Zerlancer Privacy Policy
Effective 6 October 2026. Version dated 6 October 2026. Independent Indian legal review remains pending. Payments remain disabled.
Who operates the platform
Zertical Private Limited operates Zerlancer and is responsible for personal data processing it determines for the platform. CIN: U62011GJ2026PTC182179. Registered office: Blk A, 606 Prahladnagar, B/H Titanium City Center, Jivraj Park, Ahmedabad 380051, Gujarat, India. Support: support@msmenxt.com; +91 95876 47474. The authenticated Privacy Centre is https://zerlancer.msmescores.com/privacy#privacy-request.
Our intermediary role in user projects does not remove our responsibility for the platform's own personal data processing. Users may independently determine processing of data they receive; that does not make all such use lawful or release us from our own duties.
Data and purposes
| Category | Examples | Specific use |
| Account | Email, username, permanent role, country/timezone, age confirmation and email eligibility status | Registration, authentication, account eligibility and role specific access |
| Credentials and sessions | Salted password hashes, hashed tokens, expiry/revocation and login events | Secure sign in, password changes and session management |
| Profile and marketplace | Names, skills, biography, rates, jobs, proposals, interests and reviews | User selected publication, discovery and requested marketplace interactions |
| Collaboration | Messages, files, contracts and milestones when those features are available | Requested communications, collaboration and evidence of user agreements |
| Security and operations | Request/network/device metadata, hashed IP/user agent identifiers, timestamps and audit events | Abuse prevention, access control, reliability and incident investigation |
| Support and rights | Request details, contact information, consent history and responses | Support, correction/deletion/withdrawal requests and grievances |
| Entitlements | Membership state and references; billing metadata only if payments are enabled later | Access enforcement and, if enabled with disclosure, billing reconciliation |
Network metadata may be processed transiently by hosting/security providers even where application identifiers are hashed. Hashing is not a promise that all records are anonymous. Do not submit card secrets, passwords, unnecessary tax/identity documents or unrelated third party personal data in messages or support requests.
Choices and processing grounds
We explain the necessary service purposes when seeking consent. Optional marketing is a separate choice and is off by default. We do not treat account creation as blanket permission for unrelated marketing or unrestricted reuse of private project content. Where processing is permitted or required without consent by applicable law, it is limited to that lawful purpose. A refusal or withdrawal may prevent a feature that requires the affected data, but does not justify unrelated processing.
Visibility and recipients
Your selected public profile and job information may be viewed by other users or visitors. Proposal/contact details are masked or restricted according to the actual feature and current access rules. Recipient access does not give a right to scrape, resell or misuse those details. Do not rely on masking as a guarantee of anonymity or put sensitive information in public content.
Cloudflare provides hosting, databases, storage, security and email delivery. Relevant data is processed by those services for the disclosed purposes. Authorised staff may access necessary records for support, security and administration. We may disclose necessary information to a project recipient at your direction, to advisers under appropriate obligations, or to authorities when lawfully required. Optional Google login, payment providers and a real malware scanner are not represented as active merely because integration code exists. Additional processors or new purposes require appropriate review and notice before use.
This policy does not authorise selling personal data, unrestricted advertising access or AI model training on confidential work. Any such proposed use would require a separate lawful assessment and appropriate notice/choice before introduction.
Cookies and communications
Session cookies maintain sign in. Security and bot protection mechanisms may process technical information. Service emails include six digit one time codes for email ownership verification, sign in and password reset. Optional promotional communications use a separate preference. Rejecting marketing does not stop essential account security notices. If analytics or advertising tracking is introduced, we will update this notice and provide the choices required by applicable law.
Retention, security and transfers
We retain records only for the service purpose, applicable legal requirements or a documented dispute/security hold. Erasure requests are reviewed against those grounds. Existing maintenance retains revoked sessions up to one year and removes certain expired/consumed email verification records after 30 days; these examples are not a complete retention schedule. Encrypted daily file recovery copies are stored in a separate private bucket and scheduled to expire after seven days. Provider deletion can take additional processing time. Database recovery history follows the configured Cloudflare plan; restricted offline exports require controlled custody and expiry. Backup rotation does not delete live records or remove legal holds. We do not promise instantaneous deletion from every backup.
We use access controls, hashed credentials, restricted storage and auditing. No system is without risk; this does not waive reasonable safeguards or notification duties. Private uploads remain unavailable where scanning clearance has not been established. Incident communication follows applicable notification duties, including notices to affected people and authorities when required.
Cloudflare operates globally; do not assume every record stays in India. Transfers are subject to applicable government restrictions and vendor safeguards. We do not promise India only storage.
Your requests
Use the Privacy Centre or support email to request information, correction, erasure, consent withdrawal, grievance handling or nomination where applicable. Provide enough information to establish authority; we may request proportionate verification, not unnecessary identity documents. Withdrawing marketing is available through account preferences. Loss of account access does not eliminate the support route. We will explain a lawful retention exception or refusal rather than treating these rights as waived by using the service.
We aim for acknowledgement within 48 hours and resolution within one month, subject to the applicable request type and statutory period. Our Grievance Officer is Bhupesh Purohit. Email support@msmenxt.com with the subject “Zerlancer grievance”, or use the authenticated Privacy Centre. Written correspondence may be addressed to the Grievance Officer, Zertical Private Limited, at the registered office above. Do not send passwords or one time codes. After the applicable internal process, statutory escalation rights remain available, including to the Data Protection Board where its relevant procedure applies.
Adults and policy changes
Zerlancer is intended for adults aged 18 or older. We require age confirmation; it is not a claim of independent age verification. Report suspected child accounts so access and retention can be assessed lawfully. We will not introduce child services without the required protective measures.
Material changes will be explained with version information and, where necessary, renewed consent before a new purpose. Your continued use is not a substitute for consent where law requires it.