Privacy Policy

Effective Date: 15th October, 2024

---

This Privacy Policy describes how Zullion (together with its affiliates – “we”, “our”, or “us”) collects, stores, uses, and discloses the following categories of personal data:

(i) Customer Data: Personal data that we collect, process, and manage on behalf of our business customers (“Customers”), submitted to our cloud-based services, including our platforms, products, applications, application programming interface (“API”), tools, and any ancillary or supplementary products and services (collectively, the “Platform”).

We process such Customer Data solely on behalf of and under the instruction of the respective Customer in our capacity as a “data processor,” in accordance with our Data Processing Agreement (DPA). For more information about our processing of Customer Data, please refer to Section 9 below.

This Privacy Policy describes our independent privacy and data processing practices as a “data controller” with respect to the Platform, websites, and any other services provided by Zullion (“Services”), and does not apply to the processing of Customer Data. If you have any questions or requests regarding Customer Data, please contact your account administrator(s) (“Account Admin”) directly.

1. Information We Collect

We collect the following types of personal data through the Platform, our websites, and other interactions with our Services:

• Customer Data: Personal data submitted to the Platform by our Customers in their use of our Services. We act as a processor for this data, handling it as directed by the Customer. Examples include: user names, email addresses, project data, and user activity logs.
• User Information: Information we collect independently as part of our role as a data controller. This includes: contact details (such as name, email address, phone number), payment and billing information, account and login credentials, and usage data related to your use of the Platform, such as IP address, device information, and location data.
• Automatically Collected Data: We use cookies and other tracking technologies to collect data automatically when users interact with our Services. This includes: device information (browser type, operating system), IP address, pages visited, time spent, and interaction details, location information (if enabled by the user).

2. How We Use the Information

• Provision of Services: We use personal data to provide, operate, maintain, and enhance the functionality of our Platform and other Services.
• Customer Support: We collect information necessary to provide technical support and customer service, including responding to inquiries, troubleshooting, and resolving issues.
• Improving User Experience: Usage data helps us understand how users interact with our Platform and allows us to improve features, user interface, and overall functionality.
• Marketing and Communication: With your consent, we may send you promotional materials, product updates, and offers related to our Services. You can opt out of these communications at any time.
• Compliance and Legal Obligations: We may process personal data to comply with legal requirements, enforce our Terms of Service, protect our legal rights, and resolve disputes.

3. Data Sharing and Disclosure

• With Service Providers: We work with trusted third-party service providers to support the functionality of our Services, including cloud hosting, payment processing, and customer support. These providers are contractually required to use personal data solely to provide the services requested and in accordance with our instructions.
• With Affiliates: We may share your personal data with our affiliate companies as part of our regular business operations, including joint services and marketing efforts.
• For Legal Reasons: We may disclose your personal data if required by law, court order, or regulatory authority. This includes situations where disclosure is necessary to enforce our legal rights, protect our users, or comply with applicable regulations.
• In Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you in the event of any change in ownership or use of your personal data.

4. Cookies and Tracking Technologies

We use cookies, web beacons, and other tracking technologies to collect data that helps improve the user experience and enable functionalities such as login, session management, and personal preferences. Types of cookies we use include:

• Essential Cookies: Necessary for basic site functionality.
• Performance Cookies: Collect anonymous usage data for analytics purposes.
• Advertising Cookies: Enable tailored advertising based on your browsing activity.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect the availability and functionality of certain features.

5. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. We may retain certain data for a longer period for legitimate business purposes, such as maintaining legal and financial records, or as part of our obligations to prevent fraud.

6. Data Security

We take the protection of your personal data seriously. We implement appropriate technical and organizational security measures to protect against unauthorized access, alteration, disclosure, or destruction of personal data. Our security practices include:

• Encryption of data in transit and at rest
• Secure authentication protocols
• Regular security audits and assessments
• Restricting access to personal data on a need-to-know basis

While we strive to protect your data, no system can guarantee 100% security. If you believe your personal data has been compromised, please contact us immediately.

7. Your Rights and Choices

As a user, you have rights regarding your personal data:

• Access and Correction: You can access and update your personal data by logging into your account. If you need assistance, contact us using the details provided below.
• Data Portability: You may request a copy of your personal data in a structured, commonly used format, where technically feasible.
• Deletion: You can request the deletion of your personal data, subject to certain legal and contractual obligations.
• Opt-Out of Marketing Communications: You can opt out of receiving marketing emails by following the unsubscribe instructions provided in the email or by adjusting your account preferences.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your own, including jurisdictions that may not provide the same level of data protection. In such cases, we ensure that appropriate safeguards are in place to protect your data, such as relying on recognized legal mechanisms like Standard Contractual Clauses or similar measures.

9. Customer Data Processing

We process Customer Data as a data processor on behalf of our Customers, who are the data controllers of this information. Our Customers determine how their data is used and are responsible for obtaining any necessary consents for processing.

For more information about how we process Customer Data, please refer to our Data Processing Agreement (DPA), which outlines the terms of data processing on behalf of our Customers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will post any changes on this page, and if the changes are significant, we will provide more prominent notice.

11. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact us at:

Email: support@zullion.io
Phone: 1-888-678-7388