Privacy Policy

1. Introduction

Welcome to Zoset. We are committed to protecting your personal data and respecting your privacy. Zoset is a premium monorepo outfit listing marketplace operating via our website, mobile application, and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, and share your personal information when you access our services.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection and use of your data as outlined in this policy, alongside our Terms & Conditions and Damage Policy. Your consent date and timestamp (e.g., policies_accepted_at) are recorded securely in our database.

2. Information We Collect

To facilitate a safe, circular-economy outfit marketplace, we collect various types of information from our users:

• Authentication & Credentials: We use phone number verification via One-Time Passwords (OTP) and Cloudflare Turnstile CAPTCHA. No passwords are stored.
• Profile & Account Details: First name, surname, unique Instagram-style lowercase username (immutable), gender, birthdate, and optional profile picture.
• Seller Onboarding Data: Payout details including UPI IDs and mobile numbers, required to route escrow funds back to you.
• Shop Upgrade Info: Registered Shop Name and Google Map location coordinate links for approved designer boutiques and boutique listings.
• Relational Location Data: Full shipping address, city, state, and pincode. We utilize the India Post API (api.postalpincode.in) to verify and lock valid city-pincode combinations dynamically.
• Outfit Listing Details: Title, description, size, condition, material, color swatch details, and product photos.

3. How We Use Your Information

We process your information to maintain a secure, high-conversion outfit marketplace:

• Listing & Filters: Associating your items with searchable locations, sizes, colors, and materials.
• Analytics & Metrics: We log product views and impressions in an append-only metrics log (product_metrics_log) to calculate seller analytics asynchronously, keeping page loading fast.
• Escrow Operations: Holding buyer funds in escrow and routing payouts to the seller's registered UPI ID upon successful verification of delivery.
• Listing Credits: Managing your credit balances, packaging packs, and tracking manual credit gifts from administrators.

4. Information Sharing & Disclosure

We prioritize user privacy and enforce strict parameters around who can view your information:

We also route shipping tracking IDs directly to integrated courier APIs (such as DHL, Blue Dart, DTDC, Delhivery, or India Post) to automatically listen for "Delivered" events and confirm delivery milestones without using paid third-party aggregators.

5. Security & Data Retention

All database operations, authentication sessions, and transaction records run on Supabase Cloud utilizing strict Row-Level Security (RLS) policies. We retain your information as long as your account remains active.

Compliance logs (including timestamps indicating when you accepted our Privacy Policy, Terms & Conditions, and Damage Policy) are retained permanently to protect all marketplace participants and coordinate disputes or returns.

6. Your Rights & Choices

You have control over how your information is configured and maintained:

• Profile Management: You can edit your first name, last name, and layout preferences in settings. Unique usernames are immutable once chosen during registration.
• Deactivating Listings: Sellers can deactivate listings or mark them as sold manually. The product status is synced in real-time to active carts using Supabase Realtime WebSockets.
• Account Deletion: You can request data erasure or account closure by contacting our support team.