Privacy Policy

1. Introduction

Welcome to HeyZora ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payroll management system.

By using HeyZora, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide to us, including:

• Name, email address, and phone number
• Company information (name, address, GST number, PAN)
• Employee details (PAN, UAN, ESI number, Aadhaar if provided)
• Bank account information for salary processing
• Tax declaration details
• Employment history and professional information

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies
• Log files and analytics data

2.3 Financial Information

We collect and process salary information, tax details, and payment information necessary for payroll processing. All financial data is encrypted and stored securely.

3. How We Use Your Information

We use the collected information for:

• Processing payroll and managing employee compensation
• Compliance with Indian tax laws and regulations
• Generating payslips, Form 16, and other statutory documents
• Managing employee onboarding and offboarding
• Providing customer support and responding to inquiries
• Improving our services and developing new features
• Sending administrative information and service updates
• Detecting and preventing fraud and security threats
• Analytics and performance monitoring

4. Data Security

We implement industry-standard security measures to protect your personal information:

• AES-256 encryption for sensitive data at rest
• TLS/SSL encryption for data in transit
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Role-based access control (RBAC) for employee data
• Automated backup and disaster recovery systems
• Compliance with ISO 27001 security standards

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal obligations (typically 7 years for payroll records in India)
• Resolve disputes and enforce our agreements
• Meet tax and statutory requirements

Upon termination of your account, we will securely delete or anonymize your personal information, unless retention is required by law.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Government Authorities: For tax compliance (Income Tax Department, EPFO, ESIC)
• Banking Partners: For salary disbursement processing
• Service Providers: Cloud hosting, email services, analytics (under strict confidentiality agreements)
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In case of merger, acquisition, or sale of assets

7. Your Rights and Choices

Under applicable Indian data protection laws, you have the right to:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at contact@heyzora.in.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.

We use Google Analytics, Meta Pixel, Hotjar, and LinkedIn Insight Tag for analytics purposes. These services may collect information about your usage patterns.

9. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be stored and processed in servers located in India or other countries. We ensure appropriate safeguards are in place for any international transfers in compliance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Compliance with Indian Laws

This Privacy Policy is designed to comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian laws and regulations.