Privacy Policy

1. Introduction

Zortal Technologies ("Zortal", "we", "us", or "our") operates the Zortal platform (zortal.in), including the web application and mobile applications for Android and iOS (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using Zortal, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

• Name and email address
• Phone number (optional)
• Profile photo (optional)
• Business name and details
• Password (stored securely using industry-standard hashing)

2.2 Information from Third-Party Sign-In

If you sign in using Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

2.3 Device and Usage Data

• Device type, operating system, and app version
• IP address and browser user agent
• Session information (login times, session duration)
• Push notification device tokens

2.4 Location Data

Our mobile app includes a Photo Stamp tool that can add your current location (latitude, longitude, and address) to a photo you take. Location is captured only when you actively use that tool. We do not track your location in the background.

2.5 Camera and Photos

The app requests camera and photo library access so you can take and upload photos — for the Photo Stamp tool and to add images to your website, blog, and media library. Photos are only accessed when you explicitly use these features.

2.6 Business Data

Data you enter while using the Service — including your websites and pages, blog posts, uploaded files, form submissions, website chat conversations, and domain details — is stored to provide the Service to you.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your identity and manage your account
• To send transactional emails (e.g., contact form acknowledgements, team invites, billing receipts)
• To deliver push notifications you have opted into
• To process payments and manage subscriptions
• To provide AI-powered features (chat, content generation)
• To respond to your support requests
• To detect and prevent fraud or abuse

4. Third-Party Services

We use the following third-party services to operate Zortal:

• Google OAuth — for social sign-in (governed by Google's Privacy Policy)
• Cloudflare — for file storage and content delivery
• Dodo Payments — for subscription billing and payment processing
• Expo — for push notification delivery
• Neon — for database hosting
• Vercel — for application hosting
• OpenRouter — for AI-powered features (your prompts are sent to AI models to generate responses)

These services have their own privacy policies. We only share the minimum data necessary for each service to function.

5. Data Storage and Security

Your data is stored on secure, encrypted servers. We use industry-standard security measures including:

• HTTPS encryption for all data in transit
• Encrypted database connections
• Secure password hashing
• Session-based authentication with automatic expiry
• Tenant-level data isolation (each business's data is fully separated)

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Authentication sessions expire automatically after 7 days of inactivity.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your business data
• Withdraw consent for optional data processing (e.g., location, push notifications)

To exercise any of these rights, contact us at vinodbhadala@gmail.com.

8. Children's Privacy

Zortal is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: vinodbhadala@gmail.com
• Website: zortal.in