Privacy Policy

1Who this policy covers

This Privacy Policy explains how AOZO (“AOZO”, “we”, “us”) collects, uses, shares and protects personal data when you visit our website, create a workspace or use any AOZO app, including CRM, Helpdesk, Projects, Accounting, Teams, Hubble, Commerce, POS and Booking.

It applies to visitors, account holders, and people whose data is entered into AOZO by our customers. Each AOZO app is a separate subscription, but they share one login, so this policy covers all of them.

2Our role: fiduciary or processor

Under the DPDP Act, the “Data Fiduciary” decides why and how personal data is processed. A “Data Processor” processes it on the Fiduciary’s behalf.

If you are a customer or employee of a business that uses AOZO, please contact that business first about your data. We will help them respond to you.

3What we collect

We collect this data from you directly, from your team members who use your workspace, and automatically from your device when you use AOZO.

4How we use personal data

• Provide, maintain and secure AOZO and your workspace.
• Set up your subscription, bill you and issue invoices.
• Send service messages such as sign-in codes, invoices, security alerts and important updates.
• Respond to support requests and feedback.
• Improve performance, reliability and features.
• Prevent fraud, abuse and security incidents.
• Meet our legal obligations and enforce our terms.

We process personal data on the basis of your consent, or for certain legitimate uses allowed by the DPDP Act, such as performing a contract with you, complying with law, or responding to a security incident.

We send marketing messages only if you have agreed. You can withdraw consent at any time using the link in the message or by writing to us.

5AI features

Some AOZO features, such as lead scoring, ⌘K search and Copilot in Hubble, use automated processing of data in your workspace to help you work faster. These features run inside your workspace context. Please do not enter data into AOZO that you are not allowed to process.

6Who we share data with

We do not sell your personal data. We share it only as follows:

• Service providers who help us run AOZO, such as hosting, email and message delivery, payments, analytics and customer support. They may use data only to provide services to us and must protect it.
• Other people in your workspace, according to the roles and permissions your administrators set.
• Authorities, courts or regulators when the law requires it or to protect rights, safety and security.
• A successor, if AOZO is involved in a merger, acquisition or sale of assets. We will tell you before your data becomes subject to a different privacy policy.

7Where data is processed

AOZO is built for Indian businesses. Where our service providers process data outside India, we do so only as permitted by the DPDP Act and any restrictions the Government of India notifies, and we require appropriate safeguards.

8How long we keep data

We keep personal data only as long as needed for the purpose it was collected, while your subscription is active, and afterwards as needed to meet legal, tax, accounting and dispute-resolution requirements. When data is no longer needed, we delete or anonymise it.

Workspace content is kept until you or your administrators delete it or your subscription ends, after which it is deleted or returned as described in the DPDP Addendum.

9How we protect data

We use reasonable security safeguards to protect personal data, including:

• Two-factor sign-in with email OTP, authenticator apps and passkeys.
• Roles and permissions so people see only what they need.
• Activity logs that show who changed what.
• Access limited to people who need it to do their job.

No system is perfectly secure. If a personal data breach affects you, we will notify you and the relevant authority as the law requires. To report a security concern, write to support@aozo.in.

10Cookies and similar technologies

The AOZO apps use cookies and similar storage that are necessary to sign you in, keep you signed in and remember preferences such as theme. Our marketing website uses only what is needed to work, such as remembering your country (aozo_country) and your cookie choice (aozo_consent), and does not use analytics or advertising trackers today.

When you first visit our website we show a cookie notice. You can accept all, reject everything that is not essential, or choose by category, and you can change or withdraw your choice at any time from "Cookie settings" in the footer. Rejecting is as easy as accepting, and the website works the same either way.

If we add analytics or other optional technologies, we will update this policy and ask for your consent where required. You can also clear or block cookies in your browser, but parts of AOZO may stop working.

11Your rights

Under the DPDP Act you can:

• Get a summary of the personal data we process and who we share it with.
• Ask us to correct, complete or update your data.
• Ask us to erase your data when it is no longer needed.
• Withdraw your consent at any time.
• Use our grievance process, and nominate someone to exercise your rights if you cannot.

Read how to make a request on the Your Data Rights page.

12Children

AOZO is a business service and is not meant for children. We do not knowingly collect personal data of anyone under 18 without verifiable consent of a parent or lawful guardian. If you think a child’s data has been given to us, write to us and we will delete it.

13Grievances and contact

For any question, complaint or request about this policy or your personal data, write to us at support@aozo.in with the subject line “Privacy”. Our grievance contact will acknowledge and respond within the time the law requires.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is operational.

14Changes to this policy

We may update this policy as AOZO or the law changes. We will change the “Last updated” date above and, for important changes, notify you by email or in the app.