Last updated: 5 November 2026
This Privacy Policy explains how 5S Innovation (“we”, “us”), the company that develops and operates ZOLOkey, collects, uses, shares and protects your personal data when you use the ZOLOkey website and app (the “Platform”). We process personal data in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
1. Data we collect
- Account details: your name, email address, mobile number, password (stored only in encrypted, hashed form) and account type (individual or business).
- Profile details you choose to add: profile photo, bio, locality, city, PIN code and, for businesses, business name, category, services, address, website and working hours.
- Verification data: whether your email address and mobile number have been verified, and the time you accepted our Terms and consented to receive SMS.
- Messages you send us through the contact form.
- Technical data: IP address, browser type and essential cookies needed to keep you signed in and protect against abuse.
2. How we use your data
- To create and manage your account and let you sign in.
- To verify your mobile number and secure your account using one-time passwords (OTPs) sent by SMS.
- To send transactional messages about your account, such as verification emails, OTPs and security alerts.
- To show your public profile to other users, only if you switch it to public.
- To prevent fraud, spam and misuse of the Platform, and to comply with the law.
We do not sell your personal data. We do not send promotional SMS without your separate consent.
3. SMS and OTP messages
When you register with a mobile number you consent to receive OTPs and service-related SMS from ZOLOkey. SMS messages are delivered through licensed telecom service providers and SMS gateways using templates and a sender ID registered on the TRAI Distributed Ledger Technology (DLT) platform. Your mobile number and the message content are shared with these providers only to deliver the message. Never share an OTP with anyone; ZOLOkey staff will never ask you for it.
4. Your phone number stays private
Your mobile number and email address are never displayed on your public profile or shared with other users. Public profiles show only the details you choose to make public.
5. Sharing
We share personal data only with service providers that help us run the Platform (hosting, email and SMS delivery), under confidentiality obligations, or where required by law or a lawful request from a government authority.
6. Storage, security and retention
Your data is stored on secured servers. Passwords are hashed and OTPs are stored only as one-way hashes that expire after five minutes. We keep your data for as long as your account is active. When you delete your account from your dashboard, your account and profile data are deleted, except where we must keep limited records to comply with law.
7. Your rights
- Access and correction: view and edit your details at any time from your dashboard.
- Erasure: delete your account from Dashboard → Security.
- Withdraw consent: you may withdraw consent for SMS by contacting us; note that OTP verification is needed to secure your account.
- Grievance redressal: contact our Grievance Officer below.
8. Cookies
We use only essential cookies required to sign you in, remember your light or dark mode preference and protect forms against abuse.
9. Children
The Platform is intended for users aged 18 and above. We do not knowingly collect personal data of children.
10. Grievance Officer and contact
Grievance Officer: [Name], 5S Innovation
Email: hello@zolokey.app
Address: [Registered office address]
We will acknowledge complaints within 24 hours and aim to resolve them within 15 days.
11. Changes
We may update this policy as the Platform evolves. We will post the updated version on this page and change the “Last updated” date.