Privacy & Data Protection Policy

1 Information We Collect

We collect personal data to provision services, ensure deliverability, and authenticate access:

• Account Credentials: Full name, verified business email, telephone number, billing address, and cryptographically hashed passwords.
• Workspace & Campaign Data: Imported contact records, recipient email addresses, WhatsApp phone numbers, tags, custom form responses, and Kanban sales deals.
• Technical & Telemetry Data: IP addresses, browser user-agents, tracking pixel tags (tracker.js), email open logs, link click metrics, bounce codes, and delivery timestamps.

2 How We Use Your Data

• To authenticate and maintain single sign-on across the ARZAQ digital ecosystem.
• To route and dispatch email campaigns, automated drip sequences, and official Meta WhatsApp Cloud messages.
• To verify SPF, DKIM, and DMARC DNS health records for custom sending domains.
• To execute automated anti-abuse, bounce auto-suppression, and spam complaint filtering.
• To process subscription invoices via authorized RBI-licensed payment gateways (PayU, Razorpay, Cashfree, PhonePe).

3 Data Security & Infrastructure

Arzonet stores and processes data primarily within Tier-4 AWS Mumbai cloud infrastructure (ap-south-1). Security safeguards include:

• End-to-end TLS 1.3 encryption in transit and AES-256 encryption at rest.
• Strict tenant database isolation preventing cross-account access or leakage.
• Private VPC subnets with Web Application Firewall (WAF) rate limiting.
• Zero sale of user or contact data to third-party ad brokers.

4 Your Rights & Data Control

Under applicable data protection laws, you retain full ownership of your data:

• Right to Access & Export: Export your full contact lists, campaign performance metrics, and logs in CSV/JSON format at any time.
• Right to Erasure: Delete contacts, campaigns, or request complete account termination.
• Consent Withdrawal: Opt out of promotional communications at any time.

5 Grievance Officer & Legal Contact

In accordance with the Information Technology Act, 2000 and DPDP Act, 2023, the details of the designated Grievance Officer are as follows: