This policy covers our website, the Zyvolab platform and our 3D services. [Registered business name], [registered address] ("we", "us") is responsible for the personal data described here.
What we collect
- Account details: your name, email address, company, phone number if you give it, profile picture and your role in your team. If you sign in with Google, Google sends us your name, email address and profile picture.
- Billing details: your company's name, address and GSTIN, for invoices. Payments go through Razorpay; we never see or store your card details.
- Messages: what you send us through our contact forms, by email or on WhatsApp.
- Your content: the models, pictures and product information you upload. These usually aren't personal data, but can include some, such as a photo with a person in it.
- Order requests: when your customers use "Request this design" on your 3D views, we store their name, phone number, email address, note and any pictures they add, for you. Pictures are re-saved without hidden details such as where they were taken.
- Technical data: IP address, browser and the pages requested, in our server logs, to keep the service secure and fix problems.
Why we use it
- To create and run your account and the platform.
- To bill you and keep tax records.
- To answer your messages and support you.
- To keep the service secure and prevent misuse.
- To send service emails, such as new orders, password resets and billing.
- To send news or offers, only if you agree; you can stop them at any time.
We don't sell personal data and we don't use it for advertising.
Your customers' data
For the order requests and pictures your customers send, the brand they're ordering from decides how that data is used. We store and process it for the brand, and only as the brand instructs. Customers can contact the brand directly, or write to us at [email address] and we'll pass their request on.
Who we share it with
- OVHcloud, which hosts our servers ([server location]).
- Razorpay, for payments.
- Our email provider, to send service emails.
- Google, only if you choose to sign in with Google. Some pages also load fonts from Google Fonts, which lets Google see your IP address.
- Authorities, when the law requires it.
These providers get only what they need to do their job. Some may store data outside India.
Cookies
We use one cookie, to keep you signed in. It's essential and only set when you sign in. We don't use advertising or tracking cookies. Our 3D viewer remembers a few display choices in your browser; they never leave your device.
How long we keep it
- Account details: while your account is open, and up to 30 days after it closes.
- Order requests: for as long as the brand keeps them on the platform, and up to 30 days after the brand's account closes.
- Invoices and tax records: as long as Indian tax law requires.
- Server logs and security records: one year.
- Backups: replaced over time; old copies are gone within [30] days.
How we protect it
The site uses HTTPS everywhere. Passwords are stored only in a scrambled form that can't be turned back. Sign-in sessions can't be read by scripts, and repeated wrong sign-ins are blocked. Only the people who need access have it, and data is backed up regularly. If a breach affects your data, we'll tell you and the authorities as the law requires.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct or update it;
- delete it, unless the law requires us to keep it;
- withdraw consent you gave, which doesn't affect what we did before.
You can also nominate someone to act for you. Write to [email address] and we'll reply within 30 days. If you're not satisfied with our answer, you can complain to the Data Protection Board of India. If you live outside India, you may have similar rights under your own country's law; write to us and we'll help.
Children
Our services are for businesses and aren't meant for anyone under 18. We don't knowingly collect their data.
Changes to this policy
If we change this policy in a way that matters, we'll tell account holders by email or on the platform. The date at the top shows the current version.
Contact and grievance officer
[Name], Grievance Officer, [registered business name], [registered address]. Email: [email address].