1. Data Controller
Zackgo Enterprises ("Zackgo", "we") is the data controller for personal and business data processed through Zackgo Reports. Contact: contact@zackgo.com or WhatsApp at +91 91156 96315.
2. Data We Collect
Account & identity data
- Name, email address, phone number (where provided)
- Authentication identifiers and secure session tokens
- Role (executive, clerk) and company association
Company data
- Company name, industry, GSTIN (for invoicing), logo (optional)
- Department configuration and team member records
Operational data
- Workbooks and files uploaded by your team
- AI-generated reports and derived analytics
- Copilot conversation context within your workspace
Usage & technical data
- Login timestamps, upload events, report views (audit trail)
- IP address, browser type, device information (security and diagnostics)
- Cookies and similar technologies — see Cookie Policy
Billing data
- Subscription plan, payment status, invoice records
- Payment tokens and transaction references from Razorpay (not full card numbers)
3. How We Use Data
- Provide, maintain, and improve the Service
- Generate AI reports and Copilot responses for your workspace
- Process payments, issue invoices, and manage subscriptions
- Enforce security, prevent fraud, and comply with law
- Respond to support requests
We do not use your operational data for advertising, sell data to third parties, or train AI models for other customers.
4. Legal Basis (India & GDPR-aligned practices)
- Contract: Processing necessary to deliver the Service you subscribed to
- Legitimate interests: Security, fraud prevention, product improvement (balanced against your rights)
- Legal obligation: Tax, accounting, and regulatory compliance
- Consent: Where required for optional features or marketing communications
5. Data Isolation & Security
Each company workspace is isolated using PostgreSQL Row-Level Security. Encryption in transit (TLS) and at rest (AES-256) protects stored data. See Security and Trust Center.
6. Third-Party Processors
We share minimum necessary data with subprocessors who assist in delivering the Service:
- Cloud infrastructure partners — encrypted database, authentication, and secure file storage
- Application hosting partners — secure deployment, delivery, and availability of the Service
- Intelligence processing — report generation, Copilot, and analytical automation via Zackgo AI Beta and authorised industrial API partners (data processed per our DPA practices; your data is not used to train models for other customers)
- Payment processors — subscription and invoice processing (e.g., Razorpay)
- Email / messaging providers — report delivery where configured
Subprocessors are bound by contractual data protection obligations. We do not publicly disclose specific infrastructure or intelligence vendor identities. Enterprise customers may request additional subprocessor documentation under confidentiality.
7. Data Retention
Retention periods are defined in our Data Retention Policy. In summary: operational files and reports are retained for the subscription period and defined post-termination windows; audit logs retained for security purposes.
8. Your Rights
- Access: View your data through the dashboard or request a summary
- Correction: Update profile and company settings; contact support for other corrections
- Deletion: Request deletion subject to legal and contractual retention requirements
- Export: Request portable export of reports and uploaded data
- Objection / restriction: Contact contact@zackgo.com for applicable requests
We respond to verified requests within 30 days unless extension is required by law.
9. International Transfers
Infrastructure may process data in regions where our subprocessors operate. We implement appropriate safeguards including contractual protections for cross-border transfers.
10. Children's Data
The Service is intended for business use. We do not knowingly collect data from individuals under 18.
11. Changes to This Policy
We may update this policy with notice via email or dashboard announcement. Material changes take effect 30 days after notice unless earlier application is required by law.
12. Contact, Grievance & Data Protection
For privacy-related questions, data access requests, or grievances under applicable Indian law (including the Digital Personal Data Protection Act, 2023, where applicable):
- Grievance contact: contact@zackgo.com
- WhatsApp: +91 91156 96315
- Response timeline: Verified requests acknowledged within 7 business days; resolved within 30 days unless extension is required by law
Zackgo Enterprises is the data controller for personal data processed through Zackgo Reports. Enterprise customers requiring a signed Data Processing Agreement may request one at contact@zackgo.com.