Privacy Policy

Wizoventures Private Limited — wizoapp ("Wizo", "we", "us", "our")

1. Introduction

1.1This Privacy Policy explains how Wizoventures Private Limited ("Wizo", "we", "us", "our"), CIN: U47912MH2025PTC452076, registered at 329, Floor 3rd, Plot 21, Panchratna, Opera House, Girgaon, Mumbai - 400004, collects, uses, discloses, and protects personal data of users ("you", "your") of the Wizo mobile application and website (the "Platform"), in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

1.2By using the Platform, you acknowledge that you have read and understood this Privacy Policy. Where a specific processing activity requires your separate consent (such as the Virtual Try-On feature described in Section 5), we will seek that consent explicitly and independently of your general acceptance of this Policy.

2. Personal Data We Collect

We collect the following categories of personal data:

• Account and contact information: name, phone number, email address, delivery address(es), and password (stored in encrypted/hashed form);
• Order and transaction data: order history, items purchased, order value, return and refund history;
• Payment-related data: payment method selected and transaction status. Wizo does not collect or store your card number, UPI ID/PIN, or net-banking credentials — these are collected and processed directly by our payment gateway partner (currently PayU);
• Location data: delivery address and, where you enable it, device location, used to determine delivery eligibility and to support order tracking;
• Virtual Try-On (VTO) photographs, where you choose to use this feature — see Section 5 for specific terms governing this category;
• Device and usage data: IP address, device identifiers, app version, and interaction data collected automatically for security, analytics, and service improvement;
• Communications: records of your correspondence with our support or grievance team.

3. How We Use Your Personal Data

We use your personal data to:

• Create and manage your account;
• Process, fulfil, and deliver your orders, including coordinating pickup from Brand Partners;
• Process payments and refunds through our payment gateway partner;
• Provide customer support and respond to grievances;
• Operate the Virtual Try-On and Try First features, where used;
• Improve, secure, and personalise the Platform;
• Comply with applicable legal and regulatory obligations;
• Send order-related communications and, where you have consented, promotional communications, which you may opt out of at any time.

4. How We Share Your Personal Data

4.1With Brand Partners. To fulfil your order, we share your name, phone number, and delivery address with the Brand Partner(s) whose products are included in that order. This is necessary so that Brand Partners can correctly pack and label items for pickup by our delivery rider. Brand Partners are independent entities and are responsible for handling this information in accordance with applicable law and their own data handling practices, over which Wizo does not have direct control.

4.2With delivery riders and logistics partners, to the extent necessary to complete delivery of your order.

4.3With our payment gateway partner (currently PayU), to process payments and refunds. Wizo does not control, and is not responsible for, the independent data handling practices of the payment gateway with respect to payment credentials.

4.4With technology and service providers who support Platform operations (such as app development, hosting, and customer support tooling), under contractual confidentiality and data protection obligations.

4.5With government authorities or regulators, where required by applicable law, court order, or to protect the rights, safety, or property of Wizo, its users, or the public.

4.6We do not sell your personal data to third parties. We do not share your personal data with any third party for their independent marketing purposes without your explicit consent.

5. Virtual Try-On (VTO) Photographs — Special Provisions

5.1The VTO feature allows you to upload a photograph of yourself to preview how a product may look on you. This is entirely optional. If you do not wish to use this feature, you may continue to use all other parts of the Platform without any VTO Photo.

5.2Separate, explicit consent is obtained from you at the point of upload, distinct from your general acceptance of this Privacy Policy, before any VTO Photo is processed or stored.

5.3Purpose limitation. Your VTO Photo is used solely to generate a visual fit/style preview for your own use. It is not used for facial recognition or biometric identification of you, and is not used to train any model or system beyond generating your own try-on preview, and is not shared with Brand Partners or any third party, except a technology sub-processor strictly necessary to render the try-on preview, under confidentiality obligations.

5.4Retention. VTO Photos are retained only for as long as reasonably necessary to provide the feature to you, and in any event are deleted upon account deletion or upon your specific request, whichever is earlier.

5.5Your right to delete. You may delete a VTO Photo at any time from within the Platform, or by writing to us at the contact details in Section 12. We will act on such a request within a reasonable time and confirm deletion to you.

5.6Security. VTO Photos are stored using industry-standard encryption and access controls, with access restricted to systems and personnel strictly necessary to operate the feature.

6. Data Retention

6.1We retain your personal data for as long as your account is active and as necessary to provide the Platform's services, comply with our legal obligations (including tax, accounting, and consumer protection record-keeping requirements), resolve disputes, and enforce our agreements.

6.2Upon account deletion, we will delete or anonymise your personal data, except where retention is required by law or for legitimate business purposes such as fraud prevention or legal compliance.

7. Data Security

7.1We implement reasonable technical and organisational security measures, including encryption in transit and at rest where applicable, access controls, and restricted personnel access, to protect your personal data against unauthorised access, loss, or misuse.

7.2No method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

8. Your Rights Under the DPDP Act, 2023

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and the processing activities carried out;
• Correct, complete, or update inaccurate or incomplete personal data;
• Request erasure of your personal data, subject to our legal retention obligations;
• Withdraw consent for any processing activity that is based on your consent (including VTO), at any time, without affecting the lawfulness of processing carried out before such withdrawal;
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity;
• Lodge a grievance with our Grievance Officer (Section 12) and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, please contact us using the details in Section 12.

9. Children's Data

9.1The Platform is intended for use only by individuals eighteen (18) years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected personal data from a person under 18, we will take steps to delete it promptly.

10. Cookies and Tracking Technologies

10.1The Platform may use cookies and similar tracking technologies to remember your preferences, keep you logged in, and understand how the Platform is used, in order to improve it. You may control cookie preferences through your device or browser settings, though this may affect certain Platform functionality.

11. Changes to This Privacy Policy

11.1We may update this Privacy Policy from time to time. Material changes will be notified through the Platform, and, where required by applicable law, we will seek your renewed consent before continuing to process your personal data under the revised Policy.

12. Grievance Officer and Contact Details

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, you may contact our Grievance Officer with any questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal data:

We will acknowledge complaints within forty-eight (48) hours and endeavour to resolve them within one (1) month of receipt, as required under applicable law.