Privacy Policy
Zceppa — a product of Marajo Technology Private Limited
Last Updated: August 24, 2026
1. General
- This document outlines the privacy policy (“Policy”) of Marajo Technology Private Limited (“Marajo”) with respect to your usage of the website https://www.zceppa.com and the web application (https://app.zceppa.com) and mobile application (PlayStore and AppStore) associated thereto (“Platform”) and shall be read with Marajo’s Terms of Service.
- The terms “WE”, “OUR” and “US” refer to Marajo and the terms “YOU”, “YOUR” and “USER” refer to you, as a user of Zceppa. The term “PERSONAL INFORMATION” means information that you provide to us which personally identifies you to be contacted or identified, such as your name, phone number, email address, and any other data that is tied to such information. Our practices and procedures in relation to the collection and use of Personal Information have been set out below in order to ensure safe usage of the Website for you.
- Terms not explicitly defined herein shall be deemed to have the meaning assigned to them under Marajo’s Terms of Service, unless repugnant to the meaning or context thereof or explicitly specified otherwise.
- If you choose to use the Platform or its Services, you accept and agree to the Terms and the Policy.
- You can add, create, edit or delete content in your user account. By agreeing to the Terms, you provide Marajo the license to store, secure, use, reproduce, adapt, modify the content created by you or stored in your user account (the “User’s Data”) for technical trouble-shooting, integration with 3rd parties & similar purposes to ensure uninterrupted services to your business with Marajo’s best efforts. You also grant Marajo permission to access, copy, store, transmit, reformat the content of your account solely as required for the purpose of providing the Services to you.
2. Information We Collect
Information you provide us directly
- Your username, password, mobile number and e-mail address when you register for a Marajo Account.
- Profile information that you provide for your user profile, including but not limited to your first and last name, picture, location and phone number.
- User content, including but not limited to photos, comments, and other materials that you post on the Platform.
- Communications between you and Marajo. For example, you may be sent service-related emails (e.g., account verification, changes/updates to features of the Service, technical and security notices). Note that you may not opt out of service-related emails & notifications.
- Communication between you and Marajo Users. For example, messages sent between you and another User.
Information from third parties that you permit us to access
- Your user profile, consisting of your first and last name, email address, profile picture, location and phone number, as made available by you on any third-party Social Networking Sites (SNS) that you integrate with the Platform.
- Third-party integrations with our platform will be governed by the respective third-party terms of use and privacy policy.
2A. Google User Data & YouTube API Services
Zceppa integrates with Google and YouTube through Google OAuth 2.0 and YouTube API Services to allow customers to connect and manage their authorized YouTube channels through the Zceppa platform.
Zceppa’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements, and with the applicable YouTube API Services Terms of Service and Developer Policies.
When you connect a YouTube channel to Zceppa, you authorize Zceppa through Google’s OAuth consent process to access and act on the connected YouTube channel within the permissions you grant. Zceppa acts only on behalf of the customer or authorized user who has connected the channel.
a. Authorization and Google/YouTube data we access
Zceppa uses Google OAuth 2.0 to obtain authorization to access a customer’s connected YouTube channel. Zceppa does not request, collect or store your Google or YouTube account password.
Depending on the Zceppa features you use and the permissions granted through Google OAuth, Zceppa may access:
- information identifying the Google account used to establish the connection, where the applicable Google identity permissions have been granted;
- YouTube channel information and associated channel metadata;
- videos and video metadata associated with the connected channel;
- YouTube comments, comment threads and replies;
- ratings and other YouTube information required to provide the applicable channel-management functionality; and
- OAuth access and refresh tokens required to maintain the authorized connection with Google and YouTube.
Certain YouTube OAuth permissions required for channel and comment management may technically permit Zceppa to view, edit or delete videos, ratings, comments or captions.
Zceppa uses these permissions only to provide the YouTube functionality made available through Zceppa and only within the scope authorized by you.
For example, where Zceppa provides YouTube comment-management functionality, Zceppa may use the authorized permission to:
- retrieve comments associated with your connected YouTube channel;
- display those comments within your Zceppa dashboard;
- allow authorized Zceppa users to prepare and publish replies to YouTube comments; and
- perform other supported comment or channel-management actions that you specifically initiate or authorize.
Zceppa does not use broader Google or YouTube permissions for unrelated purposes merely because an OAuth scope technically permits such access.
b. Acting on your behalf
When you authorize Zceppa through Google OAuth, you permit Zceppa to interact with the connected YouTube channel on your behalf for the Zceppa features you choose to use.
Any Zceppa functionality that causes information to be published, inserted, edited, moderated or deleted on YouTube is performed only through an authorized Google/YouTube connection and based on an action initiated or expressly authorized by an authorized Zceppa user.
Where Zceppa publishes a reply or performs another write operation on YouTube, the action is performed on behalf of the connected YouTube channel.
Zceppa does not independently publish comments, alter YouTube content, change channel information or perform other YouTube write actions outside the functionality authorized by the customer.
