Privacy policy
Last updated 11 October 2026
This policy explains what personal data ZELVU Play collects, why, and your choices. It is published under the Information Technology Act, 2000 and the rules made under it, and is written with the Digital Personal Data Protection Act, 2023 in view. The data fiduciary is the company below.
| Service | ZELVU Play, www.zelvuplay.com |
|---|---|
| Operated by | Lex Orbis Education (OPC) Private Limited. A change of the registered name to Dr. Saurabh Kapoor Ventures (OPC) Private Limited has been applied for with the Registrar of Companies; the legal entity remains the same until the change is approved and recorded. |
| Grievance Officer | Appointed by the company; reachable through the help page (choose “Grievance”). Acknowledgement within 24 hours; decision within 15 days. |
| Postal address | Available on request through the help page while the company's registered-office details are being updated on this site. |
| Governing law | Laws of India; courts at New Delhi, India have exclusive jurisdiction, subject to any non-excludable consumer remedies. |
What we collect and why
| When | Data | Purpose and basis | Kept for |
|---|---|---|---|
| Browsing the Service | Standard server logs held by our hosting provider; a rate-limit counter keyed to a hashed network identifier; and cookie-free first-party funnel events such as page viewed, video started, Premium page viewed or checkout stage. Funnel events use a random session identifier stored in session storage and may include the page path, campaign source, plan code, public content ID or order number. They never include your name, email, mobile, access token or payment credentials. | Running and securing the Service, diagnosing failures and measuring whether the free-to-Premium journey works | Hosting logs: ordinarily up to 30 days. Rate-limit counters: ordinarily 24 hours. First-party funnel events: ordinarily up to 13 months, then deleted or retained only as non-identifying aggregates. |
| Playing a free video | YouTube (Google) receives your IP address, device information and player interactions when its player loads — after you press play on a title page, or automatically for the short on screen on the Shorts page. YouTube may set cookies and show ads in its player. | Playback you requested; Google's privacy policy applies to Google's processing | Per Google's policy |
| My List, history, likes, parental PIN | Saved titles, watch positions, liked shorts and a salted hash of your parental PIN, stored only in your browser's local storage | To show “Continue watching”, My List and the parental lock on that device | Until you remove them or clear your browser data; never sent to us |
| Founding and early-access list | Email; optional name and mobile; optional WhatsApp consent; preferred language and genres; plan interest; sign-up page, referrer and campaign tags | To send the verified launch slate and relevant ZELVU Play premiere information, understand audience demand and contact you on WhatsApp only when you selected that option | Until you unsubscribe or 24 months of inactivity |
| Orders | Name, email, optional mobile, plan or ticket, amount, payment status, transaction reference and operational follow-up history (never card numbers, UPI PINs or bank credentials) | To perform the contract, activate access, provide payment support, prevent fraud and meet tax and accounting obligations | 8 years, subject to applicable accounting, tax and dispute requirements |
| Filmmaker submissions | Name, email, optional mobile, film details and screener link | To evaluate the film and reply, with your consent | 24 months, or the licence term plus 8 years if licensed |
| Help and grievances | Name, email, message, optional order number | To answer you and meet grievance-handling obligations | 3 years after closure |
YouTube API Services
ZELVU Play uses YouTube API Services to find, list and describe free videos (titles, thumbnails, durations, view counts and channel names published on YouTube). This is public video data; we do not access any YouTube or Google account and do not collect user data through the YouTube API. Videos play in YouTube's embedded player, which is operated by Google under the YouTube Terms of Service and the Google Privacy Policy. YouTube, as a third party, may serve content and advertisements in its player and may place or read cookies and similar technologies on your device when the player loads. If you ever connect a Google account to a future ZELVU Play feature, you can revoke that access at any time from Google's security settings, and we will delete the related data within 30 days.
What we do not do
- No third-party advertising tracker is installed by ZELVU Play, and we do not sell personal data or build advertising profiles.
- First-party funnel measurement is limited to product-performance events and excludes direct contact details, payment credentials and private order access tokens.
- No account password is stored by ZELVU Play for order-link access. Company administrators authenticate through the managed identity provider.
- Card, UPI PIN and bank-login details are entered only on the bank's payment pages, never on ZELVU Play.
Storage and sharing
Data is stored with our infrastructure providers (website hosting and a managed PostgreSQL database) under contracts that restrict them to processing on our instructions; servers may be located outside India. We share the minimum required order data with payment providers, and may share data with professional advisers or authorities where law requires. Company staff access records on a need-to-know basis.
Cookies, session storage and local storage
ZELVU Play does not set an advertising or cross-site analytics cookie. Session storage holds a random identifier for first-party funnel measurement and is cleared with the browser session. Local storage keeps orders placed on that device, My List, watch history, liked shorts and parental-control settings. You can remove library data from My List or clear browser storage. YouTube's player uses privacy-enhanced mode, but once it loads YouTube may use its own cookies or similar technologies.
Your choices and rights
You may ask for access to, correction of or erasure of eligible personal data; withdraw optional email or WhatsApp consent; and nominate a person to exercise your rights where applicable. Questions and requests go to our Grievance Officer through the help page. Operational and legal records may be retained where required for payment, tax, fraud prevention or dispute resolution.
Children
The Service is for adults. We do not knowingly collect personal data from children; children's titles are links reviewed by a parent on YouTube. If you believe a child has given us data, contact us and we will investigate and delete it where appropriate.
Security
Data is transmitted over HTTPS. Public forms write through validated, rate-limited database functions; row-level security prevents visitors from reading submitted records. Premium checkout fails closed until the launch gate passes, amounts are selected server-side, ICICI access activation depends on a verified bank record, and manual payment fulfilment is restricted to a reported manual-UPI transaction. No system is perfectly secure; tell us immediately if you suspect a problem.
Changes
We will post updates here with a new date and notify affected contacts of material changes where required.