Privacy Policy

This policy explains what information Zabardast ("we", "us") collects when you visit zabardastapp.pk, join our waitlist, send us a message, enquire about partnering, or apply for a job - how we use it, and the choices you have. Zabardast is a verified-student discount platform launching in Karachi.

Our approach

Three principles govern everything below, and we hold to them whether or not the law requires it:

• We collect the minimum. Every field on every form on this site is one we actually need to reply to you. There are no optional-but-collected extras.
• We use it only for the purpose you gave it for. An email sent to ask a question does not become a marketing list.
• We never sell personal information, and we never pass individual student data to the brands on our platform. See "If you're a brand or partner" below.

What we collect

When you join the waitlist: the email address you enter, and which form/page you used to join (e.g. hero or final call-to-action) and the time you joined.

When you send us a message (the contact form): your name, email address, the topic you select, and the message you write.

When you enquire about partnering (the partner enquiry and list-your-brand forms): your name, your role, your brand or company name, your work email, your phone or WhatsApp number, your category and number of locations, and anything you tell us about the offer you have in mind. This is business contact information, and we treat it as confidential to your business.

When you apply for a role (the careers form): your name, email, phone number, which role you are applying for, any LinkedIn/portfolio/CV link you paste, and what you write about yourself. If you email your CV instead, we hold whatever you send.

When you browse the site: standard usage data collected through cookies and similar technologies - pages viewed, device and browser type, approximate location, referring links, and interactions. This is gathered via the third-party tools below.

We also keep a short-lived technical record of form submissions (including your IP address and browser user-agent) so that a failed submission can be recovered rather than silently lost, and so we can block automated spam.

Cookies & analytics tools

We use the following third-party services, which set cookies or similar identifiers:

• Google Analytics (GA4) - to understand how many people visit and how they use the site. See Google's Privacy Policy.
• Meta (Facebook) Pixel - to measure our advertising and show relevant ads on Meta platforms (Facebook, Instagram). See Meta's Privacy Policy.
• TikTok Pixel - to measure our advertising and show relevant ads on TikTok. See TikTok's Privacy Policy.

Advertising & conversion measurement

To measure how well our ads perform, we tell Meta and TikTok when someone joins the waitlist. This happens two ways: through the pixels running in your browser, and through a direct server-to-server connection (Meta's Conversions API and TikTok's Events API).

When you join, we share a hashed (scrambled, one-way) version of your email address with Meta and TikTok so they can match your signup to an ad you may have seen - without us handing over your actual email. The hashing (SHA-256) is irreversible: Meta and TikTok cannot read your email address from it. We use this only to measure and improve our advertising, and both the browser and server signals are de-duplicated so a single signup is never counted twice.

How we use your information

• To notify you when Zabardast launches and about early-access details.
• To reply to your message, enquiry or job application, and to follow up on it.
• To set up and manage a brand's listing if you partner with us.
• To understand and improve how the site performs.
• To measure and run our marketing, including ads on Meta and TikTok.

We do not sell your personal information. Sending us a message or a partner enquiry does not add you to any marketing list - if you want the launch email, join the waitlist.

Who we share it with

We share data only with the service providers that help us run Zabardast - our website hosting, email, and database/automation providers, plus the analytics and advertising tools named above. They process data on our behalf and are not permitted to use it for their own purposes beyond what's described here. As explained under "Advertising & conversion measurement" above, this includes sharing a hashed version of your email with Meta and TikTok for conversion measurement.

Your choices

• You can ask us to access or delete the data we hold about you at any time - just email us.
• You can disable cookies in your browser settings. You can opt out of Google Analytics with the Google Analytics Opt-out add-on, manage Meta ad preferences in your Meta ad settings, and manage ad personalisation in your TikTok account settings.

If you're a brand or partner

This is the part brands ask about most, so we'll be direct.

• We never ask you for your existing customer data. Not your CRM, not your mailing list, not your transaction history. Partnering with Zabardast does not require you to hand over anything about your customers.
• You never receive individual student data from us. No names, email addresses, phone numbers, student IDs, or any record that identifies a single person. Reporting to brands is aggregate only - counts and totals, never individuals.
• You cannot contact our students directly through us. If you want to reach students again, you do it by running another offer on the platform.
• Your commercial details stay confidential. The offer you propose, your contact details and your enquiry are used to assess and set up your listing, and are not shared with other brands.

Keeping your data

• Waitlist email: until launch and for a reasonable period after, or until you ask us to delete it.
• Contact messages: kept while we deal with your query and for up to 12 months after, so we have the history if you come back to us.
• Partner and brand enquiries: kept for the life of the commercial relationship; if we don't end up working together, for up to 24 months in case circumstances change.
• Job applications: kept for up to 12 months so we can consider you for future roles, unless you ask us to delete them sooner.
• Technical form records (IP, user-agent): up to 90 days, then deleted.

You can ask us to delete any of it earlier - email hello@zabardastapp.pk and we'll action it.

Who this is for

Zabardast is intended for university students. The site is not directed at children under 13.

Changes to this policy

We may update this policy from time to time. The "last updated" date above shows the latest version.

Contact

Questions about your privacy? Email us at hello@zabardastapp.pk.