Loading…
We believe privacy is a right, not a feature. This policy explains exactly what data we collect, why we collect it, and how you stay in control — in full compliance with the IT Act, 2000 and the DPDP Act, 2023.
This Privacy Policy applies to all users of Zynqly and is incorporated into our Terms of Service. It is published by AYDEX Technologies (Sole Proprietorship, Kanpur, India) in compliance with the IT Act, 2000 and the DPDP Act, 2023. Each section includes a Plain English summary — look for the highlighted callout.
We only collect what we need to run Zynqly. We never sell your data. This policy is governed by Indian law.
Zynqly ("we", "us", or "our") is a product of AYDEX Technologies, a sole proprietorship registered under the Information Technology Act, 2000 and compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act). Our registered office is at Barra, Kanpur, Uttar Pradesh — 208027, India. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our messaging automation platform at zynqly.com. Zynqly connects to Instagram, WhatsApp, Facebook Messenger and Telegram, and this policy covers all four. By accessing or using Zynqly, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Service immediately.
We collect the account info you give us, the channel data needed to run your automations, payment details processed via Razorpay, and standard usage logs.
We collect the following categories of personal data: (a) Information you provide directly: your name, email address (support@zynqly.com is our contact, not collected from users), and billing details. Payment transactions are processed exclusively by Razorpay (a PCI-DSS compliant payment gateway licensed by the Reserve Bank of India). We do not store your card or bank details on our servers. (b) Connected channel data: whichever of Instagram, WhatsApp, Facebook Messenger and Telegram you choose to connect. Instagram, WhatsApp and Messenger are connected through Meta's official OAuth flows — we never see or store your password for any of them, and we access only the permissions you explicitly grant. Telegram is connected by pasting a bot token you generate yourself in @BotFather, which is stored encrypted and can be revoked by you at any time. (c) Conversation data: the messages exchanged between you and the people who contact you on those channels, together with the profile information each platform provides about them — typically a name and, depending on the platform, a username, page-scoped ID or phone number. This is what makes a shared inbox work. (d) Automation data: message templates, keyword rules, campaign settings, knowledge-base content you upload for the AI agent, lead data (emails/phones) captured through your configured flows, and automation activity logs. (e) Technical data: IP address, browser type, operating system, pages visited, timestamps, and device identifiers — collected automatically to operate and improve the Service.
We reach each connected channel only through its official API, strictly to run the inbox and the automations you configure. We request the minimum permissions each one needs.
Zynqly integrates with every channel through its official API, and never by automating a personal app or scraping a web session: • Instagram — the Meta Graph API, for reading comments and mentions, sending direct messages on your behalf, and basic profile information. • WhatsApp — the WhatsApp Business Cloud API, for receiving and sending messages on a business number you own. Note that WhatsApp does not make a customer's profile photo available to any business, so we never receive one. • Facebook Messenger — Facebook Login and the Messenger Platform, for the Pages you explicitly grant, to receive and reply to Page conversations and comments. • Telegram — the official Bot API, using a bot token you create and can revoke yourself. We do not access, store, or process content beyond what is required for the inbox and your active workflows. Access tokens and bot tokens are encrypted at rest using AES-256 and, where the platform issues short-lived tokens, refreshed automatically. You can revoke our access at any time: Instagram via Settings → Apps and Websites, Messenger and WhatsApp via Facebook Settings → Business Integrations, and Telegram by regenerating the bot token in @BotFather. Disconnecting a channel inside Zynqly also stops all processing for it immediately.
We process your data based on your consent and our legitimate need to provide the service — as required under Indian law.
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under the IT Act, 2000, we process your personal data on the following lawful bases: (a) Consent: By registering and using Zynqly, you provide free, specific, informed, and unambiguous consent to the collection and processing of your personal data as described in this policy. You may withdraw consent at any time. (b) Contractual necessity: Processing is necessary to deliver the Service you have subscribed to — including executing automations, processing payments, and providing customer support. (c) Legal obligation: We may process data to comply with applicable Indian law, court orders, or lawful requests from government authorities. (d) Legitimate interests: We process certain technical and usage data to detect fraud, maintain security, and improve the Service — provided such interests do not override your fundamental rights.
