Effective Date: 06 August 2026 · Version: 3.3 · Sections: 33
This Privacy Policy (hereinafter the "Policy") delineates, exhaustively and in thirty-three (33) sections, the categories of information that URLZY.IN (hereinafter "we", "us", or "our") may collect, receive, process, store, utilise, disclose, and otherwise manipulate in connection with your utilisation of the urlzy.in platform (hereinafter the "Platform"), together with the purposes for which such information is employed, the legal bases upon which such processing is founded, and the rights and remedies available to you in respect thereof. By accessing or utilising the Platform, you hereby acknowledge that you have read, understood, and unconditionally consented to the collection and processing of information as described herein, in accordance with all applicable data-protection statutes and regulations in force, including the Digital Personal Data Protection Act, 2023 (India) and, to the extent applicable, the General Data Protection Regulation (EU) 2016/679.
This Policy applies to all Personal Data processed by us in connection with the Platform, including data supplied by you directly, data collected automatically through your interaction with the Platform, and data received from Third-Party Services integrated into the Platform. This Policy governs the processing of Personal Data irrespective of the terminal device, browser, or access mechanism employed by you, and extends to all subdomains, directories, progeny, and ancillary utilities of the Platform. Nothing herein shall operate to derogate from any right or protection conferred upon you by any mandatory provision of applicable law.
For the purposes of this Policy, the following locutions shall be ascribed the meanings set forth herebelow, and cognate expressions shall be construed accordingly:
This Policy is drafted to accord with, and shall be interpreted in a manner consistent with, the data-protection and privacy enactments applicable to the Platform, including, without limitation: (i) the Digital Personal Data Protection Act, 2023 (India) and any rules thereunder; (ii) the Information Technology Act, 2000 (India) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; (iii) to the extent the Platform serves data subjects within the European Economic Area, the General Data Protection Regulation (EU) 2016/679; and (iv) any other statute, regulation, or guideline that may hereafter be enacted, adopted, or amended. In the event of any inconsistency between this Policy and any mandatory provision of applicable law, the mandatory provision shall prevail to the extent of the inconsistency.
By utilising the Platform, creating an account, or otherwise affirmatively engaging with the Platform's functionalities, you thereby accord your free, specific, informed, unconditional, and unambiguous consent to the Processing of your Personal Data as described in this Policy. You retain the absolute right to withdraw such consent, in whole or in part, at any time, by contacting us at support@urlzy.in or by utilising any consent-management interface presented by the Platform. Any such withdrawal shall be prospective in effect and shall not affect the lawfulness of Processing conducted prior to the withdrawal. Upon the withdrawal of consent, certain Platform functions that are contingent upon such Processing may become unavailable or materially degraded.
We collect Personal Data through three principal channels: (i) information that you voluntarily and deliberately furnish to us; (ii) information that is collected automatically through your interaction with the Platform; and (iii) information that we receive from integrated Third-Party Services. The specific categories of information collected through each channel are particularised in Sections 6, 7, and 12 hereof respectively.
In the course of registering for an account, configuring your profile, utilising the Platform's tools, or communicating with us, you may voluntarily furnish the following categories of information:
Through your interaction with the Platform, we may automatically collect the following categories of information, which may in certain circumstances constitute Personal Data:
Certain ancillary utilities of the Platform, including but not limited to the SquareUp perspective-correction instrument and cognate image-processing utilities, are architected to operate exclusively through Client-Side Processing. In respect of such utilities, we make the following unconditional representations:
To administer free-tier entitlements, enforce subscription quotas, and protect the Platform against abuse, we record limited usage telemetry, including the invocation of particular tools, the frequency and timing of such invocations, and the allocation thereof to guest or account holders. Such telemetry is retained solely for quota-enforcement, fraud-detection, and operational-accounting purposes, is not combined with any Media Asset content (which is never transmitted to us, per Section 8), and is aggregated or anonymised wherever it is practicable to do so. We do not use such telemetry to construct behavioural advertising profiles.
We employ the Personal Data collected for the following purposes:
Where the General Data Protection Regulation (EU) 2016/679 or an analogous regime requires the identification of a legal basis for Processing, our Processing activities are founded upon one or more of the following:
We do not sell, rent, lease, barter, or otherwise commercialise your Personal Data. We may disclose your Personal Data to the following categories of recipients, in each case only to the extent necessary and in accordance with applicable law:
We do not, and shall not, sell, rent, lease, trade, or otherwise transfer your Personal Data to any third party in exchange for monetary or other valuable consideration, nor shall we share your Personal Data for the purpose of cross-context behavioural advertising without your affirmative, prior, and unambiguous consent. The Platform's economic model is founded upon subscription entitlements and value-added services, and not upon the commoditisation of Personal Data. Any future change to this position shall be effected exclusively through an amendment to this Policy in accordance with Section 32 hereof, and through the procurement of any consent that applicable law may require.
