Privacy Policy

GenZ IITian Connect (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the Digital Personal Data Protection Act 2023 (DPDP Act), the Information Technology Act 2000 (IT Act), and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 (IT Rules 2021).

We practice data minimization as required by the DPDP Act:

• Email address — For identity verification and communication
• Age confirmation — Boolean flag only (not date of birth)
• Consent records — Timestamp and version of consent given
• Subscription data — Plan type and billing information
• Session metadata — Session ID, timestamps, and IP hash for safety logging
• Reports — User-submitted reports for moderation

We process personal data only for the following specific purposes:

• User authentication and identity verification
• Subscription management and billing
• Safety monitoring and abuse prevention
• Compliance with legal obligations under Indian law
• Platform improvement and analytics (aggregated, non-identifying)

Under the DPDP Act 2023, we process your data based on:

• Consent — Your explicit consent obtained during onboarding
• Legitimate purpose — Safety and abuse prevention
• Legal obligation — Compliance with IT Act and IT Rules

• Data is stored on secure, encrypted servers
• IP addresses are stored as one-way hashes (irreversible)
• Chat content is never stored — it exists only in real-time
• Video streams are peer-to-peer (WebRTC) — never routed through our servers
• All data transmission uses TLS 1.3 encryption

In compliance with the DPDP Act's data minimization principle:

• Account data — Retained while account is active; deleted within 30 days of account deletion
• Session metadata — Retained for 90 days for safety compliance
• Reports — Retained for 180 days or until resolution
• Consent records — Retained for the duration of the relationship + 3 years

See our Data Retention Policy for full details.

As a Data Principal under the DPDP Act, you have the right to:

• Access — Request a copy of your personal data
• Correction — Request correction of inaccurate data
• Erasure — Request deletion of your personal data
• Withdraw consent — Withdraw your consent at any time
• Grievance redressal — File a complaint with our Grievance Officer
• Nominate — Nominate another person to exercise your rights

To exercise these rights, visit Data Deletion Request or contact our Grievance Officer.

We do NOT sell your data. We may share data only:

• With law enforcement when required by a valid legal order
• With service providers (payment processors) under strict DPAs
• In anonymized/aggregated form that cannot identify you

This platform is intended for users aged 18 and above. Users under 18 may only use the platform with verified parental/guardian consent. We do not knowingly collect data from users under 18 without consent, in compliance with Section 9 of the DPDP Act 2023.

We may update this Privacy Policy periodically. Material changes will be notified via email and in-app notification. Continued use after changes constitutes acceptance. You may withdraw consent and delete your account at any time.

For any privacy-related queries or to exercise your data rights:

• Email: privacy@genziitian.com
• Grievance Officer: grievance@genziitian.com