Last updated: 19 August 2026
Zapo ("we," "us," "our") operates a QR-code based vehicle contact service that lets people reach a vehicle owner without ever seeing their phone number. This policy explains what personal data we collect, why we collect it, how we use it, and the choices you have.
Information we collect
When you create a Zapo account or use our service, we may collect:
- Account details: your name, email address, and phone number.
- Vehicle details: registration/plate number, make, model, color, and vehicle type for each vehicle you register.
- Contact details: names and phone numbers of any additional contacts you save (for example, a family member or driver) to receive calls/messages about a specific vehicle.
- Order and shipping details: name, phone number, and delivery address when you order a sticker.
- Payment status: we work with third-party payment processors to handle payments — we do not store your full card or bank details ourselves.
- Usage data: basic technical information like IP address and browser type, collected automatically when you use our website, for security and troubleshooting.
How we use your information
We use your information to:
- Create and manage your account and registered vehicles.
- Connect a scanned sticker to the right vehicle and route calls/messages to the correct contact.
- Process and ship sticker orders.
- Send you order updates, account notifications, and (if you've opted in) service updates.
- Detect and prevent misuse of the service.
- Improve our website and service based on how it's used.
How our masked-call system protects your number
This is the core of what Zapo does, so it's worth explaining clearly: when someone scans your sticker and taps "Call," our system connects the call through a routing service. Your real phone number is never shown, shared, or stored on the scanning person's device at any point. They cannot see it, save it, or forward it to anyone else. You can deactivate a sticker at any time, which immediately stops any further calls from reaching you through it.
Who we share data with
We do not sell your personal data. We share data only with:
- Call/SMS routing providers (for example, our IVR/masked-calling partner) — solely to connect calls without exposing your number to the other party.
- Payment processors — to process your sticker order payment securely.
- Delivery/logistics partners — to ship your ordered sticker to your address.
- Law enforcement or regulators, only if legally required to do so (for example, in response to a valid legal request, such as investigating misuse of the service).
Cookies and similar technologies
We use session cookies to keep you logged in and to remember items in your cart. If Google Analytics is enabled on this site, it may set cookies to help us understand site usage in aggregate — this does not include your personal Zapo account data.
Data retention
We retain your account, vehicle, and order data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. You can request deletion of your account and associated data at any time (see "Your rights" below).
Your rights
Depending on applicable law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data, subject to any legal retention requirements.
- Withdraw consent for optional communications (like marketing messages) at any time.
- Raise a grievance about how your data has been handled.
To exercise any of these rights, contact us using the details below.
Data security
We take reasonable technical and organizational measures to protect your data, including access controls and secure storage practices. No system is 100% secure, but we work to keep your information protected against unauthorized access, loss, or misuse.
Children's privacy
Zapo is intended for use by individuals who are legally able to own or register a vehicle. We do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.
Grievance officer / contact us
If you have questions, concerns, or a grievance about how your data is handled, please contact us at:
[Insert grievance officer name/contact email/phone/address here]
We aim to acknowledge and address grievances within a reasonable timeframe as required under applicable Indian data protection law.