Kapizox Solutions ("Kapizox", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Kapizox mobile application and website (collectively, the "Platform"). Your privacy matters to us.
By using Kapizox, you provide free, specific, informed, and unambiguous consent to the collection, storage, processing, and use of your personal data as described in this policy. If you do not agree, please do not use the Platform.
Kapizox Solutions is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 ("DPDPA"). You, as the user, are the Data Principal. This Privacy Policy is governed by the DPDPA 2023, the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and all other applicable Indian data protection laws.
Language Accessibility: This notice is available in English and can be provided in Telugu or any other language specified in the Eighth Schedule to the Constitution of India upon request to [email protected].
We collect information you provide directly to us when you register, create a profile, or use our services:
In accordance with Section 4 of the DPDPA 2023, we process your personal data only for the following specified, lawful purposes for which you have provided consent:
Your data is stored on Supabase-hosted PostgreSQL databases with Row-Level Security (RLS) enabled, ensuring each user can only access data they are explicitly permitted to access. Passwords are hashed using bcrypt with salt and are never stored in plain text.
Portfolio photos and media are stored on Cloudinary's content delivery network with access control restrictions. All data transmission between the App and our servers uses Transport Layer Security (TLS 1.2 or higher) encryption.
We implement reasonable security practices as required under Rule 8 of the SPDI Rules, 2011 and Section 8(4) of the DPDPA 2023. Access to production systems is restricted to authorised Kapizox personnel with role-based access controls and audit logging.
CERT-In & Telangana Cyber Security Compliance: Our security practices are aligned with CERT-In (Computer Emergency Response Team – India) guidelines under Section 70B of the IT Act, 2000, and the Telangana Cyber Security Policy. In the event of a significant cybersecurity incident or data breach, Kapizox will report to CERT-In and notify affected users within the prescribed timelines under applicable law.
Payment Authentication: Our payment aggregator partner utilises Risk-Based Authentication (RBA) as mandated under the RBI Digital Payment Security Framework (2026), which may include device binding, transaction behaviour analysis, and multi-factor authentication mechanisms.
Some of your personal data is processed and stored outside India through our third-party infrastructure providers:
By using the Kapizox platform, you explicitly consent to these transfers for the purposes described in this policy. Kapizox ensures that all third-party providers maintain adequate data protection standards consistent with applicable Indian law and the DPDPA 2023.
We do not sell, rent, or trade your personal data to any third party for commercial purposes. We do not share your personal data with advertisers or advertising networks. We may share your information in the following circumstances:
The Kapizox mobile App does not use browser cookies. We use secure, encrypted session tokens stored locally on your device using AsyncStorage to keep you authenticated. We may use anonymised, aggregated analytics data to understand overall usage patterns — no personally identifiable information is shared with third parties in analytics data.
Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:
Ease of Consent Withdrawal: In accordance with the DPDP Rules 2025, withdrawing your consent is as seamless as providing it. You may withdraw consent through the Privacy Settings section in the Kapizox App, without having to contact us.
To exercise any rights, email [email protected] with subject line "Data Principal Rights Request — [Your Name]". We may verify your identity before processing the request.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.
In the event of a personal data breach likely to result in risk to your rights and freedoms, Kapizox will notify affected Data Principals without undue delay and report the breach to the Data Protection Board of India and relevant authorities in accordance with the DPDPA 2023.
If you believe your account or personal data has been compromised, contact us immediately at [email protected] or [email protected].
Kapizox is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. Under the DPDPA 2023, processing of personal data of children requires verifiable parental consent — Kapizox does not permit minor registration.
If we discover that an account has been created by a minor, we will immediately delete the account and all associated personal data. If you believe a minor has registered, notify us at [email protected].
Regional Compliance: In compliance with regional safety guidelines applicable in Telangana and Andhra Pradesh, Kapizox may implement additional age-verification steps for users in these states.
To protect the integrity of the Kapizox marketplace, Creators are strictly prohibited from sharing personal contact information in any user-generated content on the Platform, including profile bio, taglines, portfolio descriptions, and service package names.
This prohibition covers all forms of contact information: phone numbers (in any format), email addresses, WhatsApp links, Instagram handles, Telegram usernames, and any mechanism enabling direct communication outside the Kapizox platform. Disguised or indirect sharing (spelling out numbers in words, using special characters, etc.) is equally prohibited.
Enforcement: First violation — formal warning and content removal. Second violation — warning and potential account suspension. Third violation or severe cases — permanent account termination without refund. To report a violation, contact [email protected].
Any content you upload to Kapizox — including portfolio photographs, videos, reels, and profile images — is uploaded voluntarily by you using your own credentials. By uploading content, you represent and warrant that: (a) you are the original creator or lawful owner; (b) the content does not infringe any third-party intellectual property rights; (c) the content does not violate any applicable law.
Kapizox is an intermediary under Section 2(1)(w) of the IT Act, 2000, and does not verify, curate, or take ownership of User Content. You, as the Creator, are solely and exclusively responsible for all content uploaded to your profile.
If a third party notifies Kapizox of a copyright infringement relating to your content, Kapizox reserves the right to remove the content immediately without prior notice and, if required by law, disclose your account information to the rightful claimant. To report infringing content, email [email protected] with subject line "Copyright Infringement Notice".
Creator profiles may contain links to external platforms including Instagram, YouTube, and personal websites. Kapizox is not responsible for the privacy practices, content, or security of any third-party platforms. Accessing these links is at your own risk.
We may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. We will notify you of material changes via in-app notification or email at least 7 days before they take effect. For significant changes that alter the scope of data collected or the purposes of processing, we will seek fresh consent where required under the DPDPA 2023.
In accordance with Rule 3(1)(c) of the IT Rules 2021 and the DPDPA 2023, Kapizox has designated a Grievance Officer for privacy and data protection matters:
Kapizox Data Protection Team
Grievances: [email protected]
Privacy queries: [email protected]
General support: [email protected]
Response: Acknowledgement within 24 hours · Resolution within 15 days
Kapizox Solutions
Hyderabad, Telangana, India