Privacy Policy

1. Introduction

Zortal Technologies ("Zortal", "we", "us", or "our") operates the Zortal platform (zortal.in), including the web application and mobile applications for Android and iOS (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using Zortal, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

• Name and email address
• Phone number (optional)
• Profile photo (optional)
• Business name and details
• Password (stored securely using industry-standard hashing)

2.2 Information from Third-Party Sign-In

If you sign in using Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

2.3 Device and Usage Data

• Device type, operating system, and app version
• IP address and browser user agent
• Session information (login times, session duration)
• Push notification device tokens

2.4 Location Data

Our mobile app requests location access for GPS-based attendance check-in. Location data (latitude, longitude, and address) is captured only when you actively check in or check out. We do not track your location in the background.

2.5 Camera and Photos

The app requests camera and photo library access to let you take photos (e.g., expense receipts, photo stamps) and upload files. Photos are only accessed when you explicitly use these features.

2.6 Business Data

Data you enter while using the Service — including client records, tasks, invoices, expenses, appointments, and other business information — is stored to provide the Service to you.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your identity and manage your account
• To send transactional emails (e.g., appointment confirmations, invoice notifications)
• To deliver push notifications you have opted into
• To process payments and manage subscriptions
• To provide AI-powered features (chat, content generation)
• To respond to your support requests
• To detect and prevent fraud or abuse

4. Third-Party Services

We use the following third-party services to operate Zortal:

• Google OAuth — for social sign-in (governed by Google's Privacy Policy)
• Cloudflare — for file storage and content delivery
• Dodo Payments — for subscription billing and payment processing
• Expo — for push notification delivery
• Neon — for database hosting
• Vercel — for application hosting
• OpenRouter — for AI-powered features (your prompts are sent to AI models to generate responses)

These services have their own privacy policies. We only share the minimum data necessary for each service to function.

5. Data Storage and Security

Your data is stored on secure, encrypted servers. We use industry-standard security measures including:

• HTTPS encryption for all data in transit
• Encrypted database connections
• Secure password hashing
• Session-based authentication with automatic expiry
• Tenant-level data isolation (each business's data is fully separated)

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Authentication sessions expire automatically after 7 days of inactivity.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your business data
• Withdraw consent for optional data processing (e.g., location, push notifications)

To exercise any of these rights, contact us at vinodbhadala@gmail.com.

8. Children's Privacy

Zortal is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: vinodbhadala@gmail.com
• Website: zortal.in