Privacy Policy

ZuVoCo ("we", "our", "us") is operated by Tabularise Technologies India Private Limited. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Platform").

By accessing or using ZuVoCo, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

Account Information: Name, email address, mobile number (optional), UPI VPA (encrypted at rest).

Transaction Data: Withdrawal requests, tip transactions, reward credits, payout details (UTR numbers).

Usage Data: Pages visited, stores browsed, affiliate link clicks, shopping assistant conversations, coupon submissions.

Device Information: Browser type, operating system, device identifiers (for PWA/TWA functionality).

We do NOT collect: Bank account passwords, full UPI PINs, Aadhaar numbers, or PAN details.

We use collected information to:

• Provide, maintain, and improve the Platform
• Process withdrawals and tip payments via RazorpayX
• Distribute participation rewards based on shopping activity
• Send transaction notifications via WhatsApp and email (Zoho SMTP)
• Power the AI Shopping Assistant ("Krish") to provide personalized recommendations
• Track affiliate clicks for commission attribution (using anonymized click IDs, not personal data)
• Prevent fraud, abuse, and duplicate transactions

We share data only as necessary with:

• Razorpay / RazorpayX: Payment processing and payouts (name, VPA/bank details for transfers)
• Affiliate Networks: Anonymized click IDs and sub-IDs only (INRDeals, Cuelinks, VCommission, Admitad, EarnKaro, CashKaro). No personal data is shared.
• Amazon Associates: Tracking tag appended to URLs. No personal data shared.
• WhatsApp Business (Meta): Phone number for transaction notifications (only if you enable WhatsApp alerts)
• OpenAI: Shopping queries processed for AI recommendations. No personal identifiers sent.
• Google AdSense: Standard ad serving. Subject to Google's privacy policy.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We implement industry-standard security measures:

• UPI VPA encrypted at rest using Fernet (AES-128-CBC) encryption
• Passwords hashed with bcrypt (one-way hashing with salt)
• JWT tokens for session authentication with expiration
• HTTPS/TLS encryption for all data in transit
• RazorpayX IP whitelisting for payout API security
• Idempotency keys to prevent duplicate transactions

We retain your data as long as your account is active. Upon account deletion:

• Personal data (name, email, phone) is deleted within 30 days
• Transaction records are anonymized and retained for 7 years (legal/tax compliance)
• Affiliate click logs are anonymized (user ID removed)

You have the right to:

• Access: View your personal data via your Profile
• Correction: Update your profile information at any time
• Deletion: Request account deletion via the in-app Settings or the public deletion page
• Portability: Request an export of your data by contacting us
• Withdraw Consent: Disable WhatsApp notifications, stop using the Platform

ZuVoCo is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us immediately.

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Effective Date". Continued use after changes constitutes acceptance.

For privacy-related inquiries:

Tabularise Technologies India Private Limited
Email: zuvoco.rewards@tabularise.com
Platform: ZuVoCo (www.zuvoco.com)