VidCo

Privacy Policy

VidCo — How we collect, use and protect your personal data

Effective date: 2 August 2026 Last updated: 2 August 2026

Operated by: RAPIDSELL SOLUTION PRIVATE LIMITED

1. Introduction

RAPIDSELL SOLUTION PRIVATE LIMITED ("VidCo", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you use the VidCo platform, including the VidCo mobile applications (customer, merchant and delivery-partner apps) and any associated websites (collectively, the "Platform") and the related Services.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000 and applicable rules. In this Policy, we act as a "Data Fiduciary" and you, as an individual whose data we process, are a "Data Principal".

By using the Services, you acknowledge that you have read this Policy. Where the DPDP Act requires consent, we will obtain it separately and you may withdraw it as described below.

2. Personal Data We Collect

Information you provide. Name, mobile number, email address, delivery and billing addresses, date of birth (where provided), profile details, and content you submit such as reviews, ratings, reels, stories and communications.

Merchant / KYC information. For Merchants and Delivery Partners, we collect business and verification details such as GSTIN, PAN, bank account details, and identity and address documents required for onboarding and compliance.

Transaction information. Order history, amounts, Coins and rewards activity, and payment status. Full card or bank credentials are collected and processed by our payment partners, not stored by us.

Device and usage information. Device identifiers, IP address, app version, operating system, log data, and information about how you interact with the Platform (including content you view and search queries).

Location information. With your permission, precise or approximate location to enable local discovery, serviceable-area checks, address selection and delivery. You can control location permissions through your device settings.

Cookies and similar technologies. On our websites, we use cookies and similar technologies for functionality, analytics and preferences, as described in Section 8.

3. How We Use Personal Data

We process personal data for the following purposes:

• to create and manage your account and verify your identity;
• to enable local discovery, list products, process and fulfil Orders, and facilitate delivery;
• to process payments, issue Coins and referral rewards, and manage subscriptions;
• to provide customer support and handle grievances, returns and refunds;
• to personalise content, recommendations and search results;
• to detect, prevent and investigate fraud, abuse and security incidents;
• to comply with legal, tax and regulatory obligations; and
• to send service communications and, with your consent where required, promotional messages.

We process personal data on the basis of your consent and/or the legitimate uses and other legal bases permitted under the DPDP Act, including where processing is necessary to provide a service you have requested or to comply with law.

3A. Artificial Intelligence (AI) Services

The Platform may provide artificial intelligence ("AI") powered features and services, including AI-generated product descriptions, videos, reels, captions, translations, recommendations, customer support, search assistance, inventory management, marketing automation, content moderation, and other automated tools ("AI Services").

When you use AI Services, we may process the information, prompts, instructions, images, videos, documents, audio recordings, product information, and other content you provide in order to generate the requested output, improve service quality, detect misuse, maintain platform security, and comply with applicable law.

AI-generated outputs may contain inaccuracies, omissions, or unintended content. Users and Merchants remain solely responsible for reviewing, verifying, and approving AI-generated content before publishing or relying upon it.

Unless expressly stated otherwise, VidCo does not use your confidential business information or personal data to train publicly available artificial intelligence models without your consent or another lawful basis under applicable law.

3B. Video, Reels, Stories and Social Activity

To provide a personalised video-commerce experience, we may collect information regarding your interaction with videos, reels, live streams, stories, advertisements, and other multimedia content.

Such information may include:

• videos viewed;

• viewing duration;

• completion rates;

• likes;

• comments;

• shares;

• saves;

• follows;

• search activity;

• product clicks;

• story interactions;

• live-stream participation;

• engagement with promotional campaigns.

This information helps improve recommendations, discoverability, platform performance, fraud prevention, and merchant analytics.

3C. Platform Permissions

Depending on the features you use, the Platform may request permission to access certain device capabilities, including:

• Camera (for capturing product photos, videos, profile images, identity verification, and live selling);

• Microphone (for recording videos, live streaming, and voice features);

• Photo Gallery or Storage (to upload images and videos);

• Location (to enable nearby discovery, delivery services, and local recommendations);

• Notifications (to send order updates, delivery alerts, offers, rewards, and account notifications).

You may withdraw these permissions at any time through your device settings. Certain Platform features may become unavailable if permission is withdrawn.

4. Sharing and Disclosure

We do not sell your personal data. We share personal data only as necessary and with appropriate safeguards, including with:

• Merchants, to enable them to fulfil your Orders (for example, delivery name, address and contact details);
• Delivery Partners, to enable pickup and delivery;
• payment gateways and financial institutions, to process payments and refunds;
• service providers who support hosting, analytics, communications, mapping and fraud prevention, under confidentiality and data-protection obligations;
• government, regulatory or law-enforcement authorities where required by law or to protect rights, safety and the integrity of the Platform; and
• acquirers or successors in the event of a merger, acquisition or reorganisation, subject to this Policy.

