Policies & Conditions
Hey GenZ Let's Talk Privacy 👋
We get it - privacy matters, especially when you're hunting for those fire deals. At GenZDealZ.ai, we're all about transparency and keeping your data safe while helping you snag the best deals out there. This policy breaks down exactly how we handle your info, no cap.
It is also our privacy notice under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Using Claude or buying Canva AI Pro? Jump to the Claude or Canva section.
Data Fiduciary
GenZDealZ.ai Private Limited ("GenZDealZ.ai", "we", "us"), 404/405, Executive Spaces, B Wing, Rustomjee Central Park, Opp Kanakia Wall Street, Andheri (East), Chakala, Mumbai – 400059, India. We decide why and how your personal data is processed, so we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
This privacy policy applies to:
Website
GenZDealZ.ai website (our main platform)
Mobile App
GenZDealZ.ai mobile app (for deals on-the-go)
Marketplace
All services we provide through our marketplace
Some products have their own section with the extra details that apply to them:
GenZDealZ Claude
AI chat, token plans and API keys at genzdealz.ai/claude. Read the Claude section
Canva AI Pro
Canva AI Pro + Design Masterclass offers at genzdealz.ai/canva and our partner offer pages. Read the Canva section
GenZ Credit Scoring
Has its own supplementary notice. Read the Credit Scoring notice
We ask for your consent where you share your data — at sign-up, at checkout and on each form — and link back to this page each time so you know what you're agreeing to. Want this policy in Hindi, Marathi or another language listed in the Eighth Schedule to the Constitution of India? Email yo@genzdealz.ai and we'll send it to you.
Personal Information You Share
When you sign up and use our platform, we collect:
Account & Profile
- • Name, email, phone number (verified by OTP)
- • How you sign in: phone OTP, Google, Apple, or email and password
- • Profile details you choose to add: gender, date of birth, state, college, course
- • iWeb IUMS info (for those sweet student discounts)
- • Profile preferences and interests
Why: to create and secure your account, confirm you're a real person and a student, and unlock student pricing.
Usage Data
- • Which deals you browse, search, click and save
- • Your favorite brands and categories
- • App/website interaction patterns
- • Device info (type, OS, browser) and IP address
Why: to run and secure the platform, fix bugs, and personalise your deal feed.
Orders & Payments
- • What you bought, amounts, order IDs, coupon codes and payment status
- • For manual UPI payments (Canva offers): the transaction ID and payment screenshot you upload
- • We never receive or store your card number, CVV, UPI PIN or net-banking password
Why: to deliver what you paid for, handle refunds, prevent fraud and keep the records tax law requires.
Forms & Support
- • What you enter in contact, brand enquiry, application and scholarship forms
- • Messages you send our support team
Why: to process your request and get back to you.
AI Chats
- • Messages and files you send to GenZGPT, Claude, ChatGPT or Gemini on our platform
Why: to generate replies and keep your chat history. Claude details
From Partners
- • If you arrive from a partner app such as EzStays, the partner sends us your name, email, phone number and their user ID
- • Your student record from iWeb IUMS, when you link it
Why: so you can use GenZDealZ.ai without signing up again.
Information We Collect Automatically
Location Data
Only if you enable it - helps us show local deals
Analytics Data
To improve our platform and user experience. See Cookies & Browser Storage.
Why We're Allowed to Process It
- • Your consent (Section 6, DPDP Act) — for most of what's on this page. You can withdraw it anytime (see Consent).
- • Data you voluntarily give us for a specific purpose (Section 7(a)) — e.g. the email you enter so we can send your order.
- • Legal obligations (Sections 7(d) and 7(e)) — e.g. keeping tax records or responding to a lawful order.
GenZDealZ Claude at genzdealz.ai/claude lets you chat with Anthropic's Claude models (Haiku, Sonnet, Opus and Fable), buy token plans, and — where enabled — create API keys at /claude/api-access. You can browse the page without signing in, but chatting needs a signed-in account with a verified phone number.
