Privacy Policy

Zenoel ("Company", "we", "us", or "our") is a SaaS-based vehicle service management platform designed for any car service related business — including car wash centres, car spas, car PPF studios, detailing services, car repair workshops, and other automotive service providers. Zenoel is accessible through our mobile application (available on Android and iOS) and our marketing website at https://zenoel.in (collectively, the "Platform").

Zenoel enables vehicle service businesses to manage bookings, customer profiles, team members, service packages, invoicing, billing, expense tracking, and business analytics — all from a single platform.

This Privacy Policy governs the use of Zenoel by businesses and their authorized team members who subscribe to and use our software. It explains how we collect, store, use, and protect your information in the course of providing our services to you.

This Privacy Policy applies to the following users of the Zenoel Platform:

• Business Owners (Account Holders): Owners or primary managers of a vehicle service business who purchase a Zenoel subscription and create an account.
• Team Members: Staff and authorized employees added to a business account by the Account Holder, who access the Platform with defined roles and permissions.
• End Customers: Vehicle owners whose information is entered into the Platform by the business for the purpose of managing bookings and service records.
• Website Visitors: Individuals who visit our marketing website at zenoel.in without registering.

This Policy does not apply to third-party websites, applications, or services that may be linked from our Platform. We encourage you to review the privacy policies of those services independently.

By registering for, accessing, or using the Platform, you expressly consent to the collection, storage, use, and disclosure of your information as described in this Policy. If you do not agree, please discontinue use of the Platform immediately.

Capitalized terms not defined here carry the same meaning as given in our Terms & Conditions. In the event of any conflict between the Terms & Conditions and this Policy, this Policy shall prevail to the extent of such inconsistency.

We collect the following categories of information depending on how you use the Platform:

A. Business Account Information

When you register and set up your Zenoel account, we collect:

• Business name, tagline, and logo
• Owner name and contact details (email address, mobile number)
• Business address, city, state, and PIN code
• GSTIN, PAN, and Business Registration Number (where applicable)
• Bank account details added for internal payment reconciliation (account name, masked account number, UPI ID) — we do not store full bank credentials
• Subscription plan selected, payment method used, and renewal history
• Payment transaction IDs confirmed via our payment processor (Razorpay)

B. Team Member Information

When you add team members to your account, we collect:

• Name and mobile number
• Login email address and role assigned (e.g., staff or authorized team member)
• Module-level permissions granted by the Account Holder
• Login activity and session logs for security and audit purposes

C. Customer (Vehicle Owner) Data

As a business using Zenoel, you may enter information about your customers into the Platform. This includes:

• Customer name, phone number, and email address
• Vehicle details (make, model, colour, registration number)
• Booking and appointment history, service notes
• Service package purchases and redemption records
• Payment records (amount, method, date of payment)
• Invoice and billing history

This data is entered by you (the business) and is used solely to power the features of the Platform on your behalf.

D. Technical & Device Information

• IP address, browser type, operating system, and device model
• Mobile device unique identifiers
• Pages visited, features used, session duration, and clickstream data
• App crash reports and performance diagnostics
• Login timestamps and session activity

E. Location Information

When you access the Platform via a mobile device, we may collect your approximate or precise device location to improve personalization and associate your business profile with a geographic region. Location data may also be inferred from your IP address.

F. Support Communications

When you contact our support team via email, in-app chat, or any other channel, we retain those communications to respond to your query and to improve our service quality.

We use the information we collect solely to operate and improve the Zenoel Platform and to serve you as our customer. Specific purposes include:

• Creating and managing your Zenoel business account
• Enabling core platform features: appointment bookings, customer management, service and package tracking, billing, and invoicing
• Processing your subscription payment and generating subscription invoices
• Generating customer-facing service invoices with optional GST (CGST + SGST) breakdowns
• Sending booking confirmations, payment reminders, and subscription renewal alerts via push notification or email
• Providing business analytics and operational reports within your account dashboard
• Verifying your identity and securing your account through OTP-based authentication
• Preventing unauthorized access, fraud, and misuse of the Platform
• Resolving support tickets, investigating complaints, and improving product features
• Complying with applicable legal obligations, including those under Indian tax and GST laws
• Conducting internal research and analysis to improve the quality and performance of our services

We will not use your information for any purpose beyond what is described in this Policy without first obtaining your explicit consent.

Zenoel does not rent, sell, or trade your personal information to any third party for marketing or commercial purposes. We share information only in the following limited and necessary circumstances:

• Technology & Service Providers: Trusted vendors who help us operate and deliver the Platform — including cloud infrastructure providers, database hosts, payment processing (Razorpay), email delivery services, and push notification providers. All such vendors are bound by data processing agreements and may only use your data to perform services on our behalf.
• Legal Compliance: When required by applicable law, regulation, court order, or governmental or regulatory authority, we may disclose information to the extent necessary to comply with such requirements.
• Business Transfers: In the event of a merger, acquisition, asset sale, or corporate restructuring, your information may be transferred to the relevant succeeding entity, which shall be bound by this Privacy Policy.
• Aggregate & Anonymised Data: We may share statistical data in aggregated and anonymised form (which cannot be used to identify any individual or business) with partners or for industry research purposes.

