Privacy Policy

1. Data Collection

We collect data necessary to provide our services. Specifically:

• Instagram Insights, Facebook Page data, and YouTube Analytics data via respective APIs to analyse performance and engagement metrics.
• Personal information you provide during registration, such as name, email, and profile details.
• Usage data, including how you interact with our platform.
• Anonymised activity and engagement signals used to power AI-driven features such as creator–brand matching and campaign recommendations.
• Event participation data — if you register for or host a physical/hybrid Event on the Platform, we collect additional details such as government ID (encrypted), date of birth, gender, emergency contact, dietary and accessibility needs, travel and accommodation preferences, and, where applicable, details of an accompanying guest. See Section 2A for how this data is used.

2. Purpose of Data Collection

The data we collect is used solely to enhance your experience on Zylolo:

• To provide ROI tracking and collaboration analytics for creators and brands.
• To personalise your dashboard and recommendations.
• To improve our services and ensure platform security.
• To power AI features including creator discovery, campaign matching, performance insights, and fraud detection — using anonymised data only.

2A. Event Participation Data

• Government ID numbers collected for Event registration are encrypted before storage (AES-256) and are never displayed in plain text to Brands, other Creators, or Zylolo staff outside of identity verification needs.
• Travel and accommodation details (e.g., flight preference, arrival/departure dates) are shared only with the airline, hotel, or transport partner needed to fulfil that specific booking, and with the hosting Brand to the extent necessary to run the Event.
• Photo and media usage consent collected at registration determines whether Event photography or recordings may be used for promotional purposes; you may decline this consent while still attending.
• Event participation data (government ID, emergency contact, travel/accommodation details) is retained only for the duration of the Event and a reasonable post-event reconciliation period, and is purged no later than 90 days after the Event concludes, except where retention is required for financial or legal record-keeping.

3. AI & Automated Processing

Zylolo uses artificial intelligence and machine learning to power features across the platform:

• AI is used for creator–brand matching, campaign recommendations, analytics insights, content suggestions, and fraud detection.
• Your anonymised activity and performance data may be used to train and improve these AI models strictly within the platform. Your personally identifiable information is never used for external AI training or sold to third parties.
• AI-generated recommendations and scores are for informational purposes only and do not guarantee outcomes.
• You have the right to request a human review of any automated decision that significantly affects you by contacting support@zylolo.com.

4. Data Storage

Your data is securely stored and handled using industry-standard security measures, including encryption, access controls, and regular security reviews, to protect your information from unauthorised access, alteration, or disclosure.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as required by law or to provide our services (e.g., payment processing via Razorpay, integrating with Meta and Google APIs, or sharing booking details with airline/hotel/transport partners solely to fulfil Event travel arrangements as described in Section 2A).

5A. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, data is purged within 30 days except where retention is required by law (e.g., financial records retained for 7 years under Indian tax law, and Event participation data retained per Section 2A). Brand business and transaction records are retained for a minimum of 7 years as required by Indian tax law.

6. User Rights

You have the right to:

• Access the personal data we hold about you.
• Request corrections to inaccurate data.
• Request deletion of your data. To exercise this right, please contact us at support@zylolo.com.
• Request a human review of automated decisions that significantly affect you.

7. Cookies and Tracking

We may use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or through our platform.

9. How to Delete Your Data

To delete your account and all associated data from Zylolo, please go to your Profile Settings and click 'Delete Account' or email us at support@zylolo.com.

10. Grievances & Contact

For any privacy concerns, data requests, or grievances under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, please contact us at support@zylolo.com. We will respond within 30 days of receipt.

Grievance Officer: Vishal Manian, Founder and CEO — reachable at support@zylolo.com, Zylolo, Innov8 Prestige Tech Platina, 11th Floor, N032/2,34/1, Kadabisanahalli, Bengaluru, Karnataka 560087, India.

11. Material Changes & Version History

This is version 2.0 of our Privacy Policy, effective June 27, 2026 (previous version: 1.0, effective May 1, 2026). This update adds data handling disclosures for our new Events feature (Section 2A) and clarifies data retention periods (Section 5A). Because this is a material change to the categories of data we collect and how long we retain it, existing Users will be asked to review and re-confirm their consent the next time they log in. Continuing to use the Platform without completing this step may limit access to certain features.