Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name, billing address
• Payment Information: Credit card details (processed securely via our payment processor)
• Support Communications: Messages, tickets, and correspondence with our team
• Website Content: Data you upload to your hosted websites

1.2 Information Collected Automatically

• Usage Data: Server logs, bandwidth usage, resource consumption
• Device Information: Browser type, IP address, operating system
• Cookies: Session cookies, analytics cookies (see Cookie Policy below)
• Performance Data: Application metrics, error logs, uptime statistics

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our Services
• Process payments and manage your account
• Send service-related communications and updates
• Provide technical support and respond to inquiries
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address security threats
• Comply with legal obligations
• Send marketing communications (with your consent)

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Contract Performance: Processing necessary to provide our Services
• Legitimate Interests: Improving services, security, and fraud prevention
• Legal Compliance: Meeting regulatory and legal requirements
• Consent: Marketing communications and optional analytics

4. Information Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Payment processors, cloud infrastructure providers, analytics services
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Your Consent: For any other purpose with your explicit permission

4.1 Third-Party Service Providers

Our service providers include:

• Payment processing (Stripe, PayPal)
• Cloud infrastructure (AWS, Google Cloud)
• Analytics (Google Analytics - anonymized)
• Customer support tools
• Email communications

All providers are contractually bound to protect your data and process it only for specified purposes.

5. Data Security

We implement robust security measures including:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Access controls and employee training
• Incident response procedures
• Regular backups with encryption

6. Data Retention

We retain your information as follows:

• Account Data: Duration of your account plus 30 days
• Billing Records: 7 years (legal requirement)
• Support Tickets: 3 years after resolution
• Server Logs: 90 days
• Backup Data: 30 days after account termination

7. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("Right to be Forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke consent for marketing or optional processing

To exercise these rights, contact us at privacy@zenocloud.io or through your account dashboard.

8. Cookie Policy

8.1 Types of Cookies We Use

• Essential Cookies: Required for site functionality (login sessions, security)
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for advertising (only with consent)

8.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner when you first visit
• Your browser settings
• Your account preferences

Note: Disabling essential cookies may affect site functionality.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards through:

• EU Standard Contractual Clauses
• Data processing agreements with all vendors
• Privacy Shield certification where applicable

10. Children's Privacy

Our Services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our website at least 30 days before changes take effect.

12. Data Controllers

Depending on your location, the following entity acts as the data controller for your personal information:

12.1 For Users in India

12.2 For Users Outside India

13. India-Specific Compliance

For users in India, we additionally comply with:

• Information Technology Act, 2000: We implement reasonable security practices as required under Section 43A and the IT (Reasonable Security Practices) Rules, 2011
• Digital Personal Data Protection Act, 2023: We process personal data in accordance with the DPDP Act requirements, including lawful processing, data principal rights, and data fiduciary obligations
• Data Localization: Sensitive personal data of Indian users may be stored on servers located in India where required by applicable regulations

14. Contact Us

For privacy-related questions or to exercise your rights:

• Privacy Email: privacy@zenocloud.io
• Data Protection Officer: dpo@zenocloud.io
• General Support: support@zenocloud.io
• Contact Form: Contact Us