Privacy Policy

This Privacy Policy explains how [Company Legal Name] ("Zola Live", "we", "us") collects, uses, shares and protects personal data when you use the Zola Live mobile applications, the website and web app at this domain, and related services (together, the "Service"). It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023 (India). If you use the Service from Bangladesh or another country, applicable local laws also apply.

The Service is strictly for adults. You must be at least 18 years old to create an account. We do not knowingly collect data from anyone under 18.

1. Data we collect

Data you give us

• Account data: display name, gender, date of birth, country, preferred language, profile photo and bio.
• Login identifiers: mobile number (for OTP login), Google or Apple account email and ID, or a device identifier for Quick Login.
• Host applications: photos, optional profile video, languages, government ID document images and a selfie used only for age and identity verification.
• Payout details for hosts and agencies (for example UPI ID, bank account or wallet details) needed to pay earnings.
• Content you create: chat messages, images and voice notes, live-stream comments, reviews, reports and support requests.

Data collected automatically

• Device and log data: device model, operating system, app version, IP address, language, time zone, crash logs.
• Usage data: calls made and received (time, duration, coins charged — never the audio or video content), gifts, purchases, followers and in-app activity.
• Push-notification tokens, if you allow notifications.

Data from partners

• Payment gateways and app stores confirm whether a payment succeeded. We never receive or store your full card number, CVV or UPI PIN.
• Google / Apple sign-in share your basic profile (name, email, account ID) when you choose these options.

2. Calls and live streams

Audio and video in private calls and live streams are transmitted in real time through our real-time communication provider (Agora). We do not record private calls. Live streams are public to viewers inside the app while they are on air. Moderators may review reported content, live streams and account metadata to enforce our Community Guidelines.

3. How we use data

• To create and secure your account, including OTP verification, fraud and abuse prevention.
• To provide calls, live streams, chat, gifts, coin wallets, VIP membership, rewards and referrals.
• To bill calls per minute and messages per message, credit host earnings and process withdrawals.
• To verify that hosts are adults and are who they say they are.
• To show relevant hosts (for example by language or country), send service notifications and, with consent, promotional messages.
• To moderate content, investigate reports, comply with law and respond to lawful requests from authorities.
• To analyse aggregate usage and improve the Service.

4. Sharing

We do not sell personal data. We share data only with:

• Service providers acting on our instructions: cloud hosting and storage, real-time audio/video (Agora), SMS/OTP, push notifications, analytics and customer support tools.
• Payment gateways (e.g. Razorpay, Cashfree, Stripe and others enabled in your region) and app stores, to process purchases.
• Agencies, limited to the performance data of hosts who joined through that agency (earnings, minutes, calls).
• Other users, to the extent you make information public (profile, live streams, comments, gifts).
• Law-enforcement or government authorities where required by law, and to protect the safety of users or the public.

5. Retention

We keep account data while your account is active. After you delete your account we delete or anonymise personal data within 30 days, except records we must keep by law (for example payment and tax records, typically 8 years) and data needed to resolve open disputes or prevent repeat abuse. Host ID documents are deleted within 90 days after a host account is closed unless required for an investigation.

6. Security

We use encryption in transit (TLS), access controls, audit logs and industry-standard practices consistent with IS/ISO/IEC 27001 to protect data. No system is completely secure; please keep your login credentials private.

7. Your rights

Subject to applicable law, you may access, correct or update your data in the app, withdraw consent, request deletion, and nominate another person to exercise your rights. You can delete your account at any time from Me → Delete account or via our account deletion page. For other requests write to support@zolalive.app.

8. International transfers

Our providers may process data outside your country. We use providers that apply appropriate safeguards and comply with applicable law.

9. Children

The Service is not directed to anyone under 18. Accounts found to belong to minors are terminated. See our Child Safety Standards.

10. Grievance Officer

In accordance with the IT Act, 2000 and the rules made thereunder, the Grievance Officer is: [Grievance Officer Name], email: [grievance@yourdomain], address as below. Complaints are acknowledged within 24 hours and resolved within 15 days.

11. Changes

We may update this policy. Material changes will be notified in the app or by email before they take effect.

12. Contact

[Company Legal Name] (operator of Zola Live)
[Registered Office Address, City, State, PIN], India
CIN: [Corporate Identification Number]
Email: support@zolalive.app