Privacy Policy

Your privacy matters. This policy explains what personal data Zolwiz collects, why we collect it, how we use it, and what rights you have over it. We have written this in plain language because you deserve to understand it.

Who collects your data

Zolwiz Labs (OPC) Private Limited, incorporated in Chennai, Tamil Nadu, India, is the data fiduciary responsible for your personal data. If you have any privacy-related questions or requests, contact us at hey@zolwiz.com.

What data we collect

We collect the following categories of personal data:

• Identity information — your name and email address, provided when you place an order or register on the platform.
• Payment information — payment is processed by Razorpay. Zolwiz receives a confirmation of payment but does not store your card number, bank account details, or any other sensitive payment credentials.
• Brief content — the brand brief you submit through the dashboard, including your brand description, target audience, references, and any files you upload.
• Project data — messages sent through the dashboard, feedback submitted on design concepts, and files delivered as part of your project.
• Usage data — basic technical data such as your IP address and browser type, collected automatically when you visit the site, used to maintain site security and performance.

How we use your data

We use your personal data to:

• Set up and manage your client account and project.
• Deliver the design services you have purchased, including reviewing your brief and delivering files.
• Send transactional emails — such as your login link, project status updates, and file delivery notifications.
• Respond to questions or support requests.
• Improve the Zolwiz platform and identify and fix technical issues.

We do not use your data for advertising, profiling, or any purpose unrelated to the services you have engaged us for.

Data storage

Your data is stored securely using Supabase, a managed database platform that runs on AWS infrastructure. Project files (briefs, reference uploads, and delivered design files) are stored in Supabase Storage. All data is encrypted at rest and in transit.

Third-party services

We use the following third-party services to operate the platform. Each has its own privacy policy and data processing terms.

• Supabase — database, authentication, and file storage.
• Razorpay — payment processing. Razorpay handles your payment credentials directly and is PCI DSS compliant.
• Resend — transactional email delivery (login links, project notifications).
• Vercel — website and application hosting.

We share only the minimum data required for each service to function. We do not sell your personal data to any third party, ever.

Cookies

Zolwiz uses only the cookies strictly necessary to keep you logged in to your dashboard. We do not use advertising cookies, tracking pixels, or analytics cookies that follow you across other websites.

Data retention

We retain your personal data and project data for two years after your project is marked complete. After that period, data is deleted unless you have an ongoing relationship with us or applicable law requires longer retention.

If you would like your data deleted earlier, contact us at hey@zolwiz.com and we will process your request within a reasonable timeframe.

International data transfers

Zolwiz is based in India, but some of the third-party services we use (such as Supabase and Vercel) process data on servers located outside India. Where this occurs, we ensure appropriate safeguards are in place in accordance with applicable Indian data protection law.

Your rights

Under India's Digital Personal Data Protection Act 2023 (DPDPA) and other applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — request that inaccurate or incomplete data be corrected.
• Erase — request deletion of your personal data, subject to any legal obligations we have to retain it.
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at hey@zolwiz.com with your request. We will respond within 30 days.

Compliance

This policy is intended to comply with India's Digital Personal Data Protection Act 2023 (DPDPA). We will update it as the regulatory framework evolves.

Changes to this policy

If we make material changes to this policy, we will notify you by email or through a prominent notice on the site. The current version will always be available at zolwiz.com/privacy.

Contact

Questions about your data or this policy? hey@zolwiz.com