We use your data to run the service, process payments via Razorpay, send you important updates, and improve the product. Nothing else.
We use the information we collect to: • Provide, operate, and maintain the Service and your automations • Process payments securely through Razorpay • Send transactional communications: invoices, account alerts, and security notifications • Respond to support requests and grievances • Analyse aggregated usage patterns to improve the platform • Detect and prevent fraud, abuse, and unauthorised access • Comply with applicable Indian law and regulatory obligations Where you enable the AI agent, AI replies or AI-assisted features, the message content needed to answer — the conversation in question and the knowledge-base content you have provided — is sent to our AI processors to generate that reply, and voice notes are sent to be transcribed into text. This happens only for the features you switch on, and only at the moment a reply or transcript is needed. Section 14 names those processors. We do not use your personal data to train machine learning or AI models — neither our own nor our processors' — and we do not use it for advertising or for profiling unrelated to the Service.
We don't sell your data. We share it only with Razorpay (payments) and essential cloud vendors — all bound by confidentiality. We disclose data to authorities only when legally required.
We do not sell, trade, rent, or otherwise transfer your personal data to third parties for commercial purposes. We may share your data only in the following limited circumstances: (a) Service providers: Razorpay (payment processing, governed by their Privacy Policy and RBI regulations), cloud hosting providers, and infrastructure tools — all bound by confidentiality agreements and permitted to use your data only to provide services to us. (b) Legal requirements: We may disclose your data when required by Indian law, court order, or a lawful request from a government authority (including under Section 69 of the IT Act, 2000). (c) Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred with prior notice to you. All third-party data sharing is governed by data processing agreements consistent with the DPDP Act, 2023.
We use essential cookies to keep you logged in and analytics cookies (which you can opt out of) to understand how the product is used. We do not use advertising cookies.
We use cookies and similar tracking technologies to: • Maintain your login session and remember preferences (essential cookies — cannot be disabled) • Analyse how users interact with the Service to improve performance (analytics cookies — opt-out available) We do not use third-party advertising or retargeting cookies. You may manage or disable non-essential cookies through your browser settings or your Zynqly account preferences. Please note that disabling essential cookies may affect Service functionality. As required under the IT Act, 2000 and applicable rules, we disclose our use of cookies in this policy and obtain your consent where required.
We use AES-256 encryption, TLS in transit, and access controls to protect your data — meeting the Reasonable Security Practices standard under the IT Act.
We implement security practices and procedures as required under Rule 8 of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including: • TLS 1.2+ encryption for all data in transit • AES-256 encryption for data at rest, including OAuth tokens • Role-based access controls limiting data access to authorised personnel only • Regular security assessments and vulnerability checks • An incident response plan — in the event of a data breach, we will notify affected users and the relevant authority as required under the DPDP Act, 2023 Despite these measures, no system is completely immune. You are responsible for maintaining the confidentiality of your account credentials and should use a strong, unique password.
Under the DPDP Act 2023, you have the right to access, correct, and erase your data, and to withdraw consent — all exercisable by contacting our Grievance Officer.
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights: (a) Right to access: Obtain a summary of the personal data we hold about you and the purposes for which it is processed. (b) Right to correction and erasure: Request correction of inaccurate or incomplete data, or erasure of data that is no longer necessary for the stated purpose. (c) Right to grievance redressal: Lodge a complaint with our Grievance Officer (details in §13). We will acknowledge your complaint within 48 hours and resolve it within 30 days. (d) Right to withdraw consent: Withdraw your consent to processing at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal. Note that withdrawal may result in inability to use parts of the Service. (e) Right to nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. To exercise any of these rights, contact our Grievance Officer at support@zynqly.com.
We keep your data while your account is active. After deletion, most data is removed within 90 days. Financial records are kept for 7 years as required by Indian law.
