Privacy Policy
Pennyzo (“we”, “our”, or “us”) provides a software platform, automation tools, and AI-powered services. This Privacy Policy explains how we collect, use, share, and protect personal and business data in compliance with the Digital Personal Data Protection Act, 2023 (India) and other applicable laws.
1. Information We Collect
- Account and business information such as name, company, designation, and contact details
- Billing, subscription, and tax-related information
- Business data and documents uploaded by customers
- Technical data including IP address, device details, logs, and usage metrics
- Support communications, emails, chats, and feedback
2. How We Use Information
- Provide, operate, and improve the Services
- Authenticate users and manage accounts
- Process subscriptions and payments
- Ensure security, reliability, and fraud prevention
- Comply with legal, regulatory, and tax obligations
- Perform internal analytics using aggregated or anonymized data
3. Legal Basis & Data Roles
Pennyzo processes data based on contractual necessity, legitimate business interests, legal obligations, and consent where required. Customers retain ownership of uploaded business data. Pennyzo acts as a Data Processor for customer data and as a Data Fiduciary/Data Controller for account, billing, and usage data.
4. AI Data Usage & Model Training
Pennyzo does not use customer-uploaded data to train or fine-tune AI or machine-learning models by default.
- Data is processed only to deliver the requested services
- Anonymized and aggregated usage patterns may be used for system improvement
- Any AI training using customer data requires explicit contractual consent
5. Data Sharing & Transfers
Data may be shared with trusted service providers for hosting, payments, analytics, and support, subject to confidentiality obligations. Data may also be disclosed to comply with law or in connection with corporate transactions such as mergers or acquisitions.
6. Data Security & Retention
We implement appropriate administrative, technical, and organizational safeguards to protect data. While no system is fully secure, Pennyzo follows industry-standard practices and will notify affected parties of data breaches where required by law.
7. User Rights
Subject to applicable law, users may request access, correction, deletion, or withdrawal of consent for their personal data. Certain data may be retained for legal, security, or compliance purposes.
8. Updates & Contact
We may update this Privacy Policy periodically. Material changes will be communicated through our Services or website.
For privacy or grievance-related inquiries, contact us at contact@pennyzo.com.
Last Updated: 30 January 2026