Privacy Policy

1. Introduction

VZBAL (“we”, “us”, or “our”) is a business platform operated by The Office Assist. We are committed to protecting the personal information of our users, customers, and website visitors (“you” or “your”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at vzbal.in and related services (collectively, the “Service”). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

2.1 Information you provide directly

• Account registration details: name, email address, phone number, company name
• Billing information: billing address (payment card details are handled by our payment processor and never stored on our servers)
• Content you create within the platform: leads, tasks, employee records, invoices, and other business data
• Communications with our support team
• Demo and contact form submissions

2.2 Information collected automatically

• Log data: IP address, browser type, pages visited, time and date of visits
• Device information: device type, operating system, unique device identifiers
• Usage data: features used, session duration, click patterns, and in-app events
• Cookies and similar tracking technologies (see Section 8)

2.3 Information from third parties

• If you connect integrations (e.g. WhatsApp Business API), we may receive data from those services as permitted by their terms
• Lead data you import from CSV files or third-party sources

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the VZBAL platform
• Process transactions and send related information (receipts, invoices)
• Respond to comments, questions, and requests for customer support
• Send product updates, promotional communications (with your consent where required by law)
• Monitor and analyse usage trends to improve the Service
• Detect, investigate, and prevent fraudulent or illegal activity
• Comply with legal obligations and enforce our agreements
• Personalise your experience and provide AI-powered features within the platform

4. Legal Basis for Processing (GDPR / DPDP)

Where applicable law requires a legal basis for processing personal data, we rely on one or more of the following:

• Contract: Processing is necessary to perform the contract we have with you (providing the Service)
• Legitimate interests: Processing is in our legitimate interests (e.g. improving our platform, fraud prevention) and does not override your rights
• Consent: You have given us explicit consent (e.g. for marketing emails)
• Legal obligation: Processing is necessary for compliance with applicable law

5. Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share it in the following limited circumstances:

• Service providers: Third-party vendors who assist in operating our platform (cloud hosting, payment processing, email delivery, analytics) under strict data processing agreements
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to the acquirer honouring this policy
• Legal requirements: When disclosure is required by law, court order, or governmental authority
• Protection of rights: To protect the rights, safety, or property of VZBAL, our users, or the public
• With your consent: For any other purpose with your explicit consent

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. Business data (leads, tasks, HR records, invoices) is retained for the duration of your subscription plus a 90-day grace period after account termination, during which you may request an export.

After termination and the grace period, your data is securely deleted or anonymised. We may retain certain information for longer periods where required by law (e.g. financial records for 7 years under Indian accounting standards).

7. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls and audit logging
• Regular penetration testing and security audits
• Two-factor authentication available for all accounts

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authorities as required by law.

8. Cookies

We use cookies and similar technologies to:

• Essential cookies: Required for the platform to function (session authentication, security)
• Analytics cookies: Help us understand how the platform is used (e.g. page views, feature usage)
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality. We do not use cookies for third-party advertising.

9. Your Rights

Subject to applicable law, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (“right to be forgotten”)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at support@vzbal.in. We will respond within 30 days. Account holders can also export their data directly from the platform under Settings → Data Export.

10. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

11. International Data Transfers

Your information is primarily processed and stored on servers located in India. If we transfer data outside India, we ensure appropriate safeguards are in place (such as standard contractual clauses) as required by the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

12. Third-Party Links

The Service may contain links to third-party websites or integrations. This Privacy Policy does not apply to those third parties. We encourage you to read the privacy policies of any third-party services you connect to VZBAL.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice within the platform at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

For any privacy-related questions, complaints, or to exercise your rights, please contact our Data Protection Officer: