercially transfer your personal data to any third party.

Your data may be shared only in the following limited and necessary circumstances:

• Payment Gateway Partners: Financial information is shared with our authorised payment processor(s) solely to facilitate transactions. Such partners are bound by their own privacy and data security obligations.

• Google Drive API Integration: Project files are managed through Google's API infrastructure, subject to Google's Privacy Policy and Terms of Service.

• Legal Compliance: We may disclose personal data if required to do so by law, court order, or a competent governmental or regulatory authority in India.

• Platform Safety: In cases of suspected fraud, abuse, or illegal activity, relevant data may be shared with law enforcement agencies.

7. User Rights

You have the following rights with respect to your personal data held by Zepo IT:

• Right of Access: Request a copy of the personal data we hold about you.

• Right of Correction: Request correction of inaccurate or incomplete data.

• Right of Erasure: Request deletion of your personal data, subject to our legal retention obligations.

• Account Deletion: Users can permanently delete their account and associated data directly through the 'Delete Account' option in the app's Settings    menu, or by emailing us at supportzepoit@gmail.com. Upon request, all personal data will be erased within 30 days, except where retention is legally required. 

• Right to Withdraw Consent: Withdraw consent for data processing at any time, which may affect your ability to use certain Platform features.

To exercise any of the above rights, please contact us at supportzepoit@gmail.com.

8. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Upon account deletion, personal data is anonymised or deleted within a reasonable period, except where retention is mandated by legal or regulatory obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via the Platform or your registered email address. Continued use of the Platform following such notification constitutes your acceptance of the updated Policy.