We engage carefully vetted Third-Party Service providers as data processors to assist in the provision of the Platform, including providers of web hosting, infrastructure, email transmission, payment processing, customer-support tooling, and analytics. Each such processor is engaged under a written contract that obliges it to: (i) process Personal Data solely upon our documented instructions; (ii) implement appropriate technical and organisational measures for the protection of Personal Data; (iii) not process Personal Data for its own independent purposes; and (iv) assist us in fulfilling data-subject rights requests and security obligations. Where a processor engages sub-processors, the processor shall remain fully responsible for the acts and omissions of such sub-processors.
To safeguard the Platform and its users against malicious, fraudulent, and phishing activity, we interrogate global threat-intelligence repositories (including, inter alia, the SURBL multi-domain blocklist, the URIBL composite, and the Spamhaus Domain Block List) in respect of target hostnames submitted for shortening. Only the target hostname and its operational metadata are communicated to such repositories; no name, email address, or other personal identifier is disclosed. The responses received are employed solely to determine whether a submitted link may be created, and to maintain a persistent blacklist of offending Internet Protocol addresses where abuse is detected.
We shall disclose Personal Data to courts, tribunals, regulators, law-enforcement agencies, and other governmental authorities where such disclosure is: (i) required by a valid legal process, statutory mandate, or enforceable governmental request; or (ii) reasonably believed by us, in good faith, to be necessary for the prevention, detection, or prosecution of crime, the protection of the rights, property, or safety of ourselves, our users, or the public, or the establishment, exercise, or defence of legal claims. Where permitted by law and operationally feasible, we shall notify you of any such disclosure before or at the time of compliance, unless such notification is itself prohibited by law.
Your Personal Data may be processed, stored, and transferred to jurisdictions outside the Republic of India, including to countries whose data-protection regimes may differ from those of your own jurisdiction. By utilising the Platform, you consent to such cross-border processing. Where required by applicable law, we shall ensure that any such transfer is subject to appropriate and recognised safeguards, including standard contractual clauses, adequacy determinations, or other legally effective transfer mechanisms, such that the level of protection guaranteed by this Policy is not undermined.
We employ cookies, web beacons, and analogous tracking technologies to maintain authenticated sessions, persist user preferences, enforce guest-usage quotas, and analyse aggregate traffic patterns for the improvement of the Platform. A subset of such technologies may be administered by Third-Party Services, including analytics providers and content-delivery networks, subject to their respective privacy policies. You may configure your browser to refuse cookies or to alert you when cookies are proposed; however, certain features of the Platform may be inaccessible or function incorrectly in the absence of cookies. For the avoidance of doubt, Media Assets processed through Client-Side Processing utilities are never stored within cookies or local storage beyond the duration of the active browser session. You are referred to the Platform's Cookie Policy at /pages/cookies.php for comprehensive information concerning the specific cookies deployed and the methods available for their management.
In addition to cookies, the Platform employs local-storage objects within your browser environment for the retention of interface preferences, including the selection of the visual theme and cognate configuration choices. Such local-storage objects reside exclusively upon your terminal device, are not transmitted to our servers, and may be expunged at any time through the privacy and security settings of your browser. The Platform does not employ local-storage objects to track you across unrelated websites, and any data so stored is strictly limited to the functional configuration of the Platform.
We implement industry-standard administrative, technical, and physical safeguards designed to protect Personal Data against unauthorised access, alteration, disclosure, or destruction, including, without limitation, transport-layer encryption in transit, hashed and salted credential storage, least-privilege access controls, regular security patching, and access logging. Notwithstanding the foregoing, no method of transmission over the internet, or method of electronic storage, is absolutely secure, and we cannot guarantee the absolute security of any information transmitted to or stored by the Platform. You transmit information at your own risk.
We retain Personal Data only for so long as is necessary to fulfil the purposes described in this Policy, to comply with legal and regulatory obligations, and to establish, exercise, or defend legal claims. Our retention periods are calibrated by reference to the following criteria:
To the extent conferred by applicable law, you may exercise the rights particularised in Sections 22 through 26 hereof in respect of your Personal Data. We shall respond to all verified requests within the timeframes prescribed by applicable law, and in no event later than thirty (30) days from the receipt of a complete request, save where a longer period is permitted by law and communicated to you together with the reasons therefor. We may require the verification of your identity prior to giving effect to any request, and we shall not discriminate against you for exercising any such right.
You shall have the right to obtain from us confirmation as to whether Personal Data concerning you is being processed, and, where that is the case, access to such Personal Data together with information concerning the purposes of the Processing, the categories of Personal Data concerned, the recipients to whom such Personal Data has been disclosed, and the envisaged retention periods. Where the Processing is founded upon consent or a contract and is carried out by automated means, you shall further have the right to receive the Personal Data concerning you in a structured, commonly used, and machine-readable format, and to transmit such data to another controller without hindrance from us, where technically feasible.
