Privacy Policy

3.1 Data you provide directly

• Account and profile data: name, username, display name, photo or avatar, email address, password or authentication credentials, bio, preferences, time zone.
• Usage content and prompts: text prompts, messages, files, images, videos, designs, documents, code, feedback, instructions, and other content you input into or generate through the Services, and associated metadata.
• Communications: emails, support requests, survey responses, feedback, bug reports, and other communications.
• Payment and billing data (if and when paid plans are activated): billing name, billing address, partial payment card details tokenized via payment processors, transaction identifiers and related information.
• Recruitment data: CVs, LinkedIn profiles, employment history, skills, references and any other information you choose to share when applying to work with us.

3.2 Data we collect automatically

When you use the Services, we may automatically collect:

• Device and log data: IP address, browser type and version, operating system, device identifiers, language, time zone, referring and exit pages, clickstream data, pages viewed, date and time of access, session identifiers, and other standard server log information.
• Usage analytics: feature usage, interaction events (clicks, taps, scrolls), time on page, navigation paths, content categories interacted with, frequency and recency of use, crash dumps, performance metrics.
• Approximate location: derived from your IP address or system locale, at the city/region or country level.

3.3 Data from cookies and similar technologies

We use cookies, local storage, pixels, SDKs and similar technologies to:

• authenticate users;
• remember preferences;
• understand usage patterns;
• measure performance;
• secure the Services;
• support experiments and product improvements.

You can manage cookies through your browser settings. Blocking certain cookies may impact functionality.

3.4 Data from third parties

We may receive personal data from:

• authentication providers (for example, if you log in with a third-party account);
• payment processors and billing providers;
• analytics and crash-reporting tools;
• marketing and attribution tools;
• social media platforms (if you interact with our accounts);
• business partners and service providers;
• publicly available sources.

The categories of data depend on what the third party chooses to share with us.

1. Providing and operating the Services

• Creating and managing accounts;
• Processing prompts, files and other content to generate outputs and results;
• Running AI models, workflows and features;
• Providing collaboration and sharing features;
• Providing support and responding to communications.

2. Improving and developing the Services

• Monitoring and analysing usage and performance;
• Debugging, fixing, and preventing errors;
• Training, fine-tuning, evaluating and improving models, systems and features, including via human review, where legally permitted and consistent with this Policy;
• Running experiments, A/B tests and new product explorations.

3. Safety, security and abuse prevention

• Detecting and preventing fraud, abuse, security incidents and harmful behaviour;
• Enforcing terms, policies and acceptable use restrictions;
• Protecting the rights, property and safety of users, Zonko and others.

4. Legal and compliance

• Complying with applicable laws, regulations and legal processes;
• Responding to lawful requests from public authorities;
• Establishing, exercising or defending legal claims.

5. Business operations

• Billing, accounting, audit and internal administration;
• Business intelligence and reporting;
• Corporate transactions (for example, reorganisation, merger or acquisition).

6. Marketing and communication

• Sending service-related communications;
• Sending marketing communications where permitted by law;
• Personalising content and communications.

1. Service providers and processors

With companies and individuals who provide services on our behalf, such as cloud hosting, data storage, AI model providers, analytics, logging, customer support, email delivery, payment processing and security. These providers may access personal data only to perform services for us under appropriate contractual safeguards.

2. Affiliates and group companies

With our current or future affiliates where necessary for provision, improvement, administration and support of the Services, subject to similar protections.

3. Third-party integrations

When you choose to connect the Services with third-party tools or platforms, we share data as necessary to enable that integration, under your direction or consent.

4. Legal and compliance

With governmental authorities, regulators, law enforcement or other parties where required by applicable law or in connection with legal processes, or where we believe disclosure is necessary to protect our rights, users or the public.

5. Business transfers

In connection with a merger, acquisition, reorganisation, sale of assets, or similar transaction involving Zonko, personal data may be transferred as part of that transaction, subject to this Privacy Policy or a comparable policy.

6. With your instruction or consent

With third parties where you instruct us to share or where you have consented to such sharing.

12.1 Rights under Indian law

Subject to conditions and exceptions under the Digital Personal Data Protection Act, 2023 and applicable rules, Data Principals in India may have rights including:

• right to access information about personal data processed;
• right to correction and completion of inaccurate or incomplete personal data;
• right to erasure of personal data in certain circumstances;
• right to withdraw consent where processing is based on consent;
• right to grievance redressal;
• right to nominate another individual to exercise rights in certain situations.

12.2 Rights under GDPR and similar laws

Where GDPR or similar data protection laws apply, you may have rights including:

• access to your personal data;
• rectification of inaccurate data;
• erasure ("right to be forgotten") in certain circumstances;
• restriction of processing;
• data portability;
• objection to processing based on legitimate interests or direct marketing;
• withdrawal of consent where processing is based on consent;
• complaint to a supervisory authority.

12.3 Exercising your rights

Requests to exercise rights or raise grievances can be sent to: founders@zonko.ai.

We may need information to verify your identity and your relationship with Zonko before responding, and may decline certain requests where permitted by law.