Privacy Policy

1 Who We Are

ZAPOTA AGROTECH ("Zapota", "we", "us", or "our") operates the Zapota agricultural marketplace — an Android application and website at zapota.in — that connects farmers, agri-service providers, and buyers directly across India.

2 Information We Collect

Information You Provide Directly

• Phone Number — your primary identifier, collected during OTP-based registration.
• Full Name — collected on first login to personalise your experience.
• Profile Photo — optionally uploaded by you.
• Service Listings — title, description, price, photos, category, and delivery radius when you post a service.
• Request Notes — optional messages you send to sellers with a service request.

Information Collected Automatically

• Location Data — GPS coordinates to show nearby services and calculate distances. Collected only when the app is active and with your explicit permission.
• Device Information — Android model, OS version, and device identifiers for analytics and crash reporting.
• App Usage Data — screens visited and features used, to improve the Platform.
• FCM Token — a device token used to deliver push notifications to you.

Information From Third Parties

• Google Maps API — your GPS coordinates are sent to Google to return a readable location name (city, state, PIN code).
• SMS Gateway (MSG91) — your phone number is shared with our DLT-registered SMS provider solely for OTP delivery.
• Cloudflare Turnstile — runs an invisible bot check when you request an OTP. It receives your IP address and basic browser or device signals. It does not use tracking cookies and does not profile you across websites. See Cloudflare's Privacy Policy.

3 How We Use Your Information

4 How We Share Your Information

With Other Users

• When you post a service listing, your title, price, photos, category, and general location are visible to all users.
• When a request is accepted, your phone number becomes accessible through the in-app Call button. Until a request is accepted, your phone number is not visible to the other party.
• Your name and profile photo are visible on listings and your profile card.

With Service Providers

• Supabase — Database, authentication, file storage and server-side functions. Our primary backend.
• Google Maps Platform — Reverse geocoding of GPS coordinates.
• MSG91 — Phone number transmitted solely for OTP delivery.
• Google Firebase — Push notifications (Cloud Messaging) and crash reporting (Crashlytics) only.
• Cloudinary — Hosting and delivery of listing photos and profile images.
• Razorpay — Payment processing for seller listing fees. Razorpay collects your payment details directly on its own checkout; Zapota never receives or stores your card, UPI or bank information. See Razorpay's Privacy Policy.
• Cloudflare Turnstile — Invisible bot protection during OTP requests.

For Legal Reasons

• We may disclose your information if required by law, court order, or Indian government authority under the Information Technology Act, 2000.

5 Data Storage & Security

All user data is stored on Supabase infrastructure. All data transmission uses HTTPS/TLS encryption. Row Level Security is applied to every database table on a deny-by-default basis, so users can only read and write their own data.

Security Measures

• OTP codes are hashed and expire within 5 minutes of generation.
• Session tokens are stored in EncryptedSharedPreferences on your device.
• Listing and profile images are stored on Cloudinary, with uploads restricted to the owning account.
• All API calls use HTTPS/TLS encryption.

Data Retention

6 Your Rights

7 Android Permissions Explained

8 Children's Privacy

The Zapota Platform is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at support@zapota.in and we will promptly delete the account.

9 Third-Party Links & Services

The Platform may contain links to third-party websites or integrate with services such as WhatsApp for support. We are not responsible for the privacy practices of those services. We encourage you to read the privacy policies of any third-party services you use.

10 Future Paid Features

Zapota is free for buyers, who pay us nothing and are never charged commission. Sellers pay a flat fee to publish a listing, after a free trial period. Fees vary by category and are always shown to you before you pay. We reserve the right to introduce paid features, premium subscription plans, promoted listings, lead packages, or other service fees in the future to sustain and grow the platform.

Any future paid features will be optional. Free access to core services will continue to be available.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you via in-app notification and update the effective date at the top of this document. Continued use of the Platform after changes constitutes your acceptance of the updated policy.

12 Contact Us

For any privacy-related questions, requests, or complaints, please reach us through any of the following: