Skip to content
Explore tools
Legal

Privacy Policy

This policy explains what personal data Zointy collects, why, and the choices you have. We keep it as short and clear as we can.

Last updated

The short version

  • We collect only what we need to run your workspace.
  • We never sell your data or use your business data for advertising.
  • Your business data belongs to you; we process it on your instructions.
  • You can access, correct or delete your data — just ask.

Who we are

Zointy (“we”, “us”) provides a business workspace for CRM, invoicing, finance, HR, payroll, projects and related apps. This policy is published under the Information Technology Act, 2000 and the rules made under it, and is designed to meet the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Two kinds of data

Account data — information about you as a Zointy user (your name, email, login activity). For this, we decide how data is used and act as the data fiduciary.

Customer Data — information your business puts into Zointy about your own customers, leads and employees. For this, your business is the data fiduciary and we process it only on its behalf and instructions. If you are one of our customers’ contacts or employees, please contact that business first.

What we collect

  • Account details: name, work email, username, password (stored only as a secure hash), business name, business type and team size.
  • Workspace content: the records you create, such as leads, invoices, employee and payroll entries, tasks, messages and uploaded logos.
  • Usage and device data: IP address, browser type, sign-in times and an activity log of changes in your workspace, used for security and audit.
  • Messages to us: what you send through our contact form or support, including phone number if you choose to share it.
  • Billing details for paid plans. Card and UPI details are handled by our payment partners and are not stored by Zointy.

How we use it

  • To create and run your account and workspace, and keep it secure.
  • To send service emails such as password resets, invitations and important notices.
  • To respond to your questions and support requests.
  • To understand, in aggregate, how features are used so we can improve them.
  • To meet legal obligations, such as tax records and lawful requests from authorities.

We do not sell personal data, and we do not use Customer Data to advertise to you or anyone else.

We process account data with your consent, given when you sign up, and for legitimate uses permitted by the DPDP Act, such as providing a service you asked for or meeting a legal obligation. You can withdraw consent at any time by closing your account; this does not affect processing that already happened.

Cookies

We use a small number of essential cookies to keep you signed in and to protect forms against forgery. We store your light/dark theme preference in your browser. We do not use advertising cookies.

Who we share data with

Only with service providers who help us run Zointy — for example hosting, email delivery and payment processing — under contracts that require them to protect it and use it only for our instructions. We may also disclose data where required by Indian law or to protect the rights and safety of our users. If Zointy is ever involved in a merger or acquisition, we will notify you before your data becomes subject to a different policy.

How we protect it

We use encrypted connections (HTTPS), hashed passwords, role-based access inside each workspace, protection against cross-site request forgery, rate-limiting of sign-in attempts and audit logs. No system is perfectly secure; if a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

How long we keep it

We keep account data while your account is active. When a workspace is closed, we delete or anonymise its data within a reasonable period, except where we must keep records longer by law (for example, invoices and tax records).

Your rights

Under the DPDP Act you may ask us to:

  • tell you what personal data we hold about you and how it is used;
  • correct, complete or update it;
  • erase it, where we no longer need it or you withdraw consent;
  • nominate another person to exercise your rights if you are unable to.

Email support@zointy.in from your registered address. We will respond within a reasonable time and in any case within the period required by law.

Children

Zointy is a business tool and is not meant for anyone under 18. We do not knowingly collect personal data from children.

Grievance officer

If you have a concern about how your data is handled, contact our Grievance Officer at support@zointy.in with the subject “Privacy grievance”. We will acknowledge your complaint promptly and aim to resolve it within the timelines set by the IT Rules and the DPDP Act. If you are not satisfied, you may approach the Data Protection Board of India.

Changes to this policy

We will update this page when our practices change and revise the “Last updated” date. If the changes are significant, we will let account owners know by email or in the app.