Privacy Notice

Last updated: November 15, 2026

[LAWYER REVIEW] This notice was drafted to describe this app's actual data flows accurately, and to cover the notice/rights/retention/grievance requirements of India's Digital Personal Data Protection Act, 2023 (DPDP Act). It has not been reviewed by a lawyer. Have it reviewed before relying on it for a live, paying userbase — particularly the legal-basis language in §2 and the retention periods in §6.

Zenith Dynamics ("we", "us", the "Data Fiduciary" under the DPDP Act) is operated by [Your legal entity name and registered business address]. This notice explains what information we collect when a business ("tenant") signs up to use Zenith Dynamics, and when that tenant's own customers ("data principals") use their review funnel link, why we collect it, how long we keep it, and what rights you have over it.

1. Information we collect

From a tenant (business owner/staff): business name, subdomain, admin name, email address, password (stored hashed, never in plain text), and — if configured — a Google Gemini API key, Telegram bot token/chat ID, and webhook URL for their own integrations. If a tenant subscribes to a paid plan, payment is processed by Cashfree; we store the resulting subscription/plan status, not raw card details, which never pass through our servers.

From a tenant's customer (the person leaving feedback): a star rating, optional written feedback text, and optional contact details (name/email/phone) if they choose to provide them. This data belongs to the tenant business, not to us — we process it on the tenant's behalf so they can respond to their own customers.

Automatically: standard server logs (IP address, browser user agent, timestamps) for security and abuse prevention. If a tenant enables "Continue with Google" login, we receive the authenticated user's Google email address only — never their Google password, and this never creates a new account, only links to an existing one.

2. How we use this information

To operate the review funnel: routing a 4-5★ rating toward a Google review, and keeping a 1-3★ rating private in the tenant's dashboard instead of on a public review site.
To generate a draft review for a happy customer to review and post themselves — either via the tenant's own Google Gemini API key (their own key, their own data relationship with Google), or, if the tenant opts into "managed" AI mode, via our own Gemini key, in which case the feedback text is sent to Google's Gemini API for that one generation request only.
To process billing through Cashfree, our third-party payment processor, and to send transactional email (verification links, password resets, billing receipts, weekly digest summaries if enabled).
To send optional Telegram push notifications, only if a tenant has explicitly configured their own Telegram bot token and chat ID.
To secure accounts: two-factor authentication codes, session management, and activity logs of security-sensitive actions (team changes, API token creation, webhook changes).
If a super admin has configured a Google Analytics (GA4) measurement ID, to understand aggregate visitor traffic to our own public marketing pages only (home, features, pricing, contact) — never on a tenant's own funnel or dashboard pages, and never without the visitor accepting the cookie banner first. See "Cookies and analytics" below.

3. Consent

Where we rely on your consent to process personal data — submitting the public feedback funnel (an unticked-by-default checkbox confirming you agree to your feedback and any contact details being used to generate and manage your review), creating a tenant account (agreeing to this notice at registration), or contacting us (agreeing your message may be used to respond) — we record the fact and time consent was given. You can withdraw consent at any time using the Data Rights Request form below; withdrawing consent does not affect the lawfulness of anything already done with your data before the withdrawal, and may mean we can no longer provide the specific service the consent was for (e.g. we can't keep managing a review we no longer have consent to process).

4. Cookies and analytics

We use one strictly necessary session cookie to keep you logged in — this is required for the service to function and isn't something you can opt out of while using it. Separately, if the operator of this install has configured Google Analytics (GA4), a cookie consent banner appears on our public marketing pages; analytics cookies are only set after you click "Accept," and nothing loads at all if you click "Decline" or configuration is absent. GA4, when active, is never active on any tenant's funnel or dashboard page.

5. Third-party services we rely on

Depending on what a tenant configures, feedback/account data may pass through: Google (Gemini API for review drafting, Google OAuth for login, Google's own review page when a customer posts a review — none of that is under our control once they leave our site), OpenAI (ChatGPT, an alternative to Gemini for review drafting), Cashfree (payment processing — the tenant admin's email is shared with Cashfree to create the payment order), Telegram (optional push notifications, opt-in per tenant), and Postmark (transactional email delivery). Each operates under its own privacy policy.

6. Data retention and deletion

A tenant can delete their own account at any time from their dashboard, which removes their business's data (users, feedback, logs) via cascading deletion. A tenant's customer who wants their own feedback/contact details corrected or erased can use this page's Data Rights Request form, or contact the specific business directly — for a customer's own submitted feedback, we act as the tenant's data processor, but we handle erasure/correction requests ourselves rather than requiring every tenant to build their own process. Erasure removes identifying fields (name, email) from a feedback row; the rating and review text are kept, since a business has a legitimate interest in its own aggregate feedback history — see §7 below on what this means for your rights. Absent an earlier deletion/erasure request, we keep tenant account data for as long as the account is active, and a tenant customer's feedback data for as long as the tenant's account exists (it belongs to their business relationship with their own customer, not a fixed calendar period we control).

7. Your rights under the DPDP Act, 2023

As a data principal, you have the right to:

Access — a summary of what personal data we hold about you and how it's being processed.
Correction — ask us to correct inaccurate or incomplete personal data.
Erasure — ask us to erase personal data we no longer need for the purpose it was collected for (see §6's note on what's kept vs. removed).
Withdraw consent — for anything we process on the basis of your consent (see §3), at any time, as easily as you gave it.
Grievance redressal — raise a complaint with us first (see §8); if unresolved, you may approach the Data Protection Board of India.
Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

Exercise any of these rights via the Data Rights Request form. We may need to verify your identity before acting on a request.

8. Grievance redressal

[Grievance Officer contact not yet configured — set this at /super-admin/branding before launch; the DPDP Act requires it to be published.] We aim to acknowledge a grievance promptly and resolve it within a reasonable time. If you're not satisfied with our response, you may escalate to the Data Protection Board of India once it is operational and accepting complaints.

9. Security

Passwords are hashed with bcrypt, never stored or logged in plain text. Two-factor authentication (TOTP) is available to every tenant account. Server-generated secrets (webhook signing secrets, API tokens, 2FA recovery codes) are stored separately from user-settable fields precisely so they can never be silently overwritten by a form submission.

10. Children's privacy

This service is intended for business use and is not directed at children. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

We may update this notice as the product changes. Continued use of the service after an update constitutes acceptance of the revised notice.

12. Contact

Questions about this notice or your data can be sent via our Contact page, or use the Data Rights Request form for a formal access/correction/erasure/consent-withdrawal request.