Privacy Policy

This Privacy Policy explains how Zofy ("we", "our", or "us") collects, uses, shares, and protects personal information when users ("you", "your") access or use our website (www.zofyapp.com), Progressive Web App, or any related services (collectively, the "Platform").

By using Zofy, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Personal Information You Provide

• Full name
• Email address
• Phone number (used for OTP verification and account recovery)
• Profile photo
• Studio information / business name
• City, state, country
• Social media profile links
• Payment information (processed by third-party payment gateways; Zofy does not store card data)

1.2 Social Login Information

Zofy may offer social sign-in through third-party providers (examples may include Google or similar services) in the future. When social sign-in is enabled and you use it, we may receive your name, email address, and profile photo from the provider. We do not receive your password.

1.3 Portfolio Content

When you upload portfolio media, we collect photos, videos, reels, logos, descriptions, and captions.

You are responsible for ensuring you own rights to all uploaded content and have obtained appropriate permissions from individuals featured in it.

1.4 Usage & Device Data

Basic server-side request logs — IP address, browser type, device type and operating system, and request timestamps — are recorded for security, fraud prevention, and platform operations regardless of your analytics choice. These are not used to build behavioural profiles.

If you have consented to analytics (see §7), additional usage data such as pages visited, on-platform navigation, buttons clicked, and search queries is collected via our product- analytics provider. The specific data categories may evolve as the platform grows.

1.5 Lead, Job & Interaction Data

We collect jobs posted, jobs applied to, messages exchanged, leads generated or received, and enquiries submitted or responded to.

This data is essential for platform functionality, safety, and audit trails.

2. How We Use Your Information

We use your information to create and manage your Zofy account, display your profile publicly, showcase your portfolio, deliver leads and notifications, allow you to apply for or post work opportunities, connect you with clients and other professionals, personalize search results and recommendations, improve platform functionality, conduct marketing and promotions, prevent fraud, and fulfill legal requirements.

We process data under lawful bases, including consent, contractual necessity, legitimate interest, and compliance with the Digital Personal Data Protection Act (DPDP), 2023.

3. Communication Consent

By using Zofy, you explicitly consent to receive job alerts, enquiries and leads, platform updates, verification requests, promotional messages, safety or policy notifications, and payment confirmations via email, in-app messages, push notifications, and one-time SMS sent for account verification.

You may withdraw marketing consent at any time by contacting privacy@zofyapp.com or adjusting your notification preferences in Settings.

4. Lead Sharing & User Contact Disclosure

To enable collaboration, hiring, and service delivery:

• When you interact with a job or enquiry, Zofy may share your name, profile, portfolio, phone number, email address, and business information with the relevant user.
• If you post a job, your contact information may be shared with applicants.
• Public profiles are visible to site visitors.

Zofy is not responsible for how other users handle your shared information.

5. Portfolio Content & Licensing

You retain full ownership of your portfolio.

By uploading content, you grant Zofy a non-exclusive, worldwide, royalty-free license to host and display your content, use it in search results, showcase it in marketing & discovery features, and promote your work to enhance your visibility.

Zofy will not sell your content to third parties.

You are responsible for ensuring your uploaded media does not violate copyright, trademark, privacy rights, or model release rights.

6. Audio & Video Usage

If you upload or create video/film content, Zofy may transcode, compress, or modify format for performance and display thumbnails or previews. Copyright ownership remains with you.

7. Cookies & Tracking Technologies

Zofy uses cookies and similar technologies in these categories:

Essential cookies for sign-in, security, and core functionality. These are always on.

Analytics cookies for understanding how the platform is used. We currently use PostHog as our product-analytics provider; specific providers may change over time as our needs evolve.

Functional cookies for remembering preferences and personalising the interface.

Advertising or retargeting cookies are not used today. If introduced in the future, this policy will be updated and they will require your consent before being activated.

As of 18 July 2026 we do not display a cookie consent banner, because Zofy operates in India (DPDP Act) and the United States, and the storage we actually use — described in the Cookies & storage page — does not require prior consent under either regime. That page lists every category of browser storage the app creates, verified against an actual browser audit rather than boilerplate language.

8. Third-Party Service Providers

We may share data with trusted partners who help operate Zofy. These currently include hosting and cloud (Supabase, Cloudflare), email and SMS (Resend for transactional email; MSG91 for SMS OTP), payments (Razorpay), product analytics (PostHog), usability analytics and session recording (Microsoft Clarity), and error and reliability monitoring (Sentry). Place names are looked up in Zofy's own copy of the GeoNames database; the location text you type is not sent to any third party. Additional or replacement providers may be engaged over time for hosting, analytics, error tracking, or marketing.

Place names come from GeoNames (geonames.org), licensed under CC BY 4.0 (creativecommons.org/licenses/by/4.0). Zofy has modified the data: some places are renamed to their current official names, and entries that are not place names are removed. The data is provided “as is”, without warranty. Contains Ordnance Survey data © Crown copyright and database right.

All third-party providers must comply with data protection and confidentiality obligations.

9. Payment Gateway Compliance

Zofy does not store any payment card data. All payments are processed through RBI-compliant third-party payment gateways.

10. Advertising & Promotions

Zofy may send marketing communications, feature your profile or content in promotional campaigns, and notify you about offers, events, and updates. You may opt out of promotional emails at any time via Settings or the unsubscribe link in any marketing email.

11. User Rights

You may request to access your data, correct inaccurate information, withdraw consent, request deletion, request data portability, or object to certain processing.

Submit requests to: privacy@zofyapp.com. We may require identity verification.

12. Data Retention

Zofy retains personal data as long as your account is active, as needed for legal or regulatory compliance, and for fraud prevention, audit logs, and dispute resolution. Even after account deletion, certain data may be retained as permitted by law.

13. Data Security

We use reasonable and industry-standard measures: SSL encryption, access controls, encrypted storage, firewalls, security audits. Despite this, no system is fully immune to breaches.

In case of a data breach, users will be notified as required by applicable laws.

14. Public Information

Any information you include in your public profile, including business name, city, portfolio, and ratings & reviews, will be visible to platform visitors and may be indexed by search engines.

15. User Messaging & Community Interactions

Zofy may store messages, comments, and job-related communication. We do not proactively monitor message content but may review it in case of harassment, abuse, fraud, legal complaints, or policy violations.

16. International Data Transfers

If your information is transferred outside India, such transfer will comply with applicable data protection requirements and contractual safeguards.

17. Children's Privacy

Zofy is not intended for users under 18. We do not knowingly collect data from minors.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of Zofy indicates acceptance of changes.