What We Collect
- • Account: name, email, verified phone number and account ID
- • Chats: what you type or dictate, Claude's replies, conversation titles, and any artifacts you edit
- • Files: images (JPG, PNG, GIF, WebP), screenshots you paste, PDFs, Word, Excel, PowerPoint, CSV, text and code files, plus the text we extract from them. Zip/rar archives and folders are unpacked in your browser — only the files inside are uploaded
- • Tokens & billing: token balances, usage per conversation, plans bought, coupon codes, order IDs and payment status
- • API keys: key name, allowed models, spending and concurrency limits, expiry, created and last-used times, and credit balances. The full secret key is shown to you once and never saved in your browser
Why We Use It
- • To generate replies — every message is sent along with the conversation so far, which is how Claude remembers context
- • To keep your chats and files available on any device you sign in from
- • To search the web for you, only when you switch web search on
- • To give the free token grant once per verified phone number
- • To track your token balance, process purchases, and stop abuse and fraud
- • To troubleshoot — our logs record error details and, if a reply fails midway, a short excerpt of it
- • We don't use your chats for advertising and we never sell them
Who Processes It
- • Model providers: Claude models are built by Anthropic. We run Haiku, Sonnet and Opus through Amazon Web Services (Amazon Bedrock) and Fable through Databricks. Your messages, conversation context and files go to them to generate each reply. If the model you picked is unavailable we may use another Claude model, and we'll tell you in the chat
- • Google Cloud: hosts our AI backend and stores your chats and files
- • Cashfree Payments: processes token purchases and receives your name, email, phone number and order amount
- • Voice input: uses your browser's built-in speech recognition. In Chrome, Google turns your audio into text; we only receive the text
- • These providers may process data outside India — see Who We Share Data With
Stored on Your Device
- • Your chat list and conversation titles (browser local storage)
- • Copies of files you attached, so they reload fast — cleared automatically after 7 days (IndexedDB)
- • An encryption key for the encrypted backup of your older chats. That backup is stored on our servers, but only your browser can unlock it. When you open Claude, your browser moves these older chats into our standard server storage so you can recover them on any device
- • Clearing this site's data in your browser removes all of the above
Your Controls & How Long We Keep It
- • Chats and files are kept until you delete the conversation or your account
- • Delete any conversation from the chat sidebar — this deletes it from our servers and clears its cached files from your browser
- • Deleting your account erases all your Claude chats, conversations and attachments from our servers
- • Revoke an API key anytime and it stops working straight away. We keep a record of the key (name, prefix and dates, never the secret) for billing and security
- • Purchase records are kept for as long as tax and accounting laws require
Think Before You Share
- • Avoid putting passwords, Aadhaar or PAN numbers, bank details, health information, or other people's personal data into chats or files
- • Treat your API key like a password — anyone who has it can spend your credits
- • AI replies can be wrong. Double-check anything important
Our Canva offers (genzdealz.ai/canva and partner offer pages) give you 1-year Canva AI Pro access plus design training. You pay by scanning our UPI QR code in your own UPI app — we don't process that payment ourselves — and then send us proof so we can activate your access.
What We Collect
- • Full name, email address and mobile number
- • UPI transaction ID (optional)
- • Your payment screenshot (JPG or PNG, up to 5 MB)
- • If you're signed in, we pre-fill your name and email from your account — you can edit them
Why We Use It
- • To check your payment against what we received in our UPI account
- • To activate Canva AI Pro and send your access and training details by email or SMS, usually within 24 hours
- • To help with support questions and refunds
- • To catch fraud, such as the same screenshot being used twice
- • Your access is set up on the email you give us, so we ask for a personal email rather than a college (.ac.in / .edu) one
Who Sees It
- • Our operations team, who verify payments and activate access
- • Google Cloud, which stores your submission; our website host Microsoft Azure passes it through
- • Canva, where activation needs it — we share only your email address. Once you use Canva, Canva Pty Ltd handles your data under its own privacy policy
- • Submissions on partner offer pages (such as our EzStays offer) come to GenZDealZ.ai, and we handle them under this policy
- • If you message us on WhatsApp for support, WhatsApp (Meta) handles those messages under its own terms
How Long We Keep It
- • Your submission and screenshot: for your subscription term plus 12 months, to handle refunds and disputes. After that we delete them
- • Payment records: for as long as tax and accounting laws require
- • Want it deleted sooner? Email us — we'll delete whatever we're not legally required to keep, though that may end your access
Share Only What's Needed
UPI screenshots can show your name, UPI ID, bank name and account details. Feel free to crop or cover anything except the amount, date/time, transaction reference (UTR) and payee — that's all we need to verify your payment.
