Privacy Policy

1. Overview

Zuku ("we", "our", or "us") operates the eCommerce SaaS platform at zuku.live. This Privacy Policy applies to all users of the platform including Merchants (store owners) and visitors to our website.

By using the Zuku platform, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of our services.

2. Information We Collect

2.1 Information You Provide Directly

Category	Examples
Account Information	Name, email address, password (hashed), phone number
Business Details	Store name, business type, GST number (if provided), address
Payment Information	Subscription payment records (we do not store card numbers)
Store Content	Product listings, images, descriptions, categories, pricing
Communications	Support emails, feedback, and messages sent to us

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, clicks, and actions taken on the platform
• Device Information: IP address, browser type, operating system, device type
• Log Data: Server logs including error reports, access times, and referring URLs
• Cookies: Session tokens, preference cookies, and analytics identifiers (see Section 5)

2.3 Information From Third Parties

We may receive information from third-party services you connect to Zuku, such as payment gateways (transaction confirmations), or analytics providers.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the platform: Creating your account, processing subscriptions, enabling store features
• To communicate with you: Sending transaction receipts, system alerts, support responses, and service updates
• To improve our services: Analysing usage patterns to fix bugs, improve features, and develop new capabilities
• To enforce our Terms: Detecting fraud, abuse, and violations of our Terms and Conditions
• To comply with legal obligations: Responding to lawful requests from government or regulatory authorities
• To personalise your experience: Remembering your preferences and settings

We will not use your personal data for purposes incompatible with those stated above without obtaining your consent.

4. Sharing of Information

Zuku does not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service Providers: Third-party vendors who assist us in operating the platform (hosting, email delivery, payment processing). These parties are bound by confidentiality obligations and may only use your data to provide their services to us.
• Payment Gateways: When you process subscription payments, relevant information is shared with payment processors such as Razorpay or Paytm. Their own privacy policies apply to such processing.
• Legal Compliance: We may disclose your information if required to do so by law, court order, or government authority under applicable Indian law, including the Information Technology Act 2000.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to equivalent privacy protections.
• With Your Consent: In any other circumstance, only with your explicit prior consent.

5. Cookies & Tracking Technologies

Zuku uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

Type	Purpose
Essential Cookies	Required for the platform to function (login sessions, CSRF protection). Cannot be disabled.
Preference Cookies	Remember your settings such as language, theme, and display preferences.
Analytics Cookies	Collect anonymous usage data to help us understand how the platform is used and how to improve it.

You can control cookie settings through your browser. Note that disabling certain cookies may affect platform functionality.

6. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures including:

• HTTPS encryption for all data transmitted to and from the platform
• Hashed storage of passwords using industry-standard algorithms
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews and vulnerability assessments
• Secure cloud infrastructure with reputable hosting providers

Despite these measures, no security system is impenetrable. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained for the duration of your subscription and for up to 30 days after account closure
• Transaction records: Retained for 7 years as required by Indian tax and accounting regulations
• Support communications: Retained for up to 3 years
• Usage logs: Retained for up to 12 months

After the applicable retention period, your data will be securely deleted or anonymised.

8. Your Rights

As a user of the Zuku platform, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data (subject to legal obligations)
• Right to Portability: Request your data in a structured, machine-readable format
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time
• Right to Object: Object to processing of your data for marketing purposes

To exercise any of these rights, please contact us at support@zuku.live. We will respond to your request within 30 days. We may require proof of identity before processing requests.

9. Third-Party Services

The Zuku platform integrates with third-party services to deliver its features. Each of these services has its own privacy policy that governs their handling of your data:

• Payment Gateways (Razorpay, Paytm, etc.) — for processing subscription and store payments
• WhatsApp Business API — for order notification delivery
• Google Fonts & CDN Services — for platform styling and performance
• Cloud Hosting Provider — for platform infrastructure and data storage

Zuku is not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

10. Children's Privacy

The Zuku platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a person under 18, please contact us immediately at support@zuku.live and we will promptly delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered Merchants via email at the address associated with their account
• Display a notice on the platform dashboard

We encourage you to review this Privacy Policy periodically. Continued use of the platform following notification of changes constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Privacy team:

• Email: support@zuku.live
• Website: www.zuku.live
• Subject Line: Privacy Policy Enquiry

We are committed to resolving any privacy concerns promptly and transparently.