Privacy Policy

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, and billing details when you register.
• Call Data: Phone call recordings, transcriptions, and metadata (caller number, duration, timestamps) processed through your AI agents.
• Knowledge Base Content: Website content, documents, and manual text you upload to train your agents.
• Usage Data: Call logs, minutes used, post-call action history, and platform interactions.
• Payment Information: Billing details handled securely by Stripe (international) and Cashfree Payments (India). We do not store raw card or UPI data — payment instrument data is collected and tokenised directly by the payment gateways under your explicit consent.
• Integration Credentials: API keys for third-party services (OpenAI, ElevenLabs, Twilio, etc.) stored encrypted.

• To provide, operate, and maintain the Service.
• To process AI voice calls and execute post-call automation workflows.
• To bill you for subscription and overage usage via Stripe.
• To send transactional emails (invitations, billing receipts, alerts).
• To improve the quality, accuracy, and performance of our AI models and platform.
• To comply with legal obligations and enforce our Terms of Service.

All data is stored on secure cloud infrastructure (Base44 platform). We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit.
• Encrypted storage for API keys and sensitive credentials.
• Role-based access controls limiting internal data access.
• Regular security reviews and access auditing.

Call recordings are stored in secure cloud storage. You can delete recordings at any time from your Recordings page.

We do not sell your personal data. We may share data with:

• Service Providers: Stripe and Cashfree (payments), Twilio (telephony), OpenAI/Groq/ElevenLabs (AI processing), SendGrid (email), Slack (notifications). These providers process data only as needed to provide their services.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.

Our platform records and transcribes phone calls as part of the AI voice agent service. It is your responsibility to:

• Obtain necessary consent from callers before recording, as required by applicable law (e.g., GDPR, CCPA, Indian IT Act, two-party consent states in the US).
• Configure your agents to announce recording at the start of each call where required.
• Delete recordings and transcriptions of individuals who request erasure.

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing for direct marketing.

To exercise these rights, email care@zoazoneservices.com.

We retain your data for as long as your account is active or as needed to provide the Service. Call logs and usage data are retained for 12 months. Upon account deletion, your data is removed within 30 days except where retention is required by law.

We use essential cookies to maintain your login session and preferences. We do not use third-party advertising or cross-site tracking cookies. Platform analytics are collected in aggregate and anonymized form to improve the Service.

If you are located in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act): personal data is processed only for the purposes stated in this policy, with your consent where required, and you may withdraw consent or request correction, completion, update, or erasure of your personal data at any time via the contact details in Section 12, including our Grievance Officer for India.

If you are located in the European Economic Area (EEA), the UK, or other jurisdictions with data protection laws, we process your data under the following legal bases: performance of contract, legitimate interests, and your consent where required. Data may be transferred internationally to countries that may not have equivalent data protection laws; in such cases, we use Standard Contractual Clauses or other appropriate safeguards.

The Service is not directed to individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us immediately.

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the platform. Continued use after changes constitutes acceptance.

For privacy questions, requests, or concerns: