Privacy Policy — Growzap

Overview & Data Fiduciary Details

TZAP Marketing (OPC) Private Limited (Growzap) operates the Growzap mobile applications (Android / iOS) and website at growzap.cloud.

This Privacy Policy details how we collect, store, process, and safeguard personal data under the Digital Personal Data Protection Act, 2023 (DPDPA), Information Technology Act, 2000 (IT Rules 2021), Consumer Protection Rules 2020, and Google Play Developer Program Policies.

Categories of Information We Collect

• Account, Profile & Demographics: Full name, verified mobile number, email, age range/date of birth, gender, language preferences, WhatsApp number, avatar, and login credentials.
• Task Execution & Verification Signals: Interaction timestamps, campaign ID, dwell time, historical engagement metrics, submitted proofs, keyword/channel match logs, and server-side verification signals.
• Sponsor Targeting & Campaign Criteria: Age brackets, regions, interests, and other parameters used strictly to match relevant tasks.
• Coins, Wallet & Ledger Records: Four-ledger balances, transaction history, and redemption orders.
• Payment & Payout Data (Razorpay): Order IDs, payment tokens, payment method, GST details, UPI ID, and verified Bank Account & IFSC. Raw card numbers, CVVs, and netbanking passwords are NEVER stored.
• Referral & Network Information: Unique referral codes, linked inviter/invitee account IDs, and commission logs.
• Device & Diagnostic Data: Device model, OS version, unique device IDs, IP address, network carrier, approximate IP region, app version, screen/battery verification signals, and crash telemetry.

Mobile App Permissions & Transparency

• Storage / Media Access: Requested only when you manually upload a task verification screenshot. We NEVER scan your personal gallery.
• Notifications: Used for verification results, coin credits, payout status, and security alerts.
• Network State & Internet: Used for server connectivity and ledger synchronization.
• Foreground Service: Used solely during an active task session to track dwell time accurately.
• We do NOT access background location, microphone, contacts, SMS inbox contents, or call logs.

How We Use & Process Your Data

• Facilitating registration, authentication, and one-device-one-account security.
• Matching tailored tasks using profile, age group, region, engagement history, and sponsor criteria.
• Operating the Verification Engine and preventing bots and emulators.
• Maintaining the four-part Coin ledger, calculating rewards, and processing Razorpay payouts.
• Complying with GST invoicing and TDS withholding.
• Customer support and dispute resolution.
• We NEVER sell, rent, or trade personal data to third-party brokers or advertisers.

Third-Party Service Providers

• Payment Aggregator: Razorpay Software Private Limited (RBI-authorized).
• Cloud Infrastructure: AWS / Google Cloud (Indian data centers).
• Telemetry & Auth: Firebase / Google Cloud APIs.
• Logistics & Couriers: Third-party logistics partners for physical marketplace delivery.

Data Security & Encryption

• TLS 1.3 / HTTPS encryption in transit and AES-256 at rest.
• Server-authoritative ledger; the client holds zero financial balance authority.
• Role-based access control (RBAC) and mandatory 2FA on administrative portals.

30-Day Data Retention & Account Deletion Commitment

• Delete inside the app through Settings > Profile > Delete Account, or email info@growzap.cloud.
• Within 30 calendar days of a verified request, personal data, uploaded screenshots, and device profiles are permanently purged or irreversibly anonymized. Statutory tax and audit records are retained only as required by Indian law.

Children's Privacy

Growzap is intended for individuals aged 18+ (or 13–17 with verifiable guardian consent). Unauthorized accounts belonging to minors under 13 are promptly purged.

Your Rights as a Data Principal (DPDPA 2023)

You have the right to access data summaries, correct inaccuracies, withdraw consent, and seek grievance redressal.

Grievance Officer & Statutory Disclosures

• Entity: TZAP Marketing (OPC) Private Limited
• Email: info@growzap.cloud | Phone: +91 74775 64888
• Resolution SLA: Acknowledgment within 24–48 hours; resolution within 15 calendar days.