Privacy Policy

This Privacy Policy explains how ZeroLabs Digitals ("we", "us", "our") collects, uses, shares and protects information about you when you visit zerolabsdigi.in, use our products such as School Management System and MediQ, or interact with our AI assistant "Zero" via chat or voice call.

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and follow generally accepted global standards for data protection.

• Contact form submissions — name, email, phone number, company, service interest and message.
• Consultation bookings — name, email, phone, company, chosen service, preferred date and time, and any notes you share.
• AI chat conversations — text you send to Zero and the responses generated for you. Stored to improve our service and provide continuity if you return.
• AI voice-call data — when our AI voice agent calls you, we may record the call, generate a transcript, and store a short summary. You will always be informed at the start of the call.
• Product usage — if you sign in to a ZeroLabs product (e.g., School Management System, MediQ), we store the account information you provide and metadata like login times.
• Technical data — IP address, browser type, device, referral URL, and pages you visit. Used for security, analytics and troubleshooting.
• Cookies — small files that keep you signed in, remember preferences and help us measure site traffic. See Section 8.

• To respond to your enquiries and provide the services you request.
• To confirm and schedule your consultation (including sending calendar invites).
• To have our AI voice agent, Zero, call you shortly after you submit the contact form — so we can understand your needs faster.
• To operate, secure, monitor and improve our website and products.
• To send transactional emails (booking confirmations, password resets, account notices). We do not send marketing emails without your consent.
• To comply with applicable laws and to enforce our Terms of Service.

We process your personal data on one or more of the following bases:

• Consent — you voluntarily submit information (e.g., contact form, booking form) knowing it will be used to contact you.
• Legitimate business interest — running and improving our services, preventing fraud and ensuring security.
• Legal obligation — where retention is required by Indian tax, corporate or telecom regulations.

We use trusted third parties to operate our services. Each is contractually bound to protect your data.

We do not sell your personal data to any third party.

We keep your data only as long as needed for the purposes described above, or as required by law:

• Contact and booking records — up to 3 years, then anonymised.
• AI chat & voice transcripts — up to 12 months unless linked to an active engagement.
• Product account data — until you delete your account or 3 years of inactivity.
• Financial and tax records — as required by Indian law (typically 8 years).

Under the DPDP Act you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data, subject to legal exceptions.
• Withdraw consent at any time — future processing based on that consent will stop.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Grievance redressal — write to our Grievance Officer (Section 11).

To exercise any right, email info@zerolabsdigi.in. We respond within 15 working days.

We use essential cookies to keep you logged in and remember your preferences. We may also use privacy-friendly analytics to understand which pages help visitors most. We do notuse third-party advertising cookies or cross-site trackers. You can clear cookies at any time from your browser settings.

All data is transmitted over HTTPS. Passwords are salted and hashed with bcrypt. Access to production systems is restricted to authorised personnel using multi-factor authentication. Backups are encrypted at rest. While no system is 100% secure, we follow industry-standard controls to protect your information.

Our services are not directed to individuals under 18. If you believe a child has provided us with personal data without parental consent, please contact us and we will delete the information promptly.

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page and, where required, notified to you by email. The date at the top always reflects the current version.