Privacy Policy for ZENZIA

A. Google User Data Accessed by ZENZIA:

Our application accesses the data you have provided to us when you interact with Google authentication or integrate Google services:

• Basic Profile Information & Email Address (Google Sign-In): When you authenticate using Google, we access your name, primary email address, account identifier, and profile picture URL. We use this data solely to create, verify, authenticate, and secure your ZENZIA user account.
• Gmail Outbound Send Scope (https://www.googleapis.com/auth/gmail.send): When explicitly connected and authorized by you, ZENZIA accesses this scope solely to send outbound 1-on-1 sales follow-ups and user-initiated email sequences directly from your CRM lead drawer on your behalf.

B. How ZENZIA Uses Google User Data:

We will use your data to provide you with the services you requested, specifically:

• To securely log you into your ZENZIA CRM workspace and authenticate your active session.
• To display your sender identity when communicating with prospective clients.
• To transmit outbound follow-up emails that you explicitly compose, review, or schedule from within the CRM interface.
• We will not sell your data to third parties, but we may share it with verified cloud infrastructure providers (such as Google Cloud Platform and Firebase) solely to host and operate our backend services.

C. Sharing, Transfer, and Prohibited Uses of Google User Data:

We do not transfer or disclose your information to third parties for purposes other than the ones provided. In strict compliance with Google's API Services User Data Policy, ZENZIA NEVER uses, shares, or transfers Google user data for any of the following prohibited purposes:

• No Selling or Renting: We do not sell, rent, lease, or transfer Google user data to data brokers or information resellers under any circumstances.
• No Advertising: Google user data is never used or transferred for serving advertisements, including targeted advertisements, personalized advertisements, retargeted advertisements, or interest-based advertisements.
• No Credit or Lending Decisions: Google user data is never used for determining credit-worthiness or for lending purposes.
• No Inbox Reading or Scraping: ZENZIA does not read, index, parse, search, scan, or store your incoming personal emails or inbox history. We only transmit outbound messages that you explicitly initiate.
• No External Database Creation: Google user data is never extracted to build external lead directories or data enrichment databases.
• No AI/ML Model Training: For AI/ML use cases, ZENZIA explicitly affirms that Google Workspace APIs and Google user data are NEVER used to develop, improve, fine-tune, or train generalized or non-personalized Artificial Intelligence (AI) and/or Machine Learning (ML) models.

D. Data Protection and Security Mechanisms for Sensitive Data:

Security procedures are in place to protect the confidentiality of your data. We use industry-standard encryption to protect your information:

• Encryption in Transit: All communications between your browser, ZENZIA servers, and Google APIs are encrypted using Transport Layer Security (TLS 1.3).
• Encryption at Rest: All database records and session tokens are encrypted using AES-256 standard encryption on Google Cloud Platform and Firebase enterprise infrastructure.
• Access Controls: Sensitive credentials and OAuth tokens are stored in secure, encrypted secrets managers with strict Role-Based Access Control (RBAC), multi-factor authentication, and audited principle of least privilege.

E. Data Retention and Deletion of Google User Data:

• We store your personal information for a period of time that is consistent with our business purposes and for the duration of your active subscription or user account.
• We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.
• When the data retention period expires for a given type of data or when an account is closed, we will delete or destroy it permanently from our production databases.
• You may request for your data to be deleted at any time by visiting our dedicated Data Deletion Instructions Page or emailing us at privacy@zenzia.in. All verified deletion requests are fulfilled within 5 business days.
• You can also revoke ZENZIA's access to your Google account at any time with one click via Google Account Security Settings.