Last updated 15 September 2026
Privacy policy
What Zapket collects, why, who it's shared with, and how you control it. We follow India's Digital Personal Data Protection Act, 2023.
Who's responsible
Asket Studio runs Zapket and is responsible for your personal data. An agency using Zapket decides what it does with its own clients' content; for that content, we process data on the agency's behalf.
What we collect
- Account details: names, email addresses, mobile numbers and passwords (stored scrambled, never readable) of the agency team and client logins.
- Agency details: the agency's name, state, legal name, GSTIN and address, for plans and invoices.
- Connected social accounts: the access each network gives when someone connects an account: page and profile names, and the keys that let Zapket post. The keys are stored encrypted.
- Content: posts, photos, videos, comments, messages, reviews and results from the connected accounts.
- Payments: what was paid and when. Razorpay handles card, UPI and bank details; we never see or store them.
- Usage: sign-ins and actions in Zapket, kept to keep accounts secure and fix problems.
Why we use it
- To run Zapket: scheduling and publishing posts, approvals, the inbox, reports and notifications.
- To take payments and issue GST invoices, as tax law requires.
- To keep accounts secure, and to answer questions and fix problems.
- To tell you about changes to Zapket or your plan. We don't sell your data or show you ads.
Who we share it with
Only the services Zapket needs to work, each for its own part:
- Social networks (Meta for Facebook, Instagram, Threads and WhatsApp; Google for YouTube and Business Profile; LinkedIn; Pinterest and others) when you publish, reply or read results.
- Razorpay, to take payments.
- Our email and hosting providers, to send emails and store data.
- An AI writing service, only if the agency turns AI help on, and only for the text sent to it.
- Authorities, when the law requires it.
How long we keep it
We keep your data while your agency uses Zapket. When an agency asks us to delete its account, we delete its data within 30 days, except invoices, which tax law requires us to keep for 8 years.
Keeping it safe
Connections are encrypted, social media keys and payment settings are stored encrypted, and each agency can only ever see its own clients. People can protect their account with a sign-in code from an authenticator app.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask to see the personal data we hold about you, correct it, or delete it, and you can withdraw consent. You can also nominate someone to act for you. Most details can be changed yourself in Your account. For anything else, write to help@asketstudio.in.
To remove Zapket's access to a social media account, see deleting your data.
Cookies
Zapket uses only the cookies it needs to keep you signed in and secure. No advertising or tracking cookies.
Children
Zapket is for businesses and isn't meant for anyone under 18.
Grievance officer
If you have a concern about your data, contact our grievance officer at help@asketstudio.in. We reply within 7 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Changes
If we change this policy in a way that matters, we'll tell agency admins by email before it applies.