Privacy Policy

Last updated: 22 July 2026

This Privacy Policy describes how ZYRO ("ZYRO", "we", "us") collects, uses, discloses and safeguards your personal information when you use our mobile applications, website, Admin console and related services (collectively, the "Platform"). By using ZYRO, you agree to the terms below.

1. Information we collect

• Account information — name, phone number, email, delivery addresses.
• Order information — items ordered, order value, payment method, delivery timestamps.
• Device & usage data — IP address, device model, OS version, app version, pages viewed.
• Location data — precise GPS location (only while the app is in use) to show nearby shops and enable delivery.
• Payment data — handled entirely by Razorpay; we store only masked references (last-4 of card, UPI ID, transaction ID).

2. How we use your information

• To fulfil your orders and enable delivery.
• To provide customer support and respond to your queries.
• To process payments and refunds via Razorpay.
• To send transactional notifications about your order status.
• To improve our services, prevent fraud and enforce our Terms.
• To comply with legal obligations under Indian law.

3. Who we share your information with

• Shops — your name, order details and delivery address so they can prepare your order.
• Delivery partners — your name, delivery address and phone number to complete delivery.
• Payment processor — Razorpay Software Private Limited, for payment processing.
• Service providers — Firebase (authentication, notifications), MongoDB Atlas (data storage), analytics tools, all bound by data-processing agreements.
• Government / law-enforcement — when compelled by valid legal request.

We do not sell your personal information.

4. Data retention

We retain your account information for as long as your account is active. Order and payment records are retained for at least 7 years to meet Indian tax and accounting requirements. On account deletion, we anonymise or delete personal identifiers except where retention is required by law.

5. Your rights

• Access, correct or update your personal information from the app settings.
• Delete your account by emailing supportzyro.in@gmail.com.
• Withdraw consent for optional data uses (e.g. marketing notifications).
• Lodge a grievance with our Grievance Officer (see below).

6. Security

All communication with the ZYRO Platform is encrypted in transit (HTTPS/TLS 1.2+). Passwords are never stored — we use Firebase Phone OTP authentication. Payment data is handled exclusively by Razorpay's PCI-DSS certified gateway.

7. Cookies & analytics

The Web Admin uses only essential cookies for authentication sessions. We use privacy-respecting analytics that do not fingerprint or profile individual users.

8. Children

ZYRO is not intended for anyone under 18. If we learn we have inadvertently collected data from a minor, we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the app or email.

10. Grievance officer

Per the Information Technology (Reasonable Security Practices and Procedures) Rules, 2011, our Grievance Officer is:

Name: ZYRO Grievance Officer
Email: supportzyro.in@gmail.com
Response time: within 15 days of receipt.