Privacy Policy

• Account information: your name, business name, email address, phone number and organisation details provided at sign-up.
• Business & payroll data: employee records, salary information, invoices, ledger entries, tax identifiers and documents you upload to run payroll, billing and accounting.
• Usage information: device/browser details, IP address and interactions with the platform, used to keep the service secure and improve it.
• Communications: messages you send to our support, chat, WhatsApp or email channels.

• Providing and operating the payroll, billing and accounting services you request
• Processing subscription payments and managing your account
• Providing customer support and responding to your queries
• Meeting legal, tax and regulatory obligations applicable to our operations
• Securing the platform, preventing fraud and maintaining audit trails

Payments made by customers in India (in INR) are processed securely by our payment gateway partner, Cashfree Payments. We never store your card, UPI or internet-banking credentials on our systems — payment instrument details are collected, tokenised and processed directly by Cashfree Payments under its own PCI DSS-compliant infrastructure and privacy terms. We receive only the information necessary to confirm, reconcile and refund a transaction (e.g. transaction ID, amount, status and masked payment details).

• Payment processors (e.g. Cashfree Payments) — only to the extent needed to process your payments and refunds.
• Cloud & service providers that host and operate the platform under contractual confidentiality and security obligations.
• Legal & regulatory authorities where disclosure is required by applicable law.

We never sell your personal data.

We retain your data only as long as your account is active or as needed to provide the service, and thereafter for the periods required by applicable tax, accounting and legal requirements (including statutory retention of financial and payroll records). When data is no longer required, it is securely deleted or anonymised. Upon cancellation, you may export your data before deletion, in line with our Terms & Conditions.

• Access, correct or delete your personal data
• Withdraw consent or object to certain processing
• Request a copy of your data in a portable format
• Raise a grievance with our Grievance Officer (see below)

To exercise any right, email care@zoazoneservices.com.

Where we process personal data of individuals in India, we comply with the Digital Personal Data Protection Act, 2023 (DPDP Act). We process personal data only for lawful purposes with your consent or another valid basis, implement reasonable security safeguards to prevent breaches, and honour your rights as a Data Principal, including the right to access, correction, erasure and grievance redressal.

Grievance Officer, Zoa Zone Services Pvt Ltd, 376, G3, Road No 82, Film Nagar, Jubilee Hills, Hyderabad, Telangana 500096, India. Email: care@zoazoneservices.com. Complaints are acknowledged within 48 hours and resolved within 15 days.