Zoroflex
Legal

Privacy Policy

This policy explains how Data Maestros Technology LLP collects, uses, stores, and protects your data when you use the Zoroflex platform.

Last updated: June 1, 2026 · Data Maestros Technology LLP

This Privacy Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India. If you have concerns about your data, contact our Grievance Officer at support@datamaestrostech.com.

1. Overview

Data Maestros Technology LLP (“Data Maestros,” “we,” “us”) operates Zoroflex, a business automation platform for Indian SMBs. We are committed to protecting the privacy of our customers and their end users in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023.

This policy applies to all personal data processed through the Zoroflex platform, our website (zoroflex.com), and any related services.

2. Data We Collect

2.1 Account & Contact Information

  • Name, business name, email address, phone number
  • GST Identification Number (GSTIN) and PAN (for billing and compliance)
  • Billing address and payment method details (tokenized via payment gateway)

2.2 Business & Transaction Data

  • Sales records, invoices, purchase orders, and inventory data
  • Customer records and vendor/supplier information entered into Zoroflex
  • Transaction amounts, payment statuses, and financial reports

2.3 Usage & Technical Data

  • IP address, device type, browser type, and operating system
  • Pages visited, features used, session duration, and click patterns
  • Error logs and crash reports to improve platform stability

2.4 Communications

  • Support tickets, live chat messages, and email correspondence
  • Feedback and survey responses you voluntarily provide

3. How We Use Your Data

We process your data for the following purposes:

  • Service Delivery — To provide, operate, and maintain the Zoroflex platform.
  • Billing & Compliance — To process payments, generate GST-compliant invoices, and meet statutory obligations under Indian law.
  • Customer Support — To respond to your queries, troubleshoot issues, and provide onboarding assistance.
  • Platform Improvement — To analyse usage patterns and improve features, performance, and user experience.
  • Security — To detect and prevent fraud, unauthorized access, and abuse of the Service.
  • Communications — To send you product updates, billing notifications, and (with your consent) marketing messages.

4. Data Sharing

We do not sell your personal data. We may share data only in the following circumstances:

  • Service Providers — Cloud infrastructure, payment gateways, email delivery, and analytics providers operating under strict data processing agreements.
  • Legal Requirements — When required by a court order, government authority, or applicable Indian law.
  • Business Transfers — In connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.
  • With Your Consent — For any purpose you expressly authorize.

All third-party service providers we engage are contractually bound to process data only on our instructions and in accordance with applicable privacy laws.

5. Data Retention

We retain your account and business data for the duration of your subscription, plus a post-termination period of 90 days to allow for data export and dispute resolution.

Financial records (invoices, transaction logs) are retained for 7 years to comply with Indian accounting and tax laws.

After retention periods expire, data is securely deleted or anonymized.

6. Your Rights Under the DPDP Act, 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

  • Right to Access — Obtain a summary of the personal data we hold about you.
  • Right to Correction — Request correction of inaccurate or incomplete data.
  • Right to Erasure — Request deletion of your personal data (subject to legal retention obligations).
  • Right to Grievance Redressal — Lodge a complaint with our Grievance Officer.
  • Right to Nominate — Nominate a person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, write to support@datamaestrostech.com. We will respond within 30 days of receiving a valid request.

7. Security

We implement industry-standard security measures to protect your data:

  • All data in transit is encrypted using TLS 1.2 or higher.
  • Data at rest is encrypted using AES-256.
  • Access to production systems is restricted to authorized personnel and protected by multi-factor authentication.
  • We conduct regular security audits and vulnerability assessments.
  • All data is stored on servers located in India.

Despite these measures, no system is completely secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

8. Cookies

We use cookies and similar technologies to operate and improve the Service. For detailed information on the cookies we use and how to control them, see our Cookie Policy.

9. Children's Privacy

Zoroflex is a business platform intended for use by adults operating registered businesses. We do not knowingly collect data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of the Service after the effective date signifies your acceptance.

11. Contact & Grievance Officer

For privacy-related queries or to exercise your rights, contact our Grievance Officer: