1. Introduction
This Privacy Policy explains how Zaplo ("we", "our", "the app") collects, uses, shares, and protects information from Buyers, Sellers, and Delivery Partners who use our platform. By using Zaplo, you agree to the practices described here.
2. Information we collect
- Account information: name, phone number, username, and password (stored securely as a hashed value, never in plain text).
- Location data: with your permission, we collect precise GPS location — for Buyers, to calculate delivery charges and show your delivery address; for Sellers, to set your shop location; for Delivery Partners, to show nearby orders and share live tracking with the Buyer during delivery.
- Order information: order history, items ordered, delivery address, and order status.
- Payment information: Zaplo does not process online payments and does not collect or store card, UPI, or bank credentials from Buyers. Payment for orders is made directly between the Buyer and Seller — the Seller displays a QR code and the Buyer pays using their own UPI or payment app of choice. Zaplo only records that an order was marked as paid; it does not see or store the transaction details.
- Seller payout details: for Sellers, UPI ID and/or bank account details (account holder name, bank name, account number, IFSC code) displayed on their shop profile so Buyers can pay them directly. These details are shown to Buyers as part of the QR/payment flow and are not processed by any third-party payment gateway.
- Delivery Partner details: name, phone number, and any identity or vehicle verification details required to approve a Delivery Partner account.
- Photos: product images uploaded by Sellers, stored via Cloudinary.
- Reviews and ratings: any reviews or ratings you submit for products or shops.
- Device and usage data: basic technical information (such as device type, app version, and app interactions) used to maintain and improve the app.
Note: update the Delivery Partner bullet above with the exact KYC fields you collect (e.g. driving licence number, vehicle registration number) if applicable — this is currently a placeholder.
3. How we use your information
- To create and manage your account, and verify your identity when you log in.
- To process and fulfil your orders, including calculating delivery charges based on distance.
- To display Seller payment details (QR code/UPI ID) to Buyers so payment can be completed directly.
- To show live order tracking between Delivery Partners and Buyers.
- To send you order-related notifications.
- To maintain platform safety, including Seller and Delivery Partner approval and account moderation.
- To respond to support requests and resolve disputes.
4. How we share your information
We do not sell your personal information. We share limited information only as needed to operate the platform:
- Buyers and Sellers/Delivery Partners: to fulfil an order, we share the Buyer's delivery address and phone number with the assigned Seller and Delivery Partner, and the Seller's shop and payment details with the Buyer.
- Cloudinary: for hosting product images.
- Supabase (PostgreSQL): our database provider, which stores your account and order data securely.
- We may disclose information if required by law, legal process, or to protect the safety of our users.
5. Data retention
We retain your account and order data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution requirements. If you request account deletion, we delete or anonymise your personal data within a reasonable timeframe, except where retention is required by law.
6. Data security
We use industry-standard measures to protect your data, including encrypted password storage (bcrypt), JWT-based authentication, and HTTPS encryption for all data transmitted between your device and our servers.
7. Your rights and choices
- You can choose whether to grant location permission; some features (like delivery charge calculation and live tracking) require it to function.
- You can view and update your account details from within the app.
- You can request a copy of the personal data we hold about you by contacting us below.
- To request deletion of your account and associated data, visit our Account Deletion page.
8. Children's privacy
Zaplo is not directed at children under 18. We do not knowingly collect personal information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. Continued use of the app after changes are posted means you accept the revised policy.