Last updated: 03 Oct 2026
1. What we collect
- Account data: full name, email, password (stored as a one-way hash, never in plain text), and optional profile fields such as phone, company, country and website.
- Usage data: searches, saved searches, lead records, jobs, credit transactions, exports and notifications you create in the product.
- Lead data: business information discovered or enriched from public sources at your request (business name, address, public contact details, public social links, and similar public-facing information).
- Technical data: IP address, user agent, and timestamps recorded in security/audit logs for abuse prevention and troubleshooting.
- Billing data: plan, order, payment and subscription references from our payment processor, Razorpay. We do not collect or store your card number, CVV or other card credentials — those are handled directly by Razorpay.
2. How we use it
- To provide the account, dashboard, CRM, discovery, enrichment, export and billing features you use.
- To send transactional email (verification, password reset, billing, job and security notifications) and, where you opt in, product updates.
- To enforce credit limits, prevent abuse, and maintain security and audit logs.
- To generate a daily internal report of new registrations, sent to our own operational mailbox, for account oversight.
3. Owner-side operational retention (important)
ZovaStore's operator receives two kinds of operational reports at its own mailbox, contact@zovastore.in:
- Lead-job backups. When a lead-collection job you run completes, a spreadsheet of the resulting leads is generated and emailed to that mailbox. It contains business name, category, address and location, website, public phone and email, public social links, services, source, lead score, collection date, and a reference to your account and the search that produced it.
- Daily new-user report. Once a day, a spreadsheet of accounts registered the previous day is emailed to that mailbox: name, email, phone, company, country, registration date, last login, plan and account status.
These reports are used for support, dispute resolution, abuse prevention and business continuity. They never include passwords, password hashes, session data or any other authentication secret. Backups are kept separately from your account, so deleting your account does not recall copies already delivered; you can ask for them to be deleted by writing to contact@zovastore.in.
4. Legal basis and lawful use of discovered data
Discovery and enrichment features surface information that is already publicly available on the open web. We do not access private, login-protected or access-controlled information. You are responsible for using any data obtained through the Service in compliance with applicable data protection and anti-spam laws when contacting the businesses represented in your leads.
5. Cookies
We use a single first-party session cookie to keep you signed in and to protect forms with CSRF tokens. See our Cookie Policy for details. We do not use third-party advertising or tracking cookies.
6. Data sharing
We do not sell your personal data. We share data only with service providers necessary to operate the Service — our hosting provider, our SMTP mail provider, and Razorpay for payment processing — each solely to perform their function for us.
7. Data retention
Account data is retained while your account is active. You can delete individual leads, search history and saved searches, or permanently delete your account, from Settings. Owner-side operational backups described in Section 3 are retained separately for the purposes stated there.
8. Your rights
You can export your data, delete specific records, deactivate your account, or request permanent account deletion. Contact contact@zovastore.in for any request you cannot complete from Settings.
9. Security
Passwords are hashed with PHP's password_hash(); all database queries use parameterized statements; sessions use secure, HttpOnly, SameSite cookies with regeneration on login; and administrative areas require a separately authorized role.
10. Changes to this policy
We may update this Privacy Policy as the product evolves. Material changes will be reflected by an updated "Last updated" date, and significant changes may also be communicated by email.
11. Contact
Privacy questions or requests: contact@zovastore.in.