Privacy Policy — Zeta
Last updated: 2 September 2026
Zeta ("Zeta", "we", "us") is a hyperlocal grocery delivery service operated by Appinfigo. This policy explains what personal data the Zeta customer app collects, why we collect it, who we share it with, and the choices you have.
This policy is written to meet the Digital Personal Data Protection Act, 2023 (India) and the Google Play User Data policy.
1. Who we are
Data Fiduciary: Appinfigo Service: Zeta grocery delivery Contact for privacy questions: privacy@appinfigo.com Address: Prayagraj, Uttar Pradesh, India
2. What we collect
2.1 Information you give us
| Data | Why we need it |
|---|---|
| Mobile number | This is your account identifier. We verify it by SMS one-time password. Without it you cannot sign in. |
| Name and email (optional) | Shown on your orders and used for receipts. |
| Delivery addresses | To deliver your order to the right door. Includes the address text, any landmark you add, and the map coordinates you pin. |
| Order contents | The items you buy, quantities and prices, so we can pick, pack, deliver and support the order. |
| Ratings, reviews and photos | Only if you choose to leave feedback on an order or a product. |
| Support messages | What you send us when you contact support about an order. |
2.2 Information collected automatically
| Data | Why we need it |
|---|---|
| Approximate or precise location | To find the store nearest you, confirm we deliver to your area, and show your rider's live position while an order is on the way. Collected only while the app is in use. You may refuse and enter a pincode instead. |
| Device and app information | Device model, OS version, app version, a device identifier and your Android advertising ID — used for crash diagnostics, fraud prevention, app integrity checks and to understand how the app is used. You can reset or delete your advertising ID at any time in Android Settings → Privacy → Ads. |
| Usage events | Screens viewed, searches made and items tapped, used to fix problems and improve the storefront. |
| Crash and performance data | Automatically reported when the app misbehaves. |
2.3 What we do not collect
We do not collect your contacts, your photo library, your microphone input, your calendar, or your SMS messages. We do not track you across other companies' apps or websites, and we do not sell your personal data.
Payment card and UPI details are entered inside our payment provider's secure flow and are never stored on Zeta's systems or seen by us.
3. Permissions the app asks for
| Permission | When we ask | What happens if you refuse |
|---|---|---|
| Location | When you first set a delivery area, and while tracking a live order. | Nothing breaks. You can enter your pincode or pin a spot on the map instead. |
| Notifications | Around sign-in, so we can tell you when your order is packed, dispatched and delivered. | You will still be able to order; you simply will not get order updates. |
| Camera / Photos | Only when you choose to attach a photo to a rating or a support request. | You can rate and contact support without photos. |
You can withdraw any of these at any time in your device settings.
4. Why we process your data
We process your personal data to:
- Create and secure your account — verify your mobile number, prevent fraud and abuse.
- Provide the service — show a serviceable store, take your order, take payment, deliver it, and handle returns or refunds.
- Communicate with you — order status, delivery updates and support replies.
- Improve the service — understand which parts of the app are slow, broken or confusing.
- Meet legal obligations — tax invoices, accounting records and lawful requests.
We rely on your consent for location, notifications and optional marketing, and on legitimate use / performance of our service to you for everything needed to actually fulfil an order you placed.
Marketing messages are separate and optional. You can opt out at any time without affecting your ability to order.
5. Who we share it with
We share the minimum necessary with:
- Delivery partners — the rider assigned to your order sees your first name, delivery address, map location and a contact method, for the duration of that delivery only.
- Store staff — the pickers packing your order see the items, not your payment details.
- Payment provider (Razorpay) — to take and refund payments. They receive the amount and an order reference; we never receive your full card or UPI credentials.
- Cloud and analytics providers (Google Firebase, Google Cloud, Sentry) — hosting, push delivery, crash reporting and app-integrity checks.
- Government authorities — only where we are legally required to disclose.
We do not sell your personal data, and we do not share it with advertisers.
6. Where your data is stored
Your data is stored on Google Cloud infrastructure, primarily in India (asia-south region). Some processing — crash reports and push delivery — may occur on servers outside India operated by our providers under contractual safeguards.
7. How long we keep it
| Data | Retention |
|---|---|
| Account details | While your account is open |
| Order history and invoices | 8 years, as required by Indian tax law |
| Delivery address and location for an order | Kept with the order record for the same statutory period |
| Raw analytics events | 60 days; aggregated statistics that do not identify you may be kept longer |
| Crash reports | Up to 90 days |
| Support conversations | As long as needed for support and dispute resolution |
When you delete your account we remove your profile, saved addresses and contact details. We retain order and invoice records for the statutory period above, because we are legally required to.
8. Your rights
Under the DPDP Act you may:
- Access the personal data we hold about you
- Correct anything inaccurate or incomplete
- Erase your data, subject to our legal retention duties
- Withdraw consent for location, notifications or marketing at any time
- Nominate someone to exercise your rights if you are unable to
- Complain to the Data Protection Board of India
Deleting your account: you can delete your account from inside the app under Profile → Account → Delete account, or by emailing privacy@appinfigo.com. We action requests within 30 days.
To exercise any other right, write to privacy@appinfigo.com from your registered mobile number's associated email, or contact us in the app.
9. Children
Zeta is not intended for children under 18. We do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the account.
10. Security
We protect your data with encryption in transit, access controls limiting staff to what their role requires, device-integrity checks on the app, and audited server-side rules on every money or personal-data operation. No system is perfectly secure, but we treat your address, phone number and order history as sensitive and design accordingly.
11. Changes to this policy
If we change this policy materially we will tell you in the app before the change takes effect. The "last updated" date above always reflects the current version.
12. Contact
privacy@appinfigo.com Appinfigo, Prayagraj, Uttar Pradesh, India
If you are not satisfied with our response you may complain to the Data Protection Board of India.