This Privacy Policy explains how Ocanzo Technologies, a sole proprietorship registered in India under Udyam Registration Number UDYAM-MH-33-0774676 (“Ocanzo”, “we”, “us”, or “our”), collects, uses, shares, and protects your personal data when you use the Ocanzo website and mobile applications (the “Platform”).
We are the Data Fiduciary in respect of the personal data we process about you. This Policy is published in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act), as applicable.
By using the Platform, you acknowledge that you have read this Policy.
1. Who this Policy applies to
This Policy applies to two groups of users:
- Customers — people who use the Platform to discover and book event venues.
- Vendors — venue owners or their representatives who list venues on the Platform.
2. The personal data we collect
2.1. Data you give us
From Customers: your mobile number (for OTP login), your name, your email address (optional), and the details of each event you book — date, guest count, event type, food and add-on choices, and any special requests. We also keep the messages you exchange with a Vendor through the Platform, and any review or rating you submit after an event.
From Vendors: your mobile number, the contact person’s name, your business name, your WhatsApp number, your email address (optional), your PAN, your GST number and FSSAI licence (where provided), your bank account details for payouts, and the details, photographs, and pricing of each venue you list.
2.2. Data we collect automatically
When you use the Platform we collect device and diagnostic information (device model, operating system, app version, crash logs), your IP address, usage activity within the app, and your push-notification token. With your permission, we collect your approximate location to show nearby venues.
2.3. Data from third parties
We receive payment status and transaction identifiers from Razorpay when you make a payment, and address and geolocation data from Google Maps / Places to help with venue location and address entry.
2.4. Data we do not collect or store
We do not store your full card number, your UPI PIN, or your net-banking credentials — these are handled entirely by Razorpay, which is PCI-DSS Level 1 certified. OTP codes are verified in transit and not retained. We do not collect your Aadhaar number.
3. How and why we use your data
We use your personal data for the following purposes:
- to create and manage your account and authenticate your logins;
- to process Bookings, payments, and Vendor payouts;
- to send booking confirmations, receipts, reminders, and service updates;
- to enable communication between Customers and Vendors about a Booking;
- to display venue listings and show relevant search results;
- to comply with tax and legal obligations (for example, TDS and GST records);
- to send push notifications, where you have enabled them;
- to detect, prevent, and investigate fraud, abuse, and security incidents;
- to provide customer support and resolve disputes; and
- to improve the Platform through analytics and crash diagnostics.
We do not sell your personal data, and we do not use it for third-party advertising.
4. How we share your data
4.1. Between Customers and Vendors
To make a Booking work, we share limited information between the two parties. A Vendor sees the Customer’s name, the event details, and — after a Booking is confirmed — the Customer’s phone number and email (if provided). A Customer sees the Vendor’s business name, response time, and rating.
We do not share a Vendor’s PAN, GST, bank details, or personal phone number with Customers.
4.2. With service providers
We share data with trusted providers strictly to operate the Platform: Razorpay (payment processing), Google Cloud Platform / Google Maps (location services), Sentry (crash diagnostics), our analytics provider (anonymised usage events), and our cloud hosting provider (encrypted storage).
4.3. With authorities
We may disclose personal data where required by a court order, by Indian tax or law-enforcement authorities, or by any regulator with lawful jurisdiction.
5. Data retention
We keep personal data only as long as necessary:
- account data (name, phone, email): for the life of your account and up to 3 years after closure;
- booking, payment, and tax records (including PAN/GST): up to 8 years, to meet financial record-keeping requirements;
- Vendor bank details: for the life of the Vendor account plus 3 years;
- chat messages: 3 years after the related Booking;
- analytics data: up to 2 years; crash logs: up to 90 days.
6. How we protect your data
We use encryption in transit (TLS 1.2 or higher) and encryption at rest for sensitive fields such as PAN and bank details. Authentication tokens are stored in the device’s secure keystore. Access to production data is role-based and logged.
7. Your rights
As a Data Principal under the DPDP Act, you have the right to:
- access the personal data we hold about you;
- correct or update inaccurate or incomplete data;
- request erasure of your data, subject to records we must retain by law;
- withdraw consent for processing based on consent;
- nominate another individual to exercise your rights in the event of death or incapacity; and
- grievance redressal through our Grievance Officer (Section 11).
To exercise any right, email ocanzoapp@gmail.com. We will respond within 30 days.
8. Children
The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18.
9. Data location and transfers
Your personal data is stored on servers located in India. Limited data may be processed outside India by our service providers; where this happens, we ensure adequate contractual safeguards are in place.
10. Cookies and tracking
The Ocanzo apps do not use tracking cookies. The website may set functional cookies for session management. Analytics events are anonymised before being sent to our analytics provider.
11. Grievance Officer
In compliance with the Information Technology Act, 2000 and the DPDP Act:
Name: Nikhil Hajare
Email: ocanzoapp@gmail.com
Address: Ocanzo Technologies, H. No. 49, near Marathi School, Vahuli Village, Mumbai–Nashik Highway, Bhiwandi, Thane, Maharashtra – 421302
The Grievance Officer will acknowledge complaints within 48 hours and resolve them within 30 days.
12. Changes to this Policy
We may update this Policy from time to time. Significant changes will be notified through the Platform or by email. Continued use of the Platform after a change constitutes acceptance.
13. Contact us
Ocanzo Technologies
Privacy: ocanzoapp@gmail.com
Support: ocanzoapp@gmail.com
Phone: +91 78753 41666
Registered office: H. No. 49, near Marathi School, Vahuli Village, Mumbai–Nashik Highway, Bhiwandi, Thane, Maharashtra – 421302