Customers are responsible for ensuring that individuals who connect or manage a YouTube channel through Zceppa are authorized to act on behalf of that channel.
c. How we use Google/YouTube data
We use Google/YouTube user data solely to provide, maintain and improve the specific Google/YouTube connected, user-facing features that you choose to use within Zceppa. This may include:
- maintaining the connection between Zceppa and your YouTube channel;
- periodically retrieving authorized YouTube information;
- displaying YouTube comments and related channel information in Zceppa;
- enabling authorized users to respond to comments or perform supported channel-management actions;
- maintaining synchronization between YouTube and Zceppa; and
- supporting and securing the YouTube integration.
Zceppa does not use Google/YouTube user data to:
- serve targeted, personalized or interest-based advertising;
- sell, rent or trade Google/YouTube user data;
- determine creditworthiness or for lending purposes;
- train or improve generalized artificial intelligence or machine-learning models; or
- create unrelated databases, profiles or products that are not necessary to provide the Zceppa services authorized by you.
Any analytics or other processing involving YouTube API Data will be performed only to the extent permitted by the applicable YouTube API Services policies and any approvals required by Google or YouTube.
Zceppa does not pool or aggregate YouTube Authorized Data across unrelated customers or YouTube content owners in a manner prohibited by the YouTube API Services policies.
d. OAuth tokens and continued access
To provide ongoing YouTube functionality, Zceppa may securely store Google OAuth access tokens and refresh tokens associated with your connected account.
These tokens allow Zceppa to continue accessing the authorized YouTube API Services without requiring you to complete the Google authorization process each time the Zceppa service synchronizes authorized information.
OAuth tokens are used solely for the permissions granted by you and only while the applicable Google/YouTube connection remains authorized.
Zceppa does not use OAuth credentials associated with one customer or channel to access another customer’s YouTube data.
If authorization is revoked or an OAuth token becomes invalid and cannot be refreshed, Zceppa will cease using that authorization to access the applicable YouTube account.
e. How we share Google/YouTube data
Zceppa does not sell, rent or trade Google/YouTube user data.
Google/YouTube user data may be processed by service providers acting solely on Zceppa’s behalf where necessary to operate and provide the relevant Zceppa functionality, such as cloud hosting or infrastructure services.
Such providers are required to protect the information, process it only for the services provided to Zceppa and not use the information for their own independent purposes.
Google/YouTube user data may also be disclosed where required by applicable law, regulation, legal process or valid governmental request.
f. Data storage, refresh and retention
Zceppa retains Google/YouTube API Data only for as long as necessary to provide the functionality authorized by the customer and in accordance with applicable YouTube API Services data-storage requirements.
OAuth authorization tokens may be retained for as long as necessary to maintain an active customer authorized YouTube connection.
Where applicable, stored YouTube API Data is refreshed, revalidated or deleted within the periods required by YouTube API Services policies. YouTube API Data that is subject to the applicable 30-day refresh requirement will be refreshed or deleted within that period.
Zceppa takes reasonable steps to ensure that YouTube information displayed through the platform reflects current information available through the YouTube API Services.
g. Disconnecting YouTube and deletion of data
You may disconnect your Google/YouTube account from Zceppa at any time.
When you use Zceppa’s disconnect functionality, Zceppa will cease accessing the connected YouTube channel and will programmatically revoke the applicable OAuth authorization where required.
Following disconnection or revocation through Zceppa, Google/YouTube Authorized Data retained pursuant to that authorization will be deleted as soon as reasonably possible and, where required by YouTube API Services policies, no later than seven (7) calendar days.
You may also:
- delete your Zceppa account;
- request deletion of stored Google/YouTube data by contacting support@zceppa.com; or
- revoke Zceppa’s access directly through your Google Account security settings.
A request to delete data stored by Zceppa does not itself delete information stored directly on YouTube. Content on YouTube must be deleted through YouTube or through an authorized functionality that specifically performs that action on your behalf.
Zceppa periodically verifies that its authorization to access connected YouTube accounts remains valid. If authorization has been revoked through Google or can no longer be refreshed, Zceppa will discontinue access and delete applicable stored YouTube API Data in accordance with the YouTube API Services policies.
h. How we protect Google/YouTube data
Google/YouTube user data and OAuth credentials are protected using appropriate technical and organizational safeguards.
Data is encrypted in transit using industry-standard transport encryption and encrypted at rest.
Access to Google/YouTube user data and OAuth credentials is restricted to authorized personnel and systems on a need-to-know basis.
Zceppa maintains safeguards designed to protect Google/YouTube data against unauthorized access, acquisition, use, alteration, disclosure, destruction or loss.
i. Human access to Google/YouTube user data
Zceppa employees, contractors and other personnel are not permitted to manually access Google/YouTube user data except:
- where you have provided affirmative consent for authorized personnel to access specific information for a purpose requested by you, such as support or troubleshooting;
- where access is reasonably necessary to investigate security incidents, fraud, abuse or technical issues;
- where access is required to comply with applicable law or valid legal process; or
- where information has been aggregated and anonymized and is used for permitted internal operational purposes in accordance with applicable requirements.
j. Google and YouTube terms
Zceppa uses YouTube API Services.