4A. AI Moderation and Automated Content Review

To maintain a safe and trustworthy marketplace, VidCo may use automated technologies, artificial intelligence, machine learning systems, and human reviewers to analyse content submitted through the Platform.

Such review may apply to:

• product listings;

• images;

• videos;

• live streams;

• stories;

• comments;

• ratings;

• reviews;

• merchant profiles.

These systems assist in identifying spam, fraud, counterfeit products, policy violations, intellectual property infringement, harmful content, misleading advertisements, and other prohibited activity.

Automated systems may occasionally produce incorrect results. Users may request review through our grievance mechanism.

4B. Customer Support Communications

When you communicate with us through customer support, chat, email, telephone, WhatsApp, or other communication channels, we may collect and retain those communications to:

• respond to enquiries;

• resolve disputes;

• improve customer service;

• investigate fraud;

• comply with legal obligations;

• monitor service quality.

Calls and chats may be recorded or monitored where permitted by applicable law.

4C. Marketing Communications

With your consent where required by law, we may send promotional communications through:

• email;

• SMS;

• push notifications;

• WhatsApp;

• in-app messages;

• other electronic communication channels.

These communications may include:

• offers;

• product recommendations;

• new feature announcements;

• merchant promotions;

• loyalty programmes;

• referral campaigns.

You may opt out of promotional communications at any time through your account settings or the unsubscribe mechanisms provided.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal, tax, accounting and regulatory requirements, and to resolve disputes and enforce our agreements. When data is no longer required, we delete or anonymise it in accordance with applicable law.

5A. Data Retention

Different categories of personal data are retained for different periods depending upon the purpose of processing, applicable legal requirements, fraud prevention needs, dispute resolution, taxation, and regulatory obligations.

Examples include:

• account information;

• order history;

• invoices;

• payment records;

• merchant verification documents;

• customer support records;

• security logs;

• AI interaction records;

• marketing preferences.

When retention is no longer necessary, personal data will be securely deleted, anonymised, or otherwise processed in accordance with applicable law.

5B. Account Closure and Data Deletion

You may request deletion of your account at any time.

Upon receiving a valid request, we will delete or anonymise personal data that is no longer required for:

• legal compliance;

• taxation;

• fraud prevention;

• dispute resolution;

• enforcement of contractual obligations;

• protection of the rights of Users or VidCo.

Certain transactional, financial, regulatory, or audit records may continue to be retained for the periods prescribed by applicable law.

6. Security

We implement reasonable technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration and destruction, including access controls, encryption in transit and secure processing by our payment partners. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

6A. Personal Data Breach Response

If VidCo becomes aware of a personal data breach affecting personal data under our control, we will take appropriate steps to investigate, contain, mitigate, and remediate the incident.

Where required by applicable law, we will notify the appropriate authorities and affected Data Principals within the timelines prescribed by law.

7. Location Data

Location data is used to show nearby stores and products, verify serviceable areas, autofill and validate delivery addresses, and support delivery. You may disable location access at any time through your device settings, though some features may not function correctly as a result.

8. Cookies and Tracking

Our websites use strictly necessary cookies for core functionality and, subject to your choices, analytics and preference cookies to understand usage and improve the Services. You can manage non-essential cookies through the consent controls where provided or through your browser settings.

9. Children's Data

The Services are not directed at children below the age of 18. We do not knowingly process the personal data of children without verifiable parental or guardian consent as required under the DPDP Act. If you believe a child has provided us data without such consent, contact us so we can take appropriate action.

10. Your Rights

Subject to applicable law, you have the right to:

• access a summary of the personal data we process about you;
• seek correction, completion or updating of inaccurate or incomplete data;
• seek erasure of your personal data where no longer required for the purpose collected or by law;
• withdraw consent previously given (which will not affect processing carried out before withdrawal);
• nominate another individual to exercise your rights in the event of death or incapacity; and
• grievance redressal in respect of the processing of your data.

To exercise these rights, contact our Data Protection / Grievance Officer using the details in Section 13. We may need to verify your identity before acting on a request.

11. Cross-Border Transfers

Where personal data is processed or stored outside India by our service providers, we do so only to the extent permitted under the DPDP Act and applicable law, and with appropriate contractual and security safeguards.

