Privacy Policy

1. Information We Collect

We collect information that you provide directly to us and information collected automatically when you use our services:

• Personal Identification: Name, email address, phone number, and business details provided during service enquiries or registrations.
• KYC & Business Documents: PAN, Aadhaar, GST documents, incorporation certificates, and other legally required documents shared for service fulfilment.
• Technical Data: IP address, browser type, device information, pages visited, and session duration collected automatically via cookies and analytics tools.
• Payment Information: Transaction references and payment confirmations (we do not store full card or bank account details directly).
• Communication Records: Emails, chat messages, or calls made with our support or sales team.

2. How We Use Your Information

• To process and deliver the services you have requested (company registration, GST, trademarks, etc.).
• To communicate service updates, document requirements, and operational notifications.
• To verify your identity and comply with applicable KYC and legal obligations under Indian law.
• To improve our platform, detect fraud, and ensure security.
• To send transactional emails and, with your consent, service-related marketing communications.
• To respond to customer support requests and resolve disputes.

3. Sharing Your Information

We do not sell your personal data. We may share it in the following limited circumstances:

• Service Partners: With authorised third-party professionals (CA firms, legal consultants, government liaison agents) strictly to fulfil your requested service.
• Government Authorities: As required by law — e.g., MCA, GST Council, IPO portals — for submission of your applications.
• Technology Providers: With cloud hosting, payment gateway, and analytics partners operating under data processing agreements.
• Legal Obligations: When required by court orders, regulatory authorities, or to protect our legal rights.

All third parties who receive your data are contractually bound to maintain its confidentiality and use it only for the purpose for which it was shared.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and preferences on our website.
• Analyse usage patterns to improve our services (via tools like Google Analytics).
• Track referral sources and campaign effectiveness.

You can control cookie preferences through your browser settings. Disabling cookies may affect some functionality of our website.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law. Regulatory and KYC records may be retained for a minimum of 5–7 years as mandated under Indian financial and corporate laws. After the retention period, data is securely deleted or anonymised.

6. Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL/TLS encryption for all data transmitted over the internet.
• Access controls ensuring only authorised personnel can view sensitive data.
• Regular security audits and penetration testing (powered by VRSECLABS Cyber Security).
• Secure, encrypted storage for all documents and KYC data.

Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security against breaches arising from third-party systems or force majeure events.

7. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request erasure of your data, subject to legal retention obligations.
• Withdraw Consent: Opt out of marketing communications at any time.
• Grievance: Lodge a complaint with our Grievance Officer (details below).

To exercise any of these rights, email us at hello@zapstart.in with the subject line "Privacy Request". We will respond within 30 days.

8. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., MCA portal, GSTN, banking partners). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. Continued use of our services after any changes constitutes your acceptance of the updated policy.

11. Grievance Officer

In accordance with applicable Indian laws, our Grievance Officer can be reached at:

• Organisation: VRSECLABS PVT. LTD.
• Email: hello@zapstart.in
• Response Time: Within 30 days of receipt of complaint.

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, and any applicable data protection regulations. Courts in Madhya Pradesh shall have exclusive jurisdiction for any disputes arising out of or relating to this policy.