We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion: • Profile and automation data is deleted or anonymised within 90 days • Financial transaction records (payment history, invoices) are retained for 7 years as required under the Income Tax Act, 1961 and GST regulations applicable in India • Automation logs and message history are retained for 12 months by default and can be cleared earlier from your account settings You may request immediate deletion of non-financial personal data at any time by contacting support@zynqly.com. We will process such requests within 30 days as required under the DPDP Act, 2023.
Zynqly is India-based. If data is transferred outside India (e.g. via Meta's API or cloud infrastructure), it is done in compliance with the DPDP Act 2023.
Zynqly is operated from India by AYDEX Technologies (Kanpur, Uttar Pradesh). Your data is primarily stored and processed within India. Where data is transferred outside India — for example, through Meta's Graph API infrastructure or international cloud service providers — such transfers are carried out in compliance with Section 16 of the Digital Personal Data Protection Act, 2023 and any applicable government notifications specifying permitted jurisdictions. By using the Service, you consent to such cross-border processing where necessary to provide the Service.
Zynqly is not for anyone under 13. We do not knowingly collect data from children. Instagram itself requires users to be 13+.
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal data from children. Under the DPDP Act, 2023, processing of personal data of children requires verifiable parental consent. If you believe we have inadvertently collected data from a child under 13, please contact our Grievance Officer at support@zynqly.com immediately and we will promptly delete such information. Note: Instagram's own Terms of Service require users to be at least 13 years old. Users must comply with Instagram's age requirements to use Zynqly.
As required by Indian law, we have a designated Grievance Officer. Contact them for any privacy complaints — they must respond within 30 days.
In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are as follows: Name: Sunny Designation: Proprietor & Grievance Officer, AYDEX Technologies Email: support@zynqly.com Phone: +91 80815 55129 Address: Barra, Kanpur, Uttar Pradesh — 208027, India You may lodge a complaint or data request with the Grievance Officer at any time. We will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days of receipt. If your grievance is not resolved satisfactorily, you may approach the Data Protection Board of India once operational under the DPDP Act, 2023.
The messaging platforms you connect, our AI processors, Razorpay for payments, and Google for optional sign-in and Sheets. Their own privacy policies govern data they collect independently.
The Service relies on the following third parties. Each is listed with what it actually receives: Messaging platforms — the channels you choose to connect: • Meta Platforms, Inc.: the Instagram Graph API, the WhatsApp Business Cloud API and the Messenger Platform. Governed by Meta's Data Policy. • Telegram FZ-LLC: the Bot API. Governed by Telegram's Privacy Policy. AI processors — these receive message content only for the AI features you switch on: • Anthropic PBC: generates AI replies and powers AI-assisted features. • Groq, Inc.: acts as a fallback when the primary provider is unavailable, and transcribes voice notes into text. Other services: • Razorpay Software Private Limited: processes payments. Licensed by the Reserve Bank of India and governed by their Privacy Policy. • Google LLC: optional Google sign-in, and Google Sheets export if you connect it. We are not responsible for the privacy practices of these or any other third-party services linked from within Zynqly. We encourage you to review their privacy policies before use. This Privacy Policy applies only to data processed directly by AYDEX Technologies through the Zynqly platform.
We'll notify you of significant changes by email at least 14 days before they take effect. Continued use means acceptance.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable Indian law. We will notify you of material changes via email to your registered address and/or a prominent notice within the Service, at least 14 days before the change takes effect. The "Last updated" date at the top of this page will always reflect the most recent revision. For minor changes (such as typographical corrections or clarifications that do not affect your rights), we may update the policy without prior notice. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.
Privacy questions? Email support@zynqly.com or call +91 80815 55129. We respond within 2 business days.
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: AYDEX Technologies (Zynqly) Proprietor: Sunny Barra, Kanpur, Uttar Pradesh — 208027, India Email: support@zynqly.com Phone: +91 80815 55129 We aim to respond to all privacy inquiries within 2 business days. For formal grievances under Indian law, please refer to our Grievance Officer details in §13.