Zenoel takes reasonable and appropriate technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encrypted HTTPS connections across all Platform endpoints
• Passwords stored using industry-standard bcrypt hashing
• JWT-based session authentication with time-limited expiry tokens
• Role-based access control — each team member can only access the modules and data permitted by the Account Holder
• Account lockout after multiple failed login attempts to prevent unauthorized access
• OTP-based verification for password resets and sensitive account changes
• Rate limiting on login and API endpoints to mitigate abuse
• Complete data isolation between business accounts — no business can access another's data
• Access to production servers restricted to authorized personnel only

Despite these measures, no method of electronic transmission or storage can be guaranteed to be 100% secure. By using the Platform, you acknowledge this inherent limitation. Zenoel shall not be liable for any disclosure of information resulting from transmission errors or unauthorized acts by third parties that are beyond our reasonable control.

Zenoel's marketing website (zenoel.in) uses cookies and similar tracking technologies for the following purposes:

• Maintaining your session and keeping you logged in
• Remembering your preferences and settings
• Analysing website traffic and usage patterns via Google Analytics
• Displaying relevant advertisements through the Google Display Network (you may manage your ad preferences via Google Ads Settings)

You may disable or delete cookies at any time through your browser settings. Please note that doing so may affect certain features or functionality of the Platform.

The Zenoel mobile application may use device identifiers and analytics tools to monitor app performance and aggregate user behaviour — this data is used solely for product improvement purposes.

As a Zenoel user, you have the following rights with respect to your information:

• Access: Request a copy of the personal information we hold about you or your business account.
• Correction: Update or correct inaccurate information at any time directly from the Profile / Settings section of the Platform, or by contacting our support team.
• Deletion: Request deletion of your account and associated personal data. We will action this promptly, subject to our legal data retention obligations described in Section 12.
• Withdrawal of Consent: Withdraw your consent to our data processing at any time. Please note this will not affect the lawfulness of processing done prior to your withdrawal, and may result in your inability to use certain features or the Platform entirely.
• Push Notifications: Opt out of push notifications at any time through your device's notification settings.
• Marketing Communications: Unsubscribe from promotional emails via the unsubscribe link included in each email we send.

To exercise any of the above rights, please write to us at privacy@zenoel.in. We will acknowledge your request within 72 hours and resolve it within 15 business days.

Residual copies of deleted information may remain in encrypted backup storage for a limited period before permanent removal.

The Zenoel Platform may contain links to third-party websites, payment gateways (such as Razorpay), or integrated external services. Once you leave our Platform, your use of any information you provide is governed solely by the privacy policy of the operator of that third-party service.

Zenoel is not responsible for the privacy practices, content, or security of third-party sites. We recommend you review their respective privacy policies before providing any personal information.

Zenoel is a business management platform intended exclusively for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from minors.

If you have reason to believe that a person under the age of 18 has provided personal information to us through the Platform, please contact us immediately at privacy@zenoel.in. Upon verification, we will delete that information and close the associated account promptly.

We retain your information for as long as your account is active or as necessary to provide you with the Platform's services. After that:

• Active accounts: Data is retained for the full duration of your subscription and continued use of the Platform.
• After account cancellation or deletion: We may retain certain records — such as invoices, payment history, and transaction logs — for up to 5 years to comply with Indian financial, tax, and accounting laws (including the GST Act and the Companies Act).
• Support communications: Retained for up to 2 years for quality assurance and dispute resolution purposes.
• Anonymised analytics data: May be retained indefinitely, as it cannot be used to identify any individual or business.

Once the applicable retention period expires, your information is securely deleted or permanently anonymised.

Zenoel reserves the right to update or modify this Privacy Policy at any time. In the event of a material change to how we process your personal data, we will notify you at least 5 days in advance via email to your registered email address before the change takes effect.

For minor or non-material changes, the updated Policy will be published on the Platform with a revised "Last Updated" date. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to remain informed about how we handle and protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which your personal information has been handled, we encourage you to first write to us at privacy@zenoel.in.

If you are not satisfied with our response, you may escalate your complaint to our designated Grievance Officer. The Grievance Officer will acknowledge your complaint within 72 hours and endeavour to resolve it within 15 days of receipt.

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of India, including the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (to the extent applicable and notified).

Any dispute arising out of or in connection with this Policy or the Platform shall be subject to the exclusive jurisdiction of the courts at [Your City], [Your State], India.

If any provision of this Policy is held to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.