Privacy Policy

Last updated: 7 July 2026

Ezcods / Parth Rameshbhia Badreshiya ("EzCods", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what information we collect, how we use, share, store and protect it, and the rights you have. It applies to our website, dashboard, APIs and our WhatsApp Business and Facebook Messenger services. By using our Services you agree to this policy.

1. Who we are

Ezcods / Parth Rameshbhia Badreshiya operates EzCods, a platform that lets businesses create online stores and communicate with their customers (including over WhatsApp). For store owners we are a data controller; for the personal data of a store’s own customers, the store owner is the controller and we act as a processor on their behalf.

2. Information we collect

• Account data: name, email, phone number, password (stored hashed), and business details you provide.
• Verification data: phone number and one-time passwords (OTPs) used to verify your identity at sign-up and login.
• Store & content data: products, orders, media, designs and text you add to your website.
• Customer data: details of your store’s customers (name, phone, address, order history) that you or they provide.
• Payment data: processed by our payment gateway (PhonePe and other authorised processors). We receive only transaction status and reference details — never your full card, UPI PIN or bank credentials.
• WhatsApp & messaging data: phone numbers, message content, media (images, voice notes, documents), delivery/read status and profile names exchanged through our WhatsApp Business number and in-app support chat.
• Usage & device data: log data, IP address, device and browser information, and cookies used to operate and secure the platform.

3. How we use information

• To provide, maintain, secure and improve the Services;
• To create and verify accounts using phone + OTP;
• To process payments, apply discounts and manage subscriptions;
• To send and receive WhatsApp and support messages, and provide customer service;
• To generate content (e.g. product descriptions) using AI providers on your instruction;
• To detect, prevent and investigate fraud, abuse and security incidents;
• To comply with legal obligations.

4. WhatsApp & Meta platform data

We use the WhatsApp Business Platform (Meta) to let businesses message their customers. When you or your customers message our WhatsApp Business number, Meta processes that data under its own terms, and we receive the message content, phone number, profile name and delivery status to display and respond in our dashboard. We use this data only to provide the messaging service you requested. We do not sell it, use it for advertising, or share it with unrelated third parties. Message content is transmitted over encrypted connections (HTTPS/TLS) and access is restricted to authorised staff. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies.

5. Phone number & OTP

We use your phone number to create your account, sign you in via OTP, and (with your consent) to communicate over WhatsApp. In our support chat, phone numbers shared in messages are automatically masked for safety.

6. Sharing & sub-processors

We share data only with service providers who help us run the platform, and where required by law. We do not sell your personal information. Our key sub-processors include:

• PhonePe — payment processing;
• Meta / WhatsApp — business messaging;
• Hosting & infrastructure providers — servers, DNS and delivery;
• AI providers (e.g. Anthropic, Google, Groq) — to generate content you request;
• Communication providers — OTP / email / SMS delivery.

7. Payment security

Online payments are handled by PCI-DSS-compliant payment gateways. Sensitive payment credentials are entered directly with the payment processor and are not stored on our servers.

8. Data security

We protect data with encryption in transit (HTTPS/TLS), hashed passwords, access controls limiting data to authorised staff, and secure storage of secrets. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you and the authorities of breaches where required by law.

9. Data retention

We retain your data for as long as your account is active or as needed to provide the Services and comply with legal obligations. If a subscription payment is pending, your website and data are retained for up to two months before suspension. You may request deletion of your account data at any time; some data may be retained where required by law or for legitimate business purposes (e.g. transaction records).

10. Your rights

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you may access, correct, update or delete your personal data, withdraw consent, and object to certain processing. To exercise these rights, email founder@ezcods.com. Store customers should contact the relevant store owner, who is the controller of their data.

11. Cookies

We use essential cookies to keep you signed in and secure the platform. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

12. Children

Our Services are not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. International transfers

Some of our processors may store or process data outside your country. Where this happens, we take steps to ensure appropriate safeguards are in place.

14. Grievance officer

For privacy questions, complaints or requests under applicable data-protection law, contact our grievance officer at founder@ezcods.com. We aim to acknowledge and address requests within the timelines required by law.

15. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the Services after changes means you accept the revised policy.