Privacy policy
This policy explains what personal data Zogelo Product by Cortesys (“Zogelo”, “we”) collects, why, and your rights under India’s Digital Personal Data Protection Act, 2023 and other applicable laws. We act as the Data Fiduciary for your data.
What we collect
- Account details: name, email address, gender, date of birth, and your password (stored only as a secure one-way hash).
- Your profile: the avatar, bio, hashtags and languages you choose, and whether to show your age. Your profile is shown to people you’re matched with and to your friends.
- Friends and blocks: who you’ve added as a friend, pending friend requests, and who you’ve blocked, so we can show your friends list, let you call friends, and keep blocked people away from you.
- If you use “Continue with Google”: Google shares your name, email address and a Google account ID with us. We don’t receive your Google password, contacts or anything else, and we still ask you for your gender and date of birth.
- Age checks: if someone enters a date of birth under 18, we keep a scrambled (hashed) copy of the email or Google account ID, and a browser cookie, until that date of birth turns 18, to stop repeat sign-up attempts by minors.
- Technical data: IP address, browser and device type, and connection times, used to run the service, prevent abuse and enforce bans.
- Safety reports: when you report someone or are reported, the reason, any details written, the time, and the accounts and IP addresses involved.
- Payments: plan, amount, and Razorpay order and payment IDs. Your card, UPI or bank details go directly to Razorpay and are never seen or stored by us.
- Messages to us: whatever you send through the contact form or email.
- On your device: one essential login cookie, and your chosen interests saved in your browser. We don’t use advertising or tracking cookies.
What we don’t collect
We do not record or store your video or audio. They travel directly between you and the other person. Text chat messages are passed along and not stored, and the “Delivered” and “Seen” labels are sent live between the two browsers and never saved. We don’t sell your data and we don’t show ads.
Why we use it
- To create and secure your account, confirm your email and let you reset your password.
- To match you with other users, including by interests and, for Premium users, by gender.
- To keep people safe: reviewing reports, banning accounts and preventing ban evasion.
- To process payments, send receipts and handle refunds.
- To answer your messages and complaints, and to meet our legal obligations.
We process your data based on the consent you give when signing up, and for legitimate uses allowed by law, such as complying with legal obligations and responding to lawful requests.
Who can see your data
- Other users see your profile: chosen name, gender, avatar, bio, hashtags, languages, and your age only if you turn that on. Your friends can also see when you’re online. Nobody sees your email or date of birth. Because video calls are direct, the person you’re connected with may be able to see your IP address.
- Service providers who help us run Zogelo: our hosting provider, Google (if you choose to sign in with Google), Razorpay (payments), our email provider, and, when used, a relay (TURN) provider that passes encrypted video between users who can’t connect directly. They may only use the data to provide their service to us.
- Authorities when Indian law requires it, or to protect someone from serious harm.
How long we keep it
- Account details: while your account exists. After you delete your account, we keep basic registration details for 180 days, as required by the IT Rules, 2021, and then delete them.
- Safety reports: 180 days, or longer if needed for an investigation or legal request.
- Payment records: as long as tax and accounting laws require.
Your rights
You can ask to access a summary of your personal data, correct it, or erase it, and you can withdraw your consent at any time (which means closing your account). You can delete your account yourself from your account page. You can also nominate someone to exercise your rights if you die or become unable to. To make a request, contact our Grievance Officer below. If you’re not satisfied with our response, you can complain to the Data Protection Board of India.
Security
We use HTTPS encryption, hashed passwords, signed login sessions and access controls. Video between users is encrypted end to end by WebRTC. No system is perfectly secure, so please use a strong, unique password.
Children
Zogelo is not for anyone under 18. We don’t knowingly collect data from children, and we delete accounts that we find belong to minors.
Data outside India
Some of our service providers may process data on servers outside India, with safeguards in place and as permitted by Indian law.
Changes
We’ll post updates here and tell you by email about significant changes.
Grievance Officer and contact
[set GRIEVANCE_OFFICER_NAME in .env], Grievance Officer
Email: grievance@zogelo.com
Address: [set COMPANY_ADDRESS in .env]
We acknowledge complaints within 24 hours and resolve them within 15 days. You can also use our contact page.