We give free Claude credits once per phone number. To apply this rule, and to stop the same number collecting free credits again through new or deleted accounts, we keep a record of phone numbers checked for free credits. The record identifies your number by a fingerprint: a code made from your number with a secret key held by GenZDealZ. The same number always gives the same code, so we can tell when a number has already had free credits. The code doesn't show your number on its own, but because we hold the key we can check whether a particular number is in the record, so we treat it as your personal data and protect it. We make this record when you verify a phone number on GenZDealZ, and, for accounts created before the rule started, from the phone number already on the account. While your account is open, the record also keeps an encrypted copy of your number, so that we can update the fingerprint if we change our key and check the record if there is a dispute. We use the fingerprint only for free credits and fraud prevention, never for marketing. If you delete your account in the app, we keep the fingerprint (with your account ID removed) so the number can't get free credits again, and we remove the encrypted copy.
We're not here to spam you or sell your data to random companies. Here's exactly what we do:
Platform Improvement
- • Build better features based on what GenZ actually wants
- • Personalize your deal feed so you see stuff you actually care about
- • Improve our recommendation engine to surface the best deals for you
Communication
- • Order, OTP and account messages by SMS, email or in-app
- • Push notifications about flash sales and limited-time offers — turn them off anytime in your device or browser settings
- • Customer support when you need help
- • To stop marketing emails or SMS, email yo@genzdealz.ai
Security & Compliance
- • Fraud prevention to keep your account safe
- • Legal compliance with the DPDP Act, IT Act, tax laws and other regulations
- • Platform security monitoring and improvements
❌ No Data Selling
We never sell your personal data to advertisers
❌ No Random Sharing
We only share your info with the service providers and partners listed in Who We Share Data With
❌ No Unauthorized Use
We never use your data for purposes you didn't agree to
We keep personal data only as long as we need it for the purpose you shared it for. After that — or once you withdraw consent — we erase it and tell our processors to do the same, unless a law requires us to keep it.
Retention Periods
- • Account & profile: until you delete your account
- • Orders & payment records: as long as tax and accounting laws require (generally up to 8 years)
- • Claude chats & files: until you delete them or your account
- • Canva submissions & screenshots: subscription term + 12 months
- • Forms & support messages: until your request is resolved, plus 12 months for follow-ups
- • Security & access logs: at least 1 year, as the DPDP Rules, 2025 require
Deleting Your Account
- • Email yo@genzdealz.ai from your registered email, or tell us your registered phone number
- • We erase your account, profile and Claude data, and keep only the records the law requires
- • Deletion can't be undone, and unused token balances or active subscriptions end with it
Your data security is our top priority. Here's how we protect you:
Technical Security
- • HTTPS encryption for all data in transit
- • OTP verification of your phone number at sign-in
- • Server-only secrets and signed server-to-server requests
- • Rate limits to block brute-force and abuse
- • Payments handled by PCI-DSS compliant Cashfree — card data never touches our servers
Compliance Standards
- • Reasonable security safeguards as required by the DPDP Act and the IT Act
- • Access limited to staff who need it for their job
- • Access logs kept so we can detect and investigate misuse
- • Incident response plan in case anything goes wrong
If There's a Data Breach
- • We'll tell affected users without delay: what happened, the likely impact, what we're doing about it, what you can do, and who to contact
- • We'll report it to the Data Protection Board of India, as the law requires
Your part: never share your OTP or API keys, and sign out on shared devices.
Withdrawing consent is as easy as giving it. Here's how:
Do It Yourself
- • Edit your details anytime on your profile page
- • Delete Claude conversations from the chat sidebar
- • Revoke Claude API keys on the API access page
- • Turn off push notifications and location in your device or browser settings
- • Turn Google Analytics on or off in Cookie Settings
- • Clear cookies and site data in your browser
Ask Us
- • Email yo@genzdealz.ai to withdraw consent for any purpose, stop marketing messages, or delete your account
- • We stop processing and erase the data within a reasonable time, unless the law requires us to keep it
- • Anything we did before you withdrew stays lawful, and some services may stop working without the data they need
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal. You may exercise any of these rights by writing to us at yo@genzdealz.ai.
Right to Information (Sec. 11)
You can ask for a summary of the personal data we hold about you and how we process it, plus the names of every Data Fiduciary and Data Processor we've shared it with and what we shared.