Your use of YouTube-related functionality through Zceppa is also subject to the YouTube Terms of Service and the Google Privacy Policy.
You may review and revoke Zceppa’s access to your Google Account through your Google Account permissions.
Zceppa’s access to and use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
For questions or concerns regarding Zceppa’s use of Google or YouTube information, or to request deletion of your Google/YouTube data held by Zceppa, please contact support@zceppa.com.
3. How We Use Your Information
In addition to the specific uses described elsewhere in this Privacy Policy, Marajo may use information we collect to:
- Help you access and use your account and information after signing in.
- Provide personalized content and information to you and other users, including communications, marketing, or advertising where permitted by applicable law and your preferences.
- Provide, operate, maintain, improve, test, and monitor the effectiveness of our Platform and Services.
- Develop and test new features and functionality.
- Monitor usage and performance metrics, diagnose technical issues, maintain security, and automatically update or improve the Platform.
- Administer contests, events, promotions, or other Platform activities.
- Use information for other purposes reasonably necessary to operate, maintain, secure, support, or improve the Platform and Services, subject to this Privacy Policy and applicable law.
Where Google or YouTube user data is used to provide or improve Zceppa functionality, such use is limited to the specific Google/YouTube-connected, user-facing features authorized by the customer through Google OAuth.
4. How We Store Your Information
Storage and Processing
- Marajo reserves the right to store and process any application or User Data in India or any other country in which Marajo, its Affiliates, or its Service Providers maintain facilities.
- Zceppa data storage policy is in line with data localisation policy of the client’s region. The API services and database will live in a region-specific data center in line with data localisation policy of the client’s country we operate in.
- By registering for and using Marajo, you consent to the transfer of information to India or to any other country in which Marajo, its Affiliates, or its Service Providers maintain facilities and the use and disclosure of information about you as described in this Privacy Policy.
- Marajo uses reasonable safeguards to help keep the information collected through the Platform secure and take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your Marajo Account. Our security policies and practices align with the ISO risk framework, and all data is hosted in data centers that are SOC2, ISO 27001 and HITRUST compliant.
- As part of this Agreement, you are obligated to do your part to maintain personal operational security as outlined in the Zceppa Terms of Use. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to emails between you and Marajo, at all times. Your privacy settings may also be affected by changes that any third-party SNS you connect to Marajo makes to their services. Such accounts will then be governed by that Third Party’s Privacy Policy & Security Framework.
5. Your Choices About Your Information
Your account information and profile/privacy settings
- Profile settings may be made available on the Platform, which can be updated at any time by logging into your account on the Platform.
- Unsubscribe from email communications by clicking on the “unsubscribe link” provided in such communications. As noted above, you may not opt out of service-related communications including but not limited to account verification, purchase and billing confirmation and reminders, changes/updates to features of the Platform or Service, technical and security notices.
Data and user content retention policy
- Following termination or deactivation of your account, Marajo, its Affiliates, or its Service Providers will retain all your data (including your profile information) and User Content as necessary to comply with our legal obligations, maintain accurate financial and other records, resolve disputes, and enforce our agreements. We delete all your data within 30 days after termination of your Account, except otherwise prohibited by applicable law. Google user data follows the deletion timeline described in Section 2A.
Correction or removal of personal information
- If you believe one of your contacts has provided us with your personal information and you would like it to be removed from our database, please contact us at support@zceppa.com.
- Zceppa only collects information on behalf of the customer and does not have any direct relationship with the individuals who may interact with a Zceppa Customer. If you are a customer of one of Zceppa’s Customers, please contact the customer directly to seek any amends to your Personal Information including correction or deletion.
6. Children’s Privacy
- Marajo does not knowingly collect or solicit any information from anyone under the age of 18 or knowingly allow such persons to register for an account. Marajo and its content are not directed at children under the age of 18. In the event that it is discovered that Marajo has collected personal information from a child under the age of 18 without parental consent, we will delete that information as quickly as possible. If you believe that we may have any information from or about a child under the age of 18, please contact us at support@zceppa.com.
7. Other Web Sites And Services
- We are not responsible for the practices employed by any websites or services linked to or from our Platform or Service, including the information or content contained within them.
- Please remember that when you use a link to go from a Marajo-owned domain to another website or service, Marajo’s Privacy Policy does not apply to those third-party websites or services. Your browsing and interaction on any third-party website or service, including those that have a link on our website, are subject to that third party’s own rules and policies. In addition, you agree that we are not responsible and do not have control over any third parties that you authorize to access your User Content. If you are using a third-party website or service and you allow them to access your user content you do so at your own risk.
8. How To Contact Us
- If you have any questions about this Privacy Policy or Marajo in general, please contact us at support@zceppa.com.
9. Changes To Our Privacy Policy
- Marajo reserves the right to modify or update this Privacy Policy from time to time. We will provide you additional forms of notice of modifications or updates as appropriate under certain circumstances. Your continued use of Marajo and your initial acceptance to the terms herein will constitute your equal acceptance to any updated versions of the Privacy Policy thereafter.