Privacy Policy

How ZekiHR collects, uses, and protects data for agencies, clients, and candidates.

Effective date: January 16, 2025
Last updated: January 16, 2025

ZekiHR ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard information when you use our Platform.

1. Information we collect

Account information: Name, email address, phone number, company or agency details, and role information you provide when creating or managing an account.
Billing information: Payment method details and transaction logs processed via third-party payment providers such as Stripe or Razorpay. We do not store full card numbers on our own servers.
Usage data: Logins, page views, clicks, workflow activity, feature usage, and other in-product events used to improve the Platform.
Device and technical data: IP address, browser type, device identifiers, approximate location, and similar technical information.
Cookies and similar technologies: Information collected through cookies or similar technologies as described below.
Client and candidate data: Information that you and your team upload or enter into ZekiHR (for example, candidate profiles, resumes, HR and employment records, notes, and documents). You are responsible for having the appropriate legal basis to process this data.

2. How we use your data

To provide, operate, and maintain the ZekiHR Platform and related services.
To set up and manage your account, workspaces, and user permissions.
To process payments, send invoices, and manage billing-related communication.
To provide customer support, implementation assistance, and troubleshooting.
To monitor usage, improve product performance, and develop new features.
To send service-related notifications (for example, security alerts or changes to terms).
To send product updates or marketing communications where you have consented, with the option to opt out at any time.
To comply with legal obligations and enforce our agreements.

3. Sharing of information

Payment processors: We share necessary billing information with payment providers such as Stripe or Razorpay to process transactions.
Service providers: We may share data with vetted vendors who help us with cloud infrastructure, analytics, email delivery, customer support, and similar services. These providers are bound by contractual confidentiality and data protection obligations.
Legal and compliance: We may disclose information if required by law, court order, or governmental request, or to protect our rights, users, or the public.
Business transfers: In the event of a merger, acquisition, or other corporate transaction, your information may be transferred as part of that transaction, subject to continued protection consistent with this Policy.

4. Data security

Data is encrypted in transit using industry-standard protocols (such as HTTPS/TLS).
Where applicable, data at rest is encrypted and protected using access controls, role-based permissions, and logging.
We regularly review our technical and organizational safeguards; however, no system can be completely secure, and we cannot guarantee absolute security.

5. Your rights

You may access, update, or correct certain account information within the Platform.
You may request deletion of your account subject to contractual or legal retention obligations.
You may opt out of non-essential marketing communications by using the unsubscribe links in emails or contacting us.
Depending on your jurisdiction, you may have additional data protection rights (such as data portability or objection to processing). We will honor such rights where required by applicable law.

6. Data retention

Account and workspace data is generally retained for as long as your account is active and for a reasonable period thereafter to support reactivation or account history, unless you request deletion and we are not required to keep it.
Billing and financial records may be retained for up to seven (7) years or as required under Indian tax and accounting laws.
Analytics and product usage data may be aggregated or anonymized after a defined period (for example, after two (2) years) and used to improve the Platform.
Marketing data is typically deleted or anonymized promptly after you opt out of such communications.

7. International data transfers

ZekiHR may use cloud infrastructure or service providers located outside your country, including outside India.
Where data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place, consistent with applicable data protection laws.
By using the Platform, you consent to such international transfers to the extent they are necessary to deliver the service.

8. Cookies and tracking

We use essential cookies that are required for the Platform to function (for example, to keep you logged in or maintain session state).
On our marketing website (including pages under /v2/), we use PostHog (PostHog, Inc.) for product analytics: page views, approximate location derived from IP, device/browser metadata, and automatic capture of some interactions (for example clicks) to understand how visitors use the site. For embedded Supademo product demos, we may record rough time the demo stays in the viewport (to understand engagement). We have session replay disabled on those pages. PostHog's privacy statement is available at posthog.com/privacy.
Where required by law, we will request your consent before using non-essential cookies or provide mechanisms for you to opt out.

9. Children's privacy

The Platform is intended for business use by adults and is not directed to children under 18.
We do not knowingly collect personal information from minors.
If you believe that information about a minor has been provided to us improperly, please contact us so we can review and address it.

10. Changes to this privacy policy

We may update this Privacy Policy to reflect product, legal, or regulatory changes.
When we make material changes, we will update the "Last updated" date and may provide additional notice through the Platform or by email.
Continued use of the Platform after changes take effect means you accept the updated Policy.

11. Contact

If you have questions about this Privacy Policy or how we handle data, you can contact us at support@zekihr.com.