Privacy Policy
Effective date: 21 July 2026 · Last updated: 15 August 2026
1. Who we are
Zlotworks is operated by Jayanth Joseph (sole proprietor), registered in India under Udyam Registration.
For privacy-related queries, contact us at: hello@zlotworks.com
2. Data we collect
We collect only what's needed to provide our services: your phone number and name, the messages you send, booking details, contact records and tags, promotion preferences and delivery activity, and chat history. We do not collect government identity documents, financial account numbers, or precise GPS location.
3. How we use your data
We use your data to manage bookings, organise business contacts, deliver consented WhatsApp promotions, support team chat conversations, and generate basic usage statistics. A business can view only its own customer records; data is never shared or compared across different businesses.
4. Legal basis for processing
We process data based on contractual necessity (to fulfil a booking or messaging request), legitimate interests (sending confirmations and updates), and consent where required (marketing messages, which can be stopped at any time by replying STOP).
5. Who we share data with
We share data only with trusted service providers who help us operate: Meta Platforms, Inc. (WhatsApp Business Platform, for message delivery), Supabase, Inc. (database hosting), and Vercel Inc. / Railway Corp. (infrastructure hosting). We do not sell personal data.
6. Data retention
We retain your data for as long as your account is active, and for up to 24 months after it becomes inactive, unless you request earlier deletion or a longer period is required by law. On a deletion request, we remove your data within 30 days. See Data Deletion for instructions.
7. Your rights
You can request access to, correction of, or deletion of your data, and opt out of marketing messages at any time by replying STOP. To exercise any of these rights, email hello@zlotworks.com. We respond within 30 days.
8. Security
We use industry-standard security measures including encrypted connections and access controls to protect your data.
9. Children's privacy
Our services are not directed to children for independent use. A parent or guardian may provide limited information about a minor family member to arrange an appointment.
10. Changes to this policy
We may update this policy as our practices change. The "Last updated" date above reflects the most recent revision.