Privacy Policy

1. Who controls your data

For personal data processed to operate the Platform, the data fiduciary or controller is FoodTechBiz (OPC) Private limited operating Zatrium, at O-1003, Ajnara Daffodil, Sector 137, Noida, UP-201305. Service Providers may separately control personal data they receive to perform a Booking and must use it only for that purpose and comply with applicable law.

2. Data we collect

Account and identity data: name, nickname, photograph, age or date of birth, gender information if voluntarily provided or lawfully received, contact details, address, identity-verification status and document details.

Provider and business data: skills, experience, languages, portfolio, availability, rates, licences, business identifiers, GSTIN, PAN, MSME details, bank or payout details, rating, rating comments, testimonials and screening information.

Booking data: service requests, location, schedule, scope, price, attendance, completion records, cancellations, messages, reviews, disputes and evidence.

Payment data: transaction identifiers, payment method token, status, refunds, chargebacks, invoices and tax deductions. Full card or UPI credentials are normally processed by the payment partner, not stored by Zatrium.

Device and usage data: IP address, device identifiers, browser/app version, log events, approximate location, cookies, crash data and security signals.

Communications and support data: calls, emails, chats, complaints, preferences and consent records. Calls are recorded only after notice where required.

Data from third parties: payment providers, identity/KYC providers, business representatives, referral partners, fraud-prevention sources and publicly available professional sources, as permitted by law.

3. Aadhaar and identity data

Aadhaar use, if offered, is voluntary unless a specific law requires it. Before any verification, Zatrium will provide a clear notice and obtain consent, identify the purpose and data fields, and provide an alternative document-based route where legally possible. Verification may confirm legal name, date of birth or age, address, gender as contained in the source record, photograph and verification status. Zatrium will collect only fields needed for the stated purpose. Gender will not be required merely to browse or book ordinary services, and a User may choose “prefer not to say” for profile display. Zatrium will not retain Aadhaar biometrics, expose Aadhaar numbers to other Users or use Aadhaar data for unrelated profiling or advertising.

4. Why we use personal data

• create and secure accounts, authenticate Users and prevent impersonation;
• match Customers and Service Providers, enable profiles, requests, Bookings, communications and service completion;
• collect payments, remit payouts, issue invoices, calculate fees and comply with tax obligations;
• verify identity, eligibility, licences and business details and manage trust and safety;
• provide support, investigate complaints, process refunds and enforce agreements;
• detect fraud, abuse, security incidents and prohibited conduct;
• send transactional messages and, with the required consent, promotional communications;
• improve accessibility, reliability, search, ranking and product performance using aggregated or appropriately protected analytics;
• comply with law, court orders and lawful requests and establish or defend legal claims.

Zatrium will process personal data with consent or for a lawful purpose permitted by applicable law. Consent may be withdrawn through account settings or by contacting us, but withdrawal does not affect earlier lawful processing and may prevent us from providing a feature that needs the data.

5. Public profiles and disclosures between Users

A Service Provider profile may display the chosen nickname or professional name, photograph, skills, city, languages, experience, portfolio, availability, rates, ratings and verification badges. Legal name and necessary contact or assignment information may be disclosed to the parties when a Booking reaches the stage identified in the user interface. Zatrium will not publicly display government identifiers, bank details, full date of birth or Aadhaar number.

6. Sharing

We may share personal data only as necessary with:

• the Customer or Service Provider involved in a request or Booking;
• payment processors, banks and payout partners;
• identity, KYC, background-verification and fraud-prevention vendors;
• cloud hosting, communications, analytics, customer-support, professional and security providers bound by appropriate obligations;
• group companies, investors or a successor in a merger, financing or business transfer, subject to lawful safeguards;
• courts, regulators, tax authorities, law enforcement or emergency responders when legally required or reasonably necessary to protect rights and safety.

We do not sell personal data for money. We will not use Booking data to promote an associated seller in a manner prohibited by applicable e-commerce law, and will obtain express affirmative consent where such consent is legally required.

7. Cookies, analytics and communications

We use essential cookies or local storage for login, security and core functions. Analytics, personalisation and advertising technologies will be used only with the choice required by applicable law. Users can manage non-essential choices through the consent interface or browser settings. Transactional messages may still be sent after marketing opt-out. Promotional email, SMS, WhatsApp or calls will follow applicable consent and preference rules.

8. Retention

We retain personal data only for as long as reasonably necessary for the stated purpose, legal compliance, fraud prevention, safety, accounting or dispute resolution. Indicative periods are: active account data for the account life; Booking, invoice, tax and payment records for up to eight financial years or a longer period required by law; support and dispute records for three years after closure or longer while a claim is active; verification records for the shortest period required for the verification purpose and legal audit; and security logs ordinarily for up to two years. Data will be deleted or irreversibly anonymised when the purpose and required retention end, unless preservation is legally required. Zatrium will publish or notify any statutory inactivity-based erasure period when it becomes applicable to the Platform.

9. Security and data breaches

Zatrium uses reasonable technical and organisational safeguards appropriate to the risk, including access controls, encryption in transit, credential protection, logging, vendor controls, backups and incident response. No system is completely secure. If a personal-data breach occurs, Zatrium will investigate, mitigate harm and notify affected individuals and authorities in the manner and time required by applicable law.

10. International processing

Some service providers may process data outside India. Zatrium will use contractual, security and other safeguards required by applicable law and will not transfer data to a country or territory restricted by the Government of India.

11. Your rights and choices

Subject to applicable law and verification of the request, an individual may request information about processing, access a summary of personal data, correct or update inaccurate data, complete incomplete data, request erasure when retention is no longer required, withdraw consent, nominate another individual to exercise rights in the event of death or incapacity, and raise a grievance. Requests may be limited where retention or non-disclosure is required by law or necessary for claims, fraud prevention or the rights of others. We will explain a lawful refusal.

To protect Users, we may verify identity before fulfilling a request. A User may appeal an unresolved privacy grievance through the mechanism provided by applicable law, including the Data Protection Board of India when the relevant provisions apply.

12. Children

The Platform is intended for adults aged 18 or older. Zatrium does not knowingly allow a child to create a Customer or Service Provider account. If we learn that a child’s personal data was collected contrary to this rule, we will restrict the account and delete the data unless law requires preservation. Contact us if you believe a child has provided data.

13. Automated tools and ranking

Search and recommendations may consider location, availability, service category, price, experience, rating, response time, verification and relevance. Sponsored results will be clearly identified where applicable. Zatrium will not intentionally manipulate results in a misleading manner. Material parameters affecting ranking will be disclosed as required by applicable e-commerce law.

14. Changes to this policy

We may update this Policy to reflect law, technology or Platform changes. The revised date will be displayed and material changes will be notified where required. We will seek fresh consent where a new purpose cannot lawfully rely on an existing basis.