Privacy Policy

1. Who we are

ABC Management Software ("ABC app") is operated in India by Zoa Zone Services Pvt Ltd, 376, G3, Road No 82, Film Nagar, Jubilee Hills, Hyderabad, Telangana 500096, India, and globally by Zoa Zone Services LLC, 1770 Grand Concourse 12A, Bronx, NY 10457, USA. This policy explains how personal data is handled when you use the platform. It is written to comply with India's Digital Personal Data Protection Act, 2023 ("DPDP Act 2023").

2. Data we collect

• Account data: your name, email address, phone number (if provided), organisation name, role and password (stored only as a secure hash).
• Programme records: the dog capture, kennel, surgery, vaccination, observation, feeding, release, mortality, complaint, vehicle, expense and billing records your organisation enters, including photos, GPS coordinates and staff names captured in those records.
• Attendance data: check-in/out times and locations, and face or fingerprint verification data where your organisation uses biometric attendance. Biometric templates are processed for attendance verification on behalf of your organisation, which determines the purpose of that processing.
• Payment data: billing contact details, GST number, subscription and invoice history, and payment references. Full card, UPI or net-banking credentials are not collected or stored by us (see section 4).
• Technical data: device and browser information and usage logs needed to operate, secure and troubleshoot the Service.

3. Why we process it

We process personal data to provide the Service your organisation signed up for (creating and managing accounts, storing records, generating reports and invoices), to secure the platform, to communicate with you about your account and subscription, and to comply with legal obligations such as tax and accounting rules. Where the DPDP Act 2023 requires consent, we seek it clearly and you may withdraw it; withdrawal does not affect processing already carried out.

4. Payments and card/UPI data

Subscription and one-time payments in India are processed by Cashfree Payments, a PCI DSS-compliant payment aggregator. When you pay, card, UPI, or net-banking details are entered on Cashfree's secure checkout and are handled by Cashfree and your bank or card network under their own safeguards. Card-on-file and mandate data (UPI AutoPay / eNACH) required for recurring billing is tokenised and held by the payment network — never by us. We receive only the payment confirmation, amount, and reference numbers needed to reconcile your invoices.

5. Sharing of data

We share personal data only as needed to run the Service: with our hosting and infrastructure providers, with payment gateways (Cashfree for India; PayPal for customers outside India) to process payments, with email and communication providers to deliver reports and notifications you configure, and with government or municipal authorities where your organisation directs a report to them or where the law requires it. We do not sell personal data or use it for third-party advertising.

6. Data retention

Account and programme records are retained for as long as your organisation's account is active, and thereafter as required for statutory record-keeping (animal health, ABC programme and financial/tax records have prescribed retention periods under Indian law). Billing and invoice records are retained for the period required by tax law. When data is no longer required and no legal retention obligation applies, it is deleted or anonymised on request or as part of account closure.

7. Your rights

Under the DPDP Act 2023, you (the Data Principal) have the right to: access a summary of your personal data and how it is processed; request correction, completion or updating of inaccurate data; request erasure of data that is no longer necessary for the purpose it was collected; nominate another individual to exercise your rights if you are unable to do so; and withdraw consent where processing is based on consent. You may also register a grievance with our Grievance Officer (section 9), and escalate to the Data Protection Board of India.

8. Security

We use encryption in transit and at rest, role-based access control so users see only their organisation's data, audit logs, and regular security reviews. No system is perfectly secure, but we are committed to promptly investigating and notifying affected parties of any personal data breach as required by law.

9. Contact and Grievance Officer

Grievance Officer (India): Zoa Zone Services Pvt Ltd, 376, G3, Road No 82, Film Nagar, Jubilee Hills, Hyderabad, Telangana 500096, India — care@zoazoneservices.com · +1 256 699 8899. Complaints are acknowledged within 48 hours and redressed within 15 days, per the IT Rules 2021. Full contact details: Contact Us.

10. Changes to this policy

We may update this policy as the Service evolves. The current version is always published on this page with its "last updated" date, and material changes will be communicated to account administrators.