Privacy Policy

    Effective Date28 February 2026
    Last UpdatedFebruary 2026
    JurisdictionIndia

    01Introduction

    This Privacy Policy describes how Zedral Technologies Private Limited ("Zedral", "we", "us", or "our") collects, uses, stores, and protects information when you access or use the Zedral platform, including all related software, dashboards, APIs, and services (collectively, the "Platform").

    By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you are accessing the Platform on behalf of an organisation, you confirm that you have the authority to accept this Policy on behalf of that organisation.

    This Policy should be read alongside our Terms & Conditions and Cookie Policy.

    02Definitions

    For the purposes of this Privacy Policy, the following definitions apply:

    • Personal Data means any information that relates to an identified or identifiable natural person, including name, email address, IP address, or device identifiers.
    • Client Data means all operational, production, and performance data submitted to or processed by the Platform on behalf of a Client organisation.
    • Processing means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
    • Data Controller means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, Zedral acts as the Data Controller for account and usage data.
    • Data Processor means the entity that processes Personal Data on behalf of the Data Controller. Zedral acts as a Data Processor when processing Client Data on behalf of a Client organisation.
    • Authorised Users means employees, contractors, or agents of the Client who are authorised to access the Platform under the Client's account.

    03Information We Collect

    We collect the following categories of information:

    Account Information

    When you register an account, we collect your name, email address, organisation name, role, and contact details. This information is necessary to create and manage your account.

    Operational Data

    Manufacturing, production, and workflow data that your organisation submits to the Platform for analytics processing. This data remains the property of your organisation.

    Usage Data

    Information about how you interact with the Platform, including pages visited, features used, session duration, click patterns, and navigation paths.

    Device and Technical Data

    Browser type and version, operating system, IP address, device identifiers, screen resolution, and language preferences.

    Communication Data

    Records of communications between you and Zedral, including support tickets, emails, and feedback submissions.

    04Legal Basis for Processing

    We process Personal Data on the following legal grounds:

    • Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions and deliver the Platform services.
    • Legitimate Interest: Processing necessary for our legitimate business interests, including improving the Platform, ensuring security, and preventing fraud.
    • Consent: Where you have provided explicit consent, such as for marketing communications or optional analytics.
    • Legal Obligation: Processing required to comply with applicable laws, regulations, or lawful requests from authorities.

    05How We Use Your Information

    We use the information we collect for the following purposes:

    • To provide, maintain, and improve the Zedral platform and its features
    • To generate operational analytics and performance insights for your organisation
    • To authenticate users and manage account access
    • To communicate with you about your account, updates, and support
    • To detect, prevent, and address technical issues and security threats
    • To analyse usage patterns and improve user experience
    • To comply with legal obligations and enforce our Terms

    We do not use Client Data for any purpose other than providing the Platform services to the Client that submitted it.

    06Data Storage and Security

    Encryption

    All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Database backups are encrypted and stored in geographically separate locations.

    Infrastructure Security

    The Platform is hosted on enterprise-grade cloud infrastructure with SOC 2 compliance, regular penetration testing, and continuous vulnerability monitoring.

    Access Controls

    Zedral employs role-based access controls, multi-factor authentication for internal systems, and the principle of least privilege to restrict data access to authorised personnel only.

    Incident Response

    Zedral maintains an incident response plan and will notify affected Clients of any data breach without undue delay, and in any event within seventy-two (72) hours of becoming aware of the breach, where required by applicable law.

    07Data Retention

    We retain Personal Data only for as long as necessary to fulfil the purposes outlined in this Policy:

    • Account Data: Retained for the duration of your Subscription and for thirty (30) days following account termination.
    • Client Data: Retained for the duration of the Client's Subscription. Upon termination, Client Data is retained for thirty (30) days to allow export, after which it is permanently deleted.
    • Video and Image Data: Processed in real time and deleted within ten (10) minutes. Only structured analytics derived from such data are retained.
    • Usage and Technical Data: Retained in aggregated, anonymised form for up to twenty-four (24) months for analytics and service improvement.
    • Communication Records: Retained for twenty-four (24) months from the date of the last communication.

    Upon expiration of the applicable retention period, data is permanently deleted or irreversibly anonymised.

    08Data Sharing and Disclosure

    We do not sell your Personal Data. We may share information in the following limited circumstances:

    Service Providers

    We engage trusted third-party service providers to assist with hosting, analytics, payment processing, and customer support. These providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to Zedral.

    Legal Requirements

    We may disclose information when required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

    Business Transfers

    In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

    With Your Consent

    We may share data for purposes not described in this Policy only with your explicit prior consent.

    09International Data Transfers

    Zedral primarily processes and stores data within India. Where data is transferred outside India, we ensure appropriate safeguards are in place, including:

    • Standard contractual clauses approved by applicable data protection authorities
    • Data processing agreements with all international sub-processors
    • Compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) requirements for cross-border transfers
    • Ensuring the receiving jurisdiction provides an adequate level of data protection

    You may contact us at [email protected] to obtain details of the specific safeguards applied to any international transfer of your data.

    10Your Rights

    Subject to applicable law, including the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights with respect to your Personal Data:

    • Right of Access: You may request a copy of the Personal Data we hold about you.
    • Right to Correction: You may request that we correct inaccurate or incomplete Personal Data.
    • Right to Erasure: You may request deletion of your Personal Data, subject to our legal retention obligations.
    • Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances.
    • Right to Data Portability: You may request an export of your data in a structured, commonly used, machine-readable format.
    • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
    • Right to Grievance Redressal: You have the right to register a complaint with the Data Protection Board of India if you believe your data rights have been violated.

    To exercise any of these rights, contact us at [email protected]. We will respond within thirty (30) days of receiving your request.

    11Cookies and Tracking Technologies

    We use cookies and similar tracking technologies to enhance your experience on the Platform. For detailed information about the types of cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

    You can control cookie preferences through your browser settings or through the cookie consent mechanism provided on the Platform.

    12Third-Party Links and Services

    The Platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to the Zedral Platform. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services before providing them with your information.

    13Children's Privacy

    The Platform is not directed at individuals under the age of eighteen (18). We do not knowingly collect Personal Data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information promptly. If you believe we have collected data from a child, please contact us at [email protected].

    14Data Protection Officer

    Zedral has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws.

    You may contact our DPO at [email protected] for any privacy-related inquiries, concerns, or requests.

    15Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

    • Posting the updated Policy on the Platform with a revised "Last Updated" date
    • Sending an email notification to the address associated with your account
    • Displaying a prominent notice on the Platform dashboard

    Your continued use of the Platform after any changes to this Policy constitutes acceptance of the updated terms.

    16Governing Law

    This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, as amended. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts located in India.

    17Contact Information

    If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: