Privacy Policy

1. How We Collect Personal Data

What personal data we collect depends largely on the interaction that takes place between you and ZyloChat, most of which can be categorized under the following:

• When you use ZyloChat Service: We store all the content you provide, including information related to you as a customer or an end user of the Service. We gather this information directly from you when you enter it or from integrations linked to the Service (Google, Facebook, Instagram, etc.).
• Third Party Information: In some cases, we receive information from third parties, e.g., from a payment service provider on whether your payment was successful.
• Email and Messaging: When you send us emails or messages, we store the content of such communications, attachments, and your contact details.
• Forms and Events: When you submit forms on the Site (e.g., contact us, subscription, demo request, event registration) or participate in our events, we collect your contact details and the information you provide. In joint events with our partners, we may receive information from them.
• Website Usage: When you use the Site, we collect certain information (e.g., cookie files) that, alone or in combination with other data, may constitute personal data.
• Communities: When you join our communities on Facebook and other groups, we may access your profile data and process your posted comments; however, we do not store or copy this information.

2. What Types of Personal Data We Process

• Customer Account Details: To create or update your account and provide the Service, we collect information from you and third-party integrations (e.g., Google, Facebook, Instagram), including ID, email, status, linked pages/accounts, products in use, location, etc.
• Financial Information: To process your payments for the Service subscription, we require your debit/credit card (last four digits), UPI VPA, account details, and payment information.
• Contact Details and Business Data: We collect information about our customers and potential customers for communication purposes, including full name, title, company, email, or other necessary contact details.
• Requests, Messages, and Form Submissions: We process your messages, support requests, emails, and information shared via online forms or social media.
• Usage Data, Logs, and Technical Data: We automatically collect metadata and log files when you interact with the Service. This may include your IP address, browser type and settings, date and time of use, browser configurations, language preferences, pages viewed, time spent on pages, frequency of use, links clicked, device information, etc.
• Email Performance Data: We use a clear image (gif) in our email communications to track engagement and performance metrics. Much of this data is aggregated. You can disable image loading in your email client if you wish to turn off this tracking.
• Website Cookies and Similar Technologies: We employ cookie technology on the Site. See our Cookie Statement for further details.
• Customer Content: When you use our Service, you may import personal data you have collected from your users, customers, or contacts (“Subscribers”). We process this data solely on your behalf; you are responsible for ensuring you have the necessary permissions and legal basis to share such data with us.
• Sensitive Personal Data: Please do not send or disclose sensitive personal data (e.g., aadhar details, information on racial or ethnic origin, political opinions, religious beliefs, health data, biometric or genetic data, criminal background, or union membership) via the Service.

3. For Which Purposes We Use Personal Data

• To Operate the Service: We use your data to establish an agreement with you as a customer, operate and maintain your account, communicate with you (e.g., announcements, technical notices, updates, security alerts, and support messages), and fulfill billing obligations.
• To Provide the Service: We process Customer Content on your behalf as our customer.
• To Communicate with You: If you request information, register for the Service, complete a form, or provide feedback, we may send you marketing communications related to ZyloChat if permitted by law. You will always have the option to opt-out.
• To Conduct Events: We use the personal data you provide during event registration to send reminders and related communications. You may opt-out of these communications at any time.
• To Comply with Law: We process your data as necessary to comply with legal obligations (e.g., sanctions, accounting and tax requirements, legal processes, audits, subpoenas, or government requests). We verify such requests before disclosure.
• To Negotiate, Enter, and Perform Agreements: We collect and process information about our counterparties and their representatives to negotiate and execute legally binding agreements.
• For Compliance and Safety: We use your data as necessary to enforce our terms and conditions, protect our rights, privacy, and property, and prevent fraudulent or harmful activities.

4. How We Share Personal Data

• We do not sell your personal data to third parties for commercial or advertising purposes.
• Service Providers: We engage third-party companies and individuals (e.g., payment processors, CRM providers, email agents, cloud storage solutions) to help perform certain activities. For details, please refer to our list of Service Providers.
• Professional Advisors: We may share your data with professional advisors such as lawyers, bankers, auditors, and insurers as necessary.
• Third-party Applications and Integrations: To deliver the Service, we share data with integrations and apps linked by our customers (e.g., Google, Facebook, Instagram, Razorpay).
• Business Transfers: In the event of a corporate sale, merger, reorganization, or similar event, personal data may be transferred as part of the business assets. Any successor or acquirer will have the right to use your data in accordance with this Privacy Policy.
• Compliance with Laws and Law Enforcement: We may disclose your data to government or law enforcement authorities when required by law or to enforce our Service’s terms.
• Corporate Affiliates: We may share your personal data with our corporate affiliates.

