Privacy Policy

We collect the following categories of information:

• Account information: your name, email address, password (stored only as a secure hash), business name, country, and preferred language.
• Authentication data: if you sign in with Google, we receive your name, email address, and profile identifier from Google. We never receive your Google password.
• Business data you provide: the records you enter into the Service, which may include personal data about your own customers, employees, and suppliers. You control this data.
• Usage and technical data: log data, device and browser type, IP address, pages viewed, actions taken, and approximate location derived from your IP.
• Cookies and similar technologies: used to keep you signed in, remember preferences, and understand how the Service is used.
• Communications: messages you send to our support or sales channels.

• To provide, operate, secure, and maintain the Service.
• To create and manage your account and authenticate you.
• To process subscriptions and payments through our payment processor.
• To respond to your requests and provide customer support.
• To monitor usage, diagnose problems, and improve features and performance.
• To send service-related communications, and (where permitted) product updates you can opt out of.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our agreements.

We process personal data where it is necessary to perform our contract with you, where we have a legitimate interest in operating and improving the Service, where we have your consent (for example, optional marketing or non-essential cookies), or where we must comply with a legal obligation. Where we rely on consent, you may withdraw it at any time.

We share data with trusted third parties who process it on our behalf, under contracts that require appropriate safeguards. These currently include:

• Cloud hosting and infrastructure providers that run our application and store data.
• Database and storage providers that host your account and business records.
• Authentication provider used to manage sign-in and sessions.
• Google, where you choose to sign in with your Google account.
• A payment processor (Razorpay) that handles subscription billing. We do not store full card details.
• AI/model providers used to deliver the Service's intelligent features, processing only the data needed for the requested task.
• Communication and email-delivery providers used to send transactional messages.

We do not sell your personal data. We may also disclose data if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice where required).

Zerupt operates globally and serves customers across multiple regions. Your data may be processed and stored in countries other than your own. Where we transfer personal data across borders, we take steps to ensure it remains protected by appropriate contractual and technical safeguards.

We retain account and business data for as long as your account is active. After termination, we retain data for a limited period to allow account recovery and to meet legal, tax, and accounting obligations, after which it is deleted or anonymised. You may request earlier deletion as described below, subject to records we are legally required to keep.

We use technical and organisational measures designed to protect personal data, including encryption in transit, hashed passwords, access controls, tenant isolation, and audit logging of changes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Request a copy of your data in a portable format.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Lodge a complaint with a competent data-protection authority.

To exercise these rights, contact us at hussain@zerupt.com. We will respond within a reasonable timeframe. Where your data is held by us on behalf of a business customer (you are an end-customer of one of our users), please direct your request to that business; we will assist them as their processor.

We use strictly necessary cookies to operate the Service (for example, to keep you signed in) and may use optional cookies to understand usage and improve the product. You can control non-essential cookies through your browser settings; disabling strictly necessary cookies may prevent the Service from working.

The Service is a business tool intended for use by organisations and individuals aged 18 or over. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Policy from time to time. We will post the revised version with an updated "Last updated" date and, where changes are material, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance.

If you have questions about this Policy or how we handle your data, contact us at hussain@zerupt.com, or by writing to Malak Star Software Solutions Pvt. Ltd., Banswara, Rajasthan, India.