Privacy Policy
Last updated: July 2026 • Compliant with Indian DPDP Act & Google OAuth Security Standards
1. Information We Collect
We collect information you provide directly to us — such as your name, official email address, phone number, shipping address, and (for registered manufacturers) business entity details, GSTIN, and factory verification documents. When you sign in using third-party services like Google OAuth, we receive basic authentication profile data (your name, email address, and profile photo URL) provided by Google.
2. How We Use Your Information
We use your information to operate your account, process and route buyer-manufacturer orders, conduct manufacturer verification, send transactional notifications, and ensure platform security. Google OAuth data is strictly used for account authentication and user identity management. We do not sell your personal data or Google user data to third parties.
3. Information Sharing with Buyers & Sellers
To facilitate transactions, necessary contact and fulfillment details are shared between the buyer and the verified manufacturer involved in that specific order. Sellers only receive the information required to manufacture and deliver your order. We do not share your account credentials or full profile data with unrelated sellers.
4. Infrastructure & Third-Party Providers
GenZ relies on secure enterprise cloud infrastructure — including Supabase for encrypted database and authentication management, cloud media storage for product reels, and Google Cloud services for OAuth identity. These providers process data strictly on our behalf under mandatory confidentiality and security agreements.
5. Cookies & Session Storage
We use essential session tokens and cookies to maintain your authenticated session and preserve your user preferences across visits. Essential authentication cookies cannot be disabled as they are required for security and core functionality.
6. Data Security & Encryption
We implement robust technical and organizational security measures — including HTTPS/TLS encryption in transit, encrypted storage at rest via Supabase, and strict role-based access control — to safeguard your personal information against unauthorized access, disclosure, or alteration.
7. Data Retention & Account Deletion
We retain personal and business information for as long as your account remains active or as needed to provide platform services. You have the right to request full account and data deletion at any time by contacting us. Certain transaction and GST verification records may be retained for statutory periods as required by Indian law.
8. Children's Privacy
GenZ is an e-commerce and B2C manufacturing platform intended for users aged 18 and older. We do not knowingly collect or solicit personal information from children under 18. If we learn that a minor has provided us with personal data, we will immediately delete it.
9. Policy Updates
We may update this Privacy Policy periodically to reflect platform enhancements or legal requirements. Updated policies will be posted on this page with a revised "Last updated" date.
10. Contact Us & Data Requests
If you have questions, feedback, or data privacy requests regarding this Privacy Policy or your personal information, please reach out to our team at genz.official.hq@gmail.com.
Need to request data deletion or have privacy inquiries? Contact Data Protection Team