Key Points
- We collect only the personal data necessary to operate EZiL Universe.
- Your data is protected by encryption, access controls and regular security audits.
- You can access, correct, delete or port your data at any time.
- We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Scope and Applicability
This Privacy Policy (“Policy”) describes how EZiL Universe (“EZiL”, “we”, “us” or “our”) collects, uses, shares and protects personal data of users, builders and visitors (“you”) who access our websites, applications and services. This Policy complies with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws. By using our services, you consent to the practices described herein.
This Policy applies to personal data collected through:
- EZiL websites, mobile applications and platforms
- Data provided by clients, creators, builders, employees, contractors and vendors
- Information collected during registration, project creation, transactions and customer support
- Automatically collected data via cookies and similar technologies (see our Cookie Policy)
2. Definitions
- Personal Data: Information relating to an identified or identifiable natural person, such as name, contact details, IP address and payment identifiers.
- Sensitive Personal Data: Special categories including financial information, biometric data, health information and any data classified as sensitive under applicable law.
- Processing: Any operation performed on personal data, including collection, recording, storage, use, sharing, transfer or deletion.
- Creator: A user who creates projects on EZiL Universe for personal or organisational purposes.
- Builder: A vendor, contractor or service provider engaged by EZiL or a client to deliver services via the platform.
3. Collection of Personal Data
We collect personal data through various means:
- Direct provision: When you register an account, create or accept a job, interact with customer support or subscribe to communications.
- Builder enrolment: Builders provide contact details, skills, government identification, tax numbers and bank/UPI account details for KYC verification.
- Transactions: Payment-related data (billing address, card or UPI details) processed through authorised payment aggregators.
- Automatic collection: Device identifiers, IP address, location (to the extent necessary), browser data and usage statistics collected via cookies and analytics tools.
4. Purpose and Use of Personal Data
We use personal data for lawful purposes, including:
- Providing and managing the platform: To create and administer your account, enable project creation, builder selection, job tracking and communication between users.
- Processing payments and refunds: To collect fees, manage EZiL Wallet balances, arrange settlements to builders and process refunds through authorised payment partners.
- Compliance and verification: To perform customer due diligence and KYC checks, prevent fraud, monitor compliance with RBI guidelines and payment aggregator regulations.
- Improving services: To analyse usage patterns, enhance functionality, conduct research and develop new features.
- Marketing and communications: To send service updates, marketing materials and promotional offers with your consent (you may opt-out at any time).
- Legal obligations: To comply with applicable laws, respond to lawful requests, enforce our terms and protect the rights and safety of EZiL and its users.
5. Legal Basis for Processing
We process personal data based on one or more of the following legal bases:
- Contract: Processing is necessary to fulfil our agreement with you, such as providing the platform, delivering projects or paying builders.
- Consent: We obtain your consent for specific processing activities, such as marketing communications or collecting sensitive personal data.
- Legal obligation: We process data to comply with laws, regulations and regulatory directions (e.g., RBI’s payment aggregator directions).
- Legitimate interests: We process data for legitimate business interests, such as fraud prevention, network security and service improvement, while balancing your rights.
6. Sharing of Personal Data
We may share personal data with:
- Payment partners and banks: To process payments, refunds and settlements via authorised payment aggregators and ensure funds flow through regulated institutions.
- Builders and contractors: When creators hire builders, necessary project details and contact information are shared to facilitate service delivery. Builders are bound by confidentiality obligations.
- Service providers: Third-party providers (IT support, analytics, customer support, marketing) bound by contracts requiring them to process data only on our instructions and under appropriate safeguards.
- Regulatory and law enforcement authorities: When required by law or regulatory directives.
- Business transfers: In the event of a merger, acquisition or sale of assets, personal data may be transferred subject to confidentiality and security commitments.
7. Cross-Border Data Transfers
We store and process personal data primarily in India. If transfers outside India are necessary, we ensure compliance with applicable data localisation requirements and obtain appropriate safeguards, such as contractual clauses or regulatory approvals.
8. Data Security
We implement robust security measures to protect personal data against unauthorised access, loss or misuse. These include encryption, secure storage, role-based access controls, regular security audits and vulnerability assessments. Builders’ and clients’ payment data is handled via payment partners compliant with PCI-DSS and RBI requirements.
9. Retention of Personal Data
We retain personal data only as long as necessary for the purposes described in this Policy or as required by law. For example, transaction records and KYC documentation may be retained to satisfy regulatory requirements. Once the retention period expires, data is securely deleted or anonymised. See our Cookie & Data Retention Policy for specific retention periods.
10. Your Rights
You have the following rights under the DPDP Act and applicable law:
- Access: Request a copy of your personal data held by EZiL.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of data no longer required for lawful purposes.
- Restriction: Request limitation of processing under certain conditions.
- Withdrawal of consent: Withdraw consent for processing that relies on consent.
- Data portability: Request transfer of your personal data to another entity where technically feasible.
To exercise these rights, contact our Data Protection Officer using the details below.
11. Children’s Privacy
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have mistakenly collected data from a minor, please contact us so we can delete it.
12. Updates to this Policy
We may update this Policy to reflect changes in law or business practices. We will notify users of significant updates via email or through our platforms. Continued use of our services after such updates constitutes acceptance of the revised Policy.
13. Contact Information
Data Protection Officer – EZiL Universe
Email: dpo@ezil.universe
General Support: support@ezil.universe