5. Your Data Protection Rights & Choices

• If you wish to access the personal data that ZyloChat collects, you can do so by contacting us.
• You may contact us to update, correct, or delete information in your account.
• If you are in the EEA, the UK, or Switzerland, you have the right to object to or restrict the processing of your personal data, or to request data portability where technically possible.
• If your data was collected based on consent, you may withdraw that consent at any time. Withdrawing your consent does not affect the lawfulness of the processing conducted prior to withdrawal.
• Requests can be submitted by emailing contact@zylochat.com.
• Access to Data Controlled by our Customers: For personal data processed on behalf of our customers, please contact the respective customer directly.

6. For How Long We Retain Personal Data

We will retain and process personal data until you terminate the Agreement with us as set forth in our Terms of Service. Additionally, we may store data for the retention period required by law or as necessary to resolve disputes, prevent abuse, and enforce our agreements.

7. International Data Transfers

Your personal data may be stored and processed in any country where we have facilities or engage service providers, including in India. By accepting the terms of this Privacy Policy, you acknowledge and agree to the transfer and processing of your data on servers located outside your country, in accordance with the data protection laws of those countries.

8. Children's Information

We prioritize the added protection of children online and encourage parental supervision. The Site and Service are not intended for users under 18, and we do not knowingly collect personal data from anyone under that age. If you are under 18, please do not register for the Service or submit any personal information. If you believe we have collected data from a child without parental consent, please contact us immediately, and we will delete it promptly. We do not sell personal data of customers, including those aged between 13 and 18.

9. Security

Safeguarding Your Information: We take reasonable and appropriate measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction, considering the risks involved and the nature of the data.

Despite our efforts to secure personal data collected through the Site and Service, no method of transmission or electronic storage is 100% secure. We do not warrant that your data will be entirely protected against unauthorized third-party access.

The payment processing vendor we work with employs security measures to safeguard your information during and after transactions.

If you have any questions about the security of your personal data, please contact us at contact@zylochat.com.

Notice of Breach of Security: In the event of a security breach that materially affects you or your Subscribers, we will notify you as soon as possible and provide details of the remedial actions taken.

10. Legal Basis for Processing Your Personal Data (EEA Visitors/Customers Only)

If you are located in the EEA or the UK, our legal basis for processing your personal data depends on the purpose and the type of data:

• Contractual Necessity: We process data to perform a contract with you for the Service (Art. 6(1)(b) of the GDPR or UK GDPR).
• Legitimate Interests: We process data based on our legitimate interests (Art. 6(1)(f) of the GDPR or UK GDPR) to:
  • Communicate with you and inform you about our Service;
  • Comply with applicable laws;
  • Conduct events and communicate with you;
  • Negotiate, enter, and perform agreements;
  • Ensure compliance and safety.
• Consent: We process certain cookie files based on your consent (Art. 6(1)(a) of the GDPR or UK GDPR). Please refer to our Cookie Statement for more details.

When requesting personal data to comply with legal obligations or to enter a contract, we will inform you if providing your data is mandatory and explain the consequences of not providing it. Similarly, if we rely on our legitimate interests, we will explain those interests at the time of collection.

You are not obliged to provide your personal data; however, if it is necessary for entering or performing a contract with you, failure to provide it may prevent us from fulfilling our obligations.

For further details regarding the legal basis for our processing activities, please contact us at contact@zylochat.com.

11. For California Residents

If you are a resident of California, California Civil Code Section 1798.83 allows you to request information regarding how we have disclosed your personal data to third parties for direct marketing purposes during the preceding calendar year. To request this information, please contact us at contact@zylochat.com. We will respond to such requests within 30 days. Note that we are required to respond to an individual only once per calendar year.

Additionally, California Consumer Privacy Laws (California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020) grant you the following rights:

• Requests to Know: You have the right to request details on:
  • The categories of personal data collected about you;
  • The categories of personal data sold or disclosed for a business purpose;
  • The sources from which your personal data was collected;
  • The business or commercial purposes for collecting, selling, or sharing your personal data;
  • The specific personal data collected about you;
  • The categories of third parties to whom your data was disclosed.
• Requests to Delete: You have the right to request deletion of your personal data, subject to applicable law.
• Authorized Agents: You may designate an authorized agent to submit requests on your behalf. The agent must provide written authorization, and we may verify your identity directly.
• Methods and Response: Requests should be submitted via email to contact@zylochat.com. We will acknowledge receipt within 10 business days and respond within 45 calendar days, unless extended up to 90 days for valid reasons.
• Non-Discrimination: You have the right not to be discriminated against for exercising your California privacy rights.

12. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. We will notify you of any changes before they take effect, consistent with the significance of the changes, and obtain your consent for any material changes as required by law.

The “Effective Date” at the top of this Privacy Policy indicates when the latest version went into effect. The updated Privacy Policy applies to all current and past users and replaces any prior conflicting notices.

13. How to Contact Us

If you require additional information or have any questions regarding this Privacy Policy, please contact us via email at contact@zylochat.com.