Right to Correction & Erasure (Sec. 12)
You can request correction, completion or updating of inaccurate or incomplete data, or ask us to erase personal data we no longer need for the stated purpose.
Right to Withdraw Consent (Sec. 6)
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing done before the withdrawal. Certain services may be unavailable after withdrawal. See Consent.
Right to Grievance Redressal (Sec. 13)
You can raise a complaint with our Grievance Officer. If you're not satisfied with our response, you may complain to the Data Protection Board of India — the Act asks you to use our grievance process first.
Right to Nominate (Sec. 14)
You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. Email us with the nominee's name and contact details.
How to Make a Request
- • Email us from your registered email, or include your registered phone number, so we can find your account
- • Say which right you're using and what it covers (e.g. "erase my Claude chats")
- • We may confirm it's really you with an OTP before acting
- • We'll respond within 30 days
Grievance Officer
- Name: GenZDealZ.ai Privacy Team
- Email: shreyas@genzdealz.ai
- Phone: 1800-889-0695
- Address: 404/405, Executive Spaces, B Wing, Rustomjee Central Park, Andheri (East), Mumbai – 400059
- We will respond within 30 days of receiving your request.
Your Duties (Sec. 15)
- • Give accurate information and don't impersonate anyone
- • Don't hide material information when giving us your data
- • Don't file false or frivolous complaints — the Board can fine you up to ₹10,000
GenZDealZ.ai — including Claude and our Canva offers — is for people aged 18 and over.
If You're Under 18
- • The DPDP Act treats anyone under 18 as a child, and we need verifiable consent from a parent or lawful guardian before we can process a child's data
- • We don't offer a parental-consent process yet, so please don't create an account or share your details with us
- • If we learn we've collected a child's data without that consent, we'll delete it
- • Parents or guardians can contact us at yo@genzdealz.ai
Our Commitments
- • We don't track, behaviourally monitor or target ads at children
- • For a person with a disability who can't decide for themselves, we accept consent from their lawful guardian
Card, UPI, net-banking and wallet payments go through Cashfree Payments. We receive only the order ID, amount and payment status. Canva offers use a manual UPI QR instead — see the Canva section.
Supported Cards
- • Visa, Mastercard, RuPay, AMEX, Diners Club
- • All major credit and debit cards accepted
Digital Payments
- • Net Banking: 65+ banks supported
- • UPI: BHIM UPI, Google Pay, PhonePe
- • Digital Wallets: Paytm, Mobikwik, Freecharge, and more
What We Deliver
- • Gift cards delivered instantly to your account
- • Digital coupons available in your app/website dashboard
- • Promo codes sent via email and in-app notifications
- • Subscription access activated immediately after payment
What We Don't Handle
- • Physical product shipping - that's on the brands themselves
- • Third-party delivery issues - contact the specific brand for support
- • Product returns/exchanges - handled directly by brand partners
How It Works
- 1. Purchase your deal on GenZDealZ.ai
- 2. Receive digital codes/access instantly
- 3. Redeem directly at the brand's store/website
- 4. Enjoy your savings
User Agreement
- • Verified users and students must accept terms for each gift card/subscription purchased
- • Real-time notifications are part of using our platform (web + app)
- • Terms updates happen regularly - we'll notify you of major changes
Platform Usage
- • Age requirement: Must be 18+ to use our platform (see Children's Data)
- • Account responsibility: Keep your login details secure
- • Fair use: Don't abuse our platform or try to game the system
- • Content guidelines: Be respectful in reviews and interactions
Deal Terms
- • Brand-specific terms apply to each deal
- • Expiration dates vary by offer
- • Usage limitations may apply (one per customer, etc.)
- • Redemption process varies by brand partner
When we update this policy, we change the "Last updated" date below. For important changes — like using your data for a new purpose — we'll tell you by email or in the app first, and ask for fresh consent where the law requires it.
Contact Us About Your Data
- Data Fiduciary: GenZDealZ.ai Private Limited, 404/405, Executive Spaces, B Wing, Rustomjee Central Park, Andheri (East), Mumbai – 400059
- Privacy requests: yo@genzdealz.ai
- Grievance Officer: shreyas@genzdealz.ai · 1800-889-0695
Last updated: October 2026
GenZDealZ.ai - Empowering GenZ securely.