Privacy Policy

1. Introduction

ZynoLoop ("we," "us," "our") is committed to handling your personal information responsibly. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over it.

This policy applies to all registered users of ZynoLoop ("Agency Owners") who access the Service through zynoloop.com. It also describes, in limited terms, what happens when a client accesses a Magic Link review page without creating an account.

ZynoLoop is operated from India. By using the Service, you acknowledge that your data will be processed in accordance with this policy and applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDPA). If you are located in the European Economic Area or the United Kingdom, additional provisions under the GDPR may apply to you where relevant.

For any privacy-related questions or requests, contact us at zynoloop@gmail.com.

2. Information We Collect

2.1 Information you provide directly

When you create and use a ZynoLoop account, we collect:

• Account information — your name and email address, collected through Clerk during the sign-up process
• Profile and usage data — client names, project names, milestone labels, and delivery configurations you create within the Service
• Files and deliverable links — URLs and uploaded files you add to your approval deliveries
• Change request notes — written feedback your clients leave when requesting changes on a delivery
• Testimonial feedback — raw text your clients submit after approving a delivery, which is then processed by Google AI to generate polished versions

2.2 Information collected automatically

When you use ZynoLoop, we and our third-party analytics providers automatically collect certain technical information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and features used within the Service
• Session duration and navigation patterns
• Referring URL

This data is collected through Google Analytics 4 and is used to understand how the Service is being used and to improve it. It is collected in an aggregated or pseudonymised form where possible.

2.3 Payment information

All payment processing is handled entirely by DodoPayments. ZynoLoop does not collect, store, or have access to your credit card number, bank account details, or any other payment instrument data. The only payment-related information we retain is transaction records provided to us by DodoPayments — such as subscription status, plan type, billing date, and payment confirmation — for account management purposes.

2.4 Information we do not collect from client Magic Links

When your clients access a Magic Link review page to approve or review a deliverable, we do not collect any personal data from them. No cookies are placed, no analytics are run, no account is created, and no identifying information is stored about the client's visit. The only data we retain from a Magic Link interaction is the outcome — whether the delivery was approved or a change request was submitted — and any text the client voluntarily enters as a change request note or testimonial feedback.

3. How We Use Your Information

To provide and operate the Service — Processing your account details, storing your deliverables and project data, enabling Magic Link sharing, and presenting approval and testimonial outcomes in your dashboard.

To power AI features — When a client submits testimonial feedback after approving a delivery, that raw text is sent to Google AI to generate polished Professional and Conversational testimonial versions. This processing is necessary to deliver the AI testimonial feature. The client's raw input and the generated versions are stored in your account.

To process payments and manage subscriptions — We use transaction data received from DodoPayments to manage your subscription status, enforce plan limits, and send billing-related communications.

To communicate with you — We will send you transactional emails related to your account, including subscription confirmations, payment receipts, and product update notifications. We may also send you marketing emails about new features, improvements, or relevant offers. You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us at zynoloop@gmail.com.

To analyse and improve the Service — We use aggregated and anonymised analytics data from Google Analytics 4 to understand usage patterns, identify issues, and make informed product decisions.

To ensure security and prevent misuse — We may use account and usage data to detect fraudulent activity, enforce our Terms and Conditions, and protect the integrity of the Service.

4. Marketing Communications

By creating a ZynoLoop account, you agree that we may send you emails related to product updates, new features, tips for getting more value from the Service, and occasional promotional offers.

We will always identify marketing emails clearly and include an unsubscribe link. You can withdraw your consent to marketing communications at any time by:

• Clicking "Unsubscribe" in any marketing email we send
• Emailing us at zynoloop@gmail.com with the subject line "Unsubscribe"

Withdrawing consent to marketing emails will not affect transactional emails related to your account or subscription.

5. File Storage and Access

Files and deliverable content you upload to ZynoLoop are stored on our servers. We implement reasonable technical and organisational security measures to protect stored data from unauthorised access, loss, or disclosure.

We want to be transparent: while we do not actively access, review, or monitor the files you store on ZynoLoop, our team technically has the capability to access files stored in our infrastructure. We do not access your files in the ordinary course of operating the Service, and we will not do so unless required by law, compelled by a valid legal order, or in the specific circumstance of investigating a reported security incident or Terms of Service violation.

6. Third-Party Services and Data Sharing

We do not sell your personal data to third parties. We share data only in the following circumstances:

Clerk — Your name and email address are shared with Clerk to create and manage your account and authentication sessions. Clerk acts as a data processor on our behalf. Their privacy policy is available at clerk.com.

DodoPayments — Your email address and subscription details are shared with DodoPayments to facilitate payment processing. DodoPayments handles all card and payment data directly. Their privacy policy is available on their website.

Google AI — When a client submits testimonial feedback, that text is sent to Google AI's API for processing. No personally identifiable information about the client is included in this request beyond the raw feedback text they voluntarily submitted.

Google Analytics 4 and Google Search Console — Anonymised and aggregated usage data is shared with Google for analytics purposes. Google may process this data in accordance with their own privacy policy.

Legal requirements — We may disclose your information if required to do so by applicable law, regulation, court order, or governmental authority.

Business transfers — In the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred to the acquiring entity. We will notify you of any such transfer.

7. Cookies and Tracking

ZynoLoop uses cookies and similar tracking technologies to operate and improve the Service.

Essential cookies — Required for the Service to function. These include session cookies managed by Clerk for authentication and cookies necessary to maintain your logged-in state.

Analytics cookies — Set by Google Analytics 4 to collect anonymised information about how users interact with the Service.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using core features of the Service.

8. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to fulfil the purposes described in this policy.

• Account data — Retained for the duration of your account. If you delete your account, your data is permanently deleted after a grace period of 14 days.
• Suspended or terminated accounts — Data is retained for up to 30 days before permanent deletion.
• Payment transaction records — Retained for as long as required by applicable Indian financial and tax regulations.
• Analytics data — Retained by Google Analytics in accordance with Google's data retention settings.

9. Data Security

We take the security of your data seriously. The measures we have in place include:

• Encrypted data transmission using HTTPS/TLS across all parts of the Service
• Access controls limiting internal access to production data to authorised personnel only
• Secure authentication managed through Clerk, including support for multi-factor authentication
• Payment data isolation — no card or banking data ever touches our servers

No method of transmission or storage over the internet is completely secure. While we implement industry-standard measures, we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access — You may request a copy of the personal data we hold about you.
• Right to correction — You may request that we correct inaccurate or incomplete personal data.
• Right to deletion — You may request that we delete your personal data. You can initiate this by deleting your account in the dashboard.
• Right to withdraw consent — Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time.
• Right to data portability — You may request a copy of your data in a structured, commonly used format where technically feasible.
• Right to object — You may object to certain types of processing, including direct marketing.

To exercise any of these rights, contact us at zynoloop@gmail.com. We will respond within a reasonable timeframe and in accordance with applicable law.

11. Children's Privacy

ZynoLoop is not directed at or intended for use by anyone under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used our Service, please contact us at zynoloop@gmail.com.

12. International Users

ZynoLoop is operated from India. If you access the Service from outside India, your data will be transferred to and processed in India. By using the Service, you consent to this transfer and processing.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and notify registered users by email where required. Your continued use of the Service after any changes constitutes your acceptance of the updated terms.

14. Contact

For any questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at:
ZynoLoop — zynoloop@gmail.com