11A. International Processing and Cloud Infrastructure

To operate the Platform efficiently, certain service providers may process or store personal data using cloud infrastructure located outside India.

Such service providers may include:

• cloud hosting providers;

• content delivery networks;

• payment processors;

• communication providers;

• analytics providers;

• fraud prevention providers;

• mapping services;

• artificial intelligence service providers.

Where cross-border processing occurs, VidCo will implement appropriate contractual, organisational, and technical safeguards as required under applicable law.

11B. Automated Decision-Making

Certain Platform functions rely on automated systems to improve efficiency, security, and user experience.

These systems may assist with:

• fraud detection;

• spam prevention;

• recommendation generation;

• search ranking;

• product discovery;

• content moderation;

• security monitoring;

• delivery optimisation.

Where decisions significantly affect Users, appropriate review mechanisms may be provided in accordance with applicable law.

11C. Publicly Available Information

Certain information you voluntarily publish on the Platform may be visible to other Users and the public, including:

• profile name;

• business name;

• profile image;

• product listings;

• reviews;

• ratings;

• comments;

• videos;

• reels;

• stories;

• publicly shared content.

Please exercise caution before publishing information that you wish to keep private.

11D. Children's Content

Users should not upload photographs, videos, or personal information relating to children unless they have obtained all permissions and consents required under applicable law.

Merchants are responsible for ensuring that promotional content involving children complies with all applicable legal and advertising requirements.

11E. Third-Party SDKs and Technologies

The Platform may incorporate third-party software development kits (SDKs), APIs, libraries, and technologies to support functionality including:

• authentication;

• payment processing;

• mapping;

• crash reporting;

• analytics;

• push notifications;

• customer communications;

• fraud prevention;

• performance monitoring.

Such third parties process personal data only to the extent necessary to provide their respective services and are contractually required to implement appropriate security and confidentiality measures.

12. Changes to this Policy

We may update this Policy from time to time. We will notify you of material changes through the Platform or other reasonable means and update the "Effective date" above. Your continued use of the Services after the changes take effect constitutes acknowledgement of the updated Policy.

13. Grievance and Data Protection Contact

For any questions, requests or complaints regarding your personal data or this Policy, contact:

• Grievance / Data Protection Officer: Mr. NIRAV MANOJBHAI THAKRAR
• RAPIDSELL SOLUTION PRIVATE LIMITED, Plot No 152, Shaligram Park, Lalwadi Road, Kaushal Nagar, Jamnagar, Gujarat, 361001
• Email: privacy@vidco.in (privacy) / grievance@vidco.in (grievances)

We will respond to and address requests and complaints within the timelines prescribed under the DPDP Act and applicable rules.

14. Section 13 (Grievance and Data Protection Contact)

Appendix A – Summary of Personal Data Processing

This Appendix provides a simplified summary of the categories of Personal Data processed by VidCo, the purposes for which such data is processed, the legal basis for processing under applicable law, the categories of recipients with whom such data may be shared, and the general retention approach. This Appendix is intended for transparency only and should be read together with this Privacy Policy.

Appendix B – Platform Permissions

Depending on the features you choose to use, the Platform may request access to certain device permissions.

Users may revoke permissions at any time through device settings, although certain Platform features may no longer function.

Appendix C – Categories of Third-Party Service Providers

VidCo engages trusted third-party service providers to support the operation of the Platform.

These may include:

All service providers are contractually required to protect Personal Data and may process such data only for authorized purposes.

Appendix D – Your Privacy Controls

Depending on your account type and applicable law, you may be able to:

• Access your account information.
• Update profile details.
• Correct inaccurate Personal Data.
• Manage notification preferences.
• Control location permissions.
• Withdraw marketing consent.
• Delete your account.
• Request correction or erasure of Personal Data where applicable.
• Download available account information.
• Contact the Grievance/Data Protection Officer.
• Nominate another individual to exercise your rights in accordance with applicable law.

Appendix E – Privacy by Design Principles

VidCo is committed to implementing privacy by design and by default throughout the Platform. We strive to:

• Collect only the Personal Data reasonably necessary for identified purposes.
• Use appropriate technical and organisational safeguards to protect Personal Data.
• Limit access to Personal Data to authorised personnel and service providers.
• Review data processing activities periodically to ensure ongoing compliance with applicable law.
• Incorporate privacy and security considerations into the design, development, and deployment of new products, features, and AI services.
• Respect user choices regarding consent, permissions, and communication preferences.

Note: This document is a good-faith drafting template prepared for the VidCo product. It should be reviewed and adapted by qualified legal counsel to reflect the final registered entity, commercial terms and applicable law before publication.