Privacy Policy
Last updated: 1 May 2026
This Privacy Policy explains how Shobha Ventures ("Zeseva", "we", "us") collects, uses, stores, and protects your personal data when you use the Zeseva platform. We are committed to protecting your privacy and complying with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. What Data We Collect
We collect only what is necessary to run the Platform.
Data you provide
| Data | Why Needed |
|---|---|
| Full name | Profile identity within your building |
| Email address | Magic link login + critical notifications |
| Mobile number | Optional — for future support and account recovery features |
| Flat / unit number | Residency verification |
| Profile photo | Optional — builds trust with neighbours |
| Category interests | Personalise notifications |
| Item photos | When you list items |
| Handoff and return photos | Transaction proof |
| Dispute evidence photos | When a dispute is raised |
Data we generate
| Data | Purpose |
|---|---|
| Transaction history | Loans, payments, ratings |
| Reputation points | Based on platform activity |
| Notification preferences | Your in-app notification settings |
Data we do NOT collect
- Aadhaar number or any government-issued ID
- Bank account or card details (payments handled entirely by our payment processor)
- Your contacts list or SMS messages
- Precise GPS location (building-level is sufficient)
2. How We Use Your Data
We use your personal data only for:
- Verifying your residency and maintaining your account
- Enabling transactions between residents (borrowing and lending)
- Processing payments and managing security deposits
- Sending notifications about your transactions
- Resolving disputes between users
- Maintaining platform safety (preventing fraud and abuse)
- Complying with legal obligations under Indian law
We do not sell your personal data to third parties.
We do not use your data for advertising.
3. Data Sharing
We share your data only in these limited circumstances:
With other residents in your building: Your name, flat number, profile photo, and ratings are visible to verified residents of your building only. Your email is never shared.
With our payment processor: Payment transactions are handled by a third-party payment processor. We share only the transaction amount and order reference — no personal profile data.
With building admins: Your name, flat number, and verification status are visible to your building admin for community management purposes.
With legal authorities: If required by Indian law or court order.
4. Data Storage & Security
- Your data is stored on secure cloud servers with access controls and regular security audits.
- Images are stored on secure object storage with strict access controls.
- All data is encrypted in transit (HTTPS/TLS) and at rest (AES-256).
- Verification documents are deleted immediately after verification is complete.
- We use row-level access controls to ensure residents can only access data from their own building.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | While account is active |
| Transaction history | 3 years after transaction |
| Dispute evidence photos | 3 years after resolution |
| Handoff / return photos | 6 months after loan completion |
| Profile photos | 30 days after account deletion |
| Reputation and activity data | Deleted upon account deletion |
| Residency verification documents | Deleted immediately after verification |
| Payment records | 7 years (tax and legal compliance) |
6. Your Rights Under DPDP Act 2023
Under India's Digital Personal Data Protection Act, you have the right to:
Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct inaccurate personal data.
Erasure: Request deletion of your account and personal data, subject to our legal retention obligations.
Withdraw consent: Withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Note that withdrawing consent may limit your ability to use the Platform.
Grievance redressal: Raise a complaint about how we handle your data.
Nominee: Designate a nominee to exercise your data rights in the event of your death or incapacity.
To exercise any of these rights, email us at privacy@zeseva.com. We will respond within 30 days.
7. Cookies
Zeseva uses only functional cookies necessary for the Platform to operate (session management). We do not use advertising or tracking cookies.
8. Children's Privacy
Zeseva is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us at privacy@zeseva.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the Platform or email at least 7 days before they take effect. Continued use of the Platform after that period constitutes acceptance of the updated Policy.
10. Contact & Grievance Officer
For privacy concerns or to exercise your rights under the DPDP Act:
Data Protection Officer / Grievance Officer
Shobha Ventures
Mumbai, Maharashtra
privacy@zeseva.com · Response within 30 days