You shall have the right to obtain from us the rectification of inaccurate, incomplete, or out-of-date Personal Data concerning you, and the right to have incomplete Personal Data completed, including by means of supplying a supplementary statement. You shall further have the right to obtain the erasure of Personal Data concerning you where one or more of the following grounds applies:
The foregoing right to erasure shall not apply where Processing is necessary for compliance with a legal obligation, for the establishment, exercise, or defence of legal claims, or for any other ground recognised by applicable law.
You shall have the right to obtain the restriction of Processing where: (i) you contest the accuracy of the Personal Data; (ii) the Processing is unlawful and you oppose the erasure thereof, requesting the restriction of its use instead; (iii) we no longer need the Personal Data but you require it for the establishment, exercise, or defence of legal claims; or (iv) you have objected to the Processing and the outcome of the balancing exercise is pending. You shall further have the right to object, on grounds relating to your particular situation, at any time to Processing founded upon our legitimate interests, and we shall cease such Processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.
The Platform does not employ your Personal Data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, save for automated fraud- and abuse-detection apparatus that operate upon operational metadata and threat-intelligence signals rather than upon your substantive personal content. Where any automated decision-making is deployed in the future, we shall implement appropriate safeguards, including the right of the Data Subject to obtain human intervention, to express their point of view, and to contest the decision, in accordance with applicable law.
The Platform is not directed to, and is not intended for, persons below the age of majority in their respective jurisdictions. We do not knowingly collect Personal Data from minors, and where the consent of a parent or lawful guardian is required by law in respect of a minor's Personal Data, such consent shall be procured prior to any such Processing. If we become aware that Personal Data of a minor has been collected without verifiable parental consent, we shall take prompt steps to delete such data and deactivate the corresponding account. If you believe that we have inadvertently collected the Personal Data of a minor, please notify us immediately at support@urlzy.in.
The Platform may contain links to, or integrate functionality from, Third-Party Services, including advertising networks, analytics providers, payment gateways, content-delivery networks, and external social and video platforms such as YouTube, LinkedIn, and Quora. This Policy does not apply to the information practices of such third parties, and we encourage you to review their respective privacy policies. The deployment of cookies or analogous technologies by such Third-Party Services, and the collection, use, and disclosure of information by them, are outside our control, and we bear no responsibility or liability therefor.
In the event of a personal-data breach giving rise to a risk to the rights and freedoms of Data Subjects, we shall, without undue delay and, where feasible, within seventy-two (72) hours of becoming aware thereof, notify the competent supervisory authority, unless the breach is unlikely to result in such a risk. Where the breach is likely to result in a high risk to the rights and freedoms of Data Subjects, we shall also communicate the breach to the affected Data Subjects without undue delay, in plain and clear language, describing the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed to be taken to address the breach and mitigate its adverse effects, save where we have rendered the data unintelligible through encryption, where subsequent measures have eliminated the high risk, or where notification would involve a disproportionate effort.
We are committed to the prompt and equitable resolution of any grievance concerning the Processing of Personal Data. Any Data Subject who is aggrieved by a decision of the Platform concerning their Personal Data may file a complaint with us at support@urlzy.in, setting forth the grounds of the grievance in reasonable detail. We shall acknowledge receipt of every such complaint without undue delay and shall endeavour to resolve the same within thirty (30) days of receipt. If you remain dissatisfied with the resolution offered, you may escalate the matter to the Data Protection Board of India or any other competent supervisory authority, as applicable in your jurisdiction.
The Platform may not presently recognise or respond to "Do Not Track" (DNT) signals transmitted by certain browsers. Notwithstanding the foregoing, you retain the ability to manage and restrict cookies, local-storage objects, and analogous tracking technologies directly through the configuration interfaces of your browser, as more particularly described in the Platform's Cookie Policy at /pages/cookies.php, and the Platform does not employ cross-context behavioural advertising that would require DNT compliance.
We reserve the right to amend, modify, supplement, or replace this Policy at any time. Any material changes shall be communicated by posting the revised Policy on the Platform, and the date of the latest revision shall be indicated at the top of this page. Where any such amendment constitutes a material change that affects your rights, we shall, to the extent required by applicable law, obtain your consent or provide you with a reasonable period of prior notice. Your continued utilisation of the Platform following the posting of any revised Policy shall constitute your acceptance of such revisions.
All enquiries, requests, and notices concerning this Policy or your Personal Data shall be directed to: support@urlzy.in. We shall use commercially reasonable efforts to respond to all bona fide enquiries within a reasonable period. For the purposes of the Digital Personal Data Protection Act, 2023 (India), the platform operator acts as the Data Fiduciary in respect of the Processing activities described herein, and all grievance communications shall be addressed to the designated contact at the aforementioned address.