Privacy Policy

1. Who this applies to

This policy covers two kinds of people: business owners who create an account with Zonit to manage their listing ("Business", "you"), and the end customers of those businesses who tap an NFC card or scan a QR code to leave a review or private feedback ("Customers"). Zonit does not offer customer accounts in this version of the product — a Customer never signs up, logs in, or creates a profile with us.

2. What we collect

From a Customer, when they use a business's Zonit page:

• Public reviews — the star rating and review text they write (optionally starting from an AI-generated draft they can edit or discard) if they choose to post it.
• Private feedback — the star rating and message they write if they choose to send feedback privately instead, plus a phone number or email address only if they choose to leave one. Contact information is always optional.
• Anonymous usage events — that a page was viewed, a rating was picked, a review was drafted or submitted, and similar funnel steps, tied to the business the Customer visited. These events carry no name, contact details, or other identifier for the Customer — we cannot connect them back to a specific person.

From a Business, when you create an admin account with us:

• Your login email address and authentication details, and the information you enter about your business (name, category, description, logo and cover images, WhatsApp number, and your Google review link).

What we do not collect in this version of Zonit: no payment or billing information (there are no paid plans yet), no Customer accounts or profiles, and no precise device location.

3. How AI-generated review drafts work

When a Customer picks a rating, Zonit asks an AI provider (currently Google's Gemini API) to draft a short review. The only information sent to generate that draft is the business's name, its category, and the star rating chosen — never the Customer's name, contact details, or any other personal information, because we don't have any to send. The Customer can freely edit or discard the draft before deciding whether to post it anywhere.

4. Who we share information with

• Supabase, our database and hosting provider, which stores all of the information described above on our behalf.
• Google, in two limited ways: the Gemini API (see above) to draft reviews, and — only if a Customer chooses "Post to Google" — by sending them to Google's own review page for that business, where Google's own privacy policy applies to whatever they submit there.
• Resend, our email delivery provider, which we use to send a Business an email alert (containing the rating, message, and optional contact info from that one piece of feedback) when a Customer submits private feedback. Resend only transmits that message — it isn't used for marketing or newsletters.
• Sentry, our error-monitoring provider. If something breaks while you're using Zonit, Sentry may receive technical diagnostic information — the error message, a stack trace, your browser/device type, and the page URL — so we can find and fix the bug. We've configured it to never receive review or feedback text, contact details, or account credentials, and we don't attach any identity or IP address to what it does receive.

We do not sell personal information, and we do not use advertising or tracking cookies (see our Cookies & Analytics notice).

5. How long we keep information

Reviews, feedback, and usage events are kept for as long as the associated business account is active with Zonit, so the Business can see its own history. A Business can request deletion of its data at any time by contacting us below.

6. Your rights (India DPDP Act, 2023)

If you are a Data Principal under India's Digital Personal Data Protection Act, you have the right to access, correct, and request erasure of your personal data that we hold, and to withdraw consent and raise a grievance. Since Customers interact with Zonit anonymously (no account, contact information optional), we can only act on requests where we can reasonably identify the relevant data — for example, using the contact details you left with a specific piece of feedback.

To exercise any of these rights, contact our Grievance Officer, Samarth (on behalf of Zonit), at zonittapofficial@gmail.com.

7. Children's privacy

Zonit is intended for use by adults on behalf of a business, or by adult customers of that business. It is not directed at children, and we do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy as Zonit changes. We'll update the "Last updated" date above when we do.

9. Contact us

Zonit
Solapur, Maharashtra, India
zonittapofficial@gmail.com