Privacy Policy

Last updated: 1 April 2026

Zziffy is a product of Zonafi Ventures (OPC) Private Limited ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect information when you use our HR and payroll platform at zziffy.com.

1. Information We Collect

We collect the following categories of information:

• Business account information: Company name, GSTIN, registered address, contact email, and billing details provided during signup.
• Employee records: Name, date of birth, PAN, bank account details, salary structure, attendance records, and leave history — entered by the account owner (employer) to operate the payroll system.
• Usage data: Pages visited, features used, session duration, browser type, and device identifiers — collected to improve the product.
• Location data: GPS coordinates captured during mobile employee check-in, used solely for attendance verification and retained for the period set by your account.

2. How We Use Your Information

• To operate the Zziffy platform — calculate payroll, generate payslips, process attendance, and manage leave.
• To send transactional emails — payslips, notifications, billing receipts, and account alerts.
• To maintain compliance records as required by Indian labour and tax law.
• To improve the product through anonymised usage analytics.
• To communicate with you about your account, renewals, and product updates.

We do not sell your data. We do not use employee payroll data for advertising or any purpose beyond operating your account.

3. Data Storage and Location

All data is stored on servers located within India. We use Amazon Web Services (AWS) India region (ap-south-1, Mumbai). Data is not transferred to servers outside India.

4. Data Security

• AES-256 encryption at rest for all stored data.
• TLS 1.2+ encryption for all data in transit.
• Role-based access controls — only authorised personnel can access your account data.
• Full audit logging of all access and modifications to payroll and employee records.
• Regular security audits and vulnerability assessments.

5. Third-Party Services

We use the following third-party services to operate Zziffy:

• Razorpay: Payment processing. Your payment card data is handled directly by Razorpay and is never stored on our servers. Razorpay is PCI-DSS compliant.
• SendGrid / AWS SES: Email delivery for payslips and notifications.
• Google Analytics: Anonymised website usage tracking. You may opt out via your browser settings.

6. Employee Data and Employer Responsibility

Zziffy processes employee data on behalf of the employer (account owner). The employer is responsible for obtaining necessary consent from employees to process their personal data for payroll purposes, as required under applicable Indian law. Zziffy acts as a data processor; the employer is the data controller.

7. Data Retention

Payroll and employee records are retained for the duration of your active subscription plus 7 years, as required for compliance with Indian tax and labour regulations. Upon account closure, you can request a full data export. After 90 days following account closure, your data is permanently deleted from our systems.

8. Your Rights

You have the right to:

• Access all data stored in your account at any time via the dashboard or data export.
• Correct inaccurate data by editing records within the platform.
• Request deletion of your account and associated data (subject to statutory retention requirements).
• Raise a data concern by emailing info@zziffy.com.

9. Cookies

We use essential session cookies to keep you logged in, and optional analytics cookies to understand how the product is used. You can disable non-essential cookies in your browser settings without affecting your ability to use Zziffy.

10. Changes to This Policy

We will notify you by email and in-app notification before making material changes to this policy. Continued use of Zziffy after such notification constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:
Email: info@zziffy.com
Address: Zonafi Ventures (OPC) Private Limited, Navi Mumbai, India