Privacy Policy

FlowSync ("we", "us", "our") is a business automation platform operated in India by Zoa Zone Services Pvt Ltd, 376, G3, Road No 82, Film Nagar, Jubilee Hills, Hyderabad, Telangana 500096, India, and globally by Zoa Zone Services LLC, 1770 Grand Concourse 12A, Bronx, NY 10457, USA. This policy explains what personal data we collect, why we collect it, and the rights you have over it.

• Account data: your name, email address, phone number (if provided), password (stored only as a cryptographic hash), and organization/business details you enter.
• Billing data: your subscription plan, billing history, invoices and payment references. We never collect or store your card numbers, UPI IDs, CVV or other payment credentials — all payment data is collected and processed directly by our payment gateway, Cashfree Payments, which is PCI-DSS compliant.
• Content and usage data: workflows you build, posts, emails and templates you create, execution logs of your automations, and product-usage analytics (pages visited, features used).
• Connected-account data: where you connect third-party accounts (for example social media pages, Google, WhatsApp Business), we store the minimum tokens and identifiers needed to run your automations, which you may revoke at any time from Settings.
• Support communications: messages you send to care@zoazoneservices.com or through in-app chat.

• To create and maintain your account and provide the FlowSync service.
• To process subscriptions and payments (via Cashfree Payments) and issue invoices and refunds.
• To execute the automations, posts, emails and messages you configure.
• To provide customer support and respond to grievances.
• To send service notices (billing, security, downtime) and, where you have opted in, product updates.
• To detect fraud, abuse and security incidents, and to comply with applicable law.

We do not sell your personal data, and we do not use your content to advertise to third parties.

For customers in India, subscription payments are collected in INR and processed securely by Cashfree Payments (UPI, cards, net banking and mandates). Card and UPI credentials are entered on the payment provider's secure interface and are never seen, stored or processed by FlowSync. We receive only a payment confirmation and a reference identifier needed to reconcile your subscription and process refunds.

We share personal data only with:

• Payment processor: Cashfree Payments, to the extent needed to take payment and issue refunds.
• Infrastructure and email-delivery providers that host the service and deliver emails on our behalf, under contractual confidentiality.
• Authorities: where disclosure is required by law, court order, or a valid request from a government or law-enforcement agency.

• Account and billing records: retained while your account is active and for up to 8 years afterwards, as required for tax and accounting purposes in India.
• Workflow content and logs: retained while your account is active; deleted within 90 days of account closure, unless retained longer where required by law or an ongoing dispute.
• Support correspondence: retained for up to 3 years.

Data that must be kept for legal compliance is stored securely and used only for that purpose.

We process personal data in compliance with India's Digital Personal Data Protection Act, 2023. Subject to applicable law, you may:

• Access your personal data and obtain a summary of how it is processed.
• Request correction, completion or updating of inaccurate personal data.
• Request erasure of your personal data, subject to legal retention requirements.
• Withdraw consent for optional processing (for example marketing emails) at any time.
• Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, email care@zoazoneservices.com. We respond to verified requests within the timelines prescribed under applicable law.

We use encryption in transit (TLS), hashed credentials, role-based access controls and least-privilege access for our staff. No method of transmission or storage is perfectly secure, but we review and test our safeguards regularly and will notify affected users and applicable authorities of any qualifying data breach as required by law.

Under the IT Rules, 2021 and the DPDP Act, 2023, you may contact our Grievance Officer:

Grievance Officer, Zoa Zone Services Pvt Ltd
376, G3, Road No 82, Film Nagar, Jubilee Hills, Hyderabad, Telangana 500096, India
Email: care@zoazoneservices.com
Acknowledgement within 48 hours; resolution within 15 days.

We may update this policy as the service evolves. Material changes will be announced in-app or by email, and the "Last updated" date above will always reflect the current version.