Privacy Policy

01Who we are

Zebbi Technologies (“Zebbi”, “we”, “us”) designs and builds autonomous AI applications for enterprises in banking, retail, e-commerce and supply chain. This Privacy Policy explains how we collect, use, share and protect personal data when you visit our website, subscribe to our updates, or contact us.

For personal data processed through this website, Zebbi is the data controller (a “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023). Where we process personal data on behalf of our enterprise clients, we act as a processor; see section 05.

02Information we collect

Information you give us

• Contact details: your name, work email, company and job title when you email us or ask about our services.
• Newsletter sign-ups: the email address you enter under “Join the AI Frontier”.
• Correspondence: the content of messages you send us and our replies.
• Recruitment information: your CV and related details if you apply for a role with us.

Information collected automatically

• Device and log data: IP address, browser type, operating system, referring page, pages viewed and the date and time of your visit.
• Approximate location: country or city, derived from your IP address. We do not collect precise location.
• Cookies and similar technologies: see section 06.

We do not knowingly collect sensitive personal data (such as financial account numbers, health information or government identifiers) through this website. Please do not send it to us.

03How we use your information

• To respond to your enquiries and provide information about our services.
• To send our newsletter and product updates, where you have asked to receive them.
• To operate, secure and improve this website, including diagnosing technical issues and preventing abuse.
• To assess job applications.
• To comply with legal obligations, resolve disputes and enforce our agreements.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects on you.

04Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on:

• Consent: for newsletters and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests: to answer business enquiries, run and secure our website, and improve our services, balanced against your rights.
• Contract: to take steps you request before entering into an agreement with us.
• Legal obligation: where we must keep or disclose information by law.

Under India’s Digital Personal Data Protection Act, 2023, we process personal data on the basis of your consent or for legitimate uses permitted by the Act.

05Client data and our AI systems

When an enterprise client engages us, we may process data they provide (for example, transaction, inventory or customer records) solely to deliver the agreed services. That processing is governed by our written agreement with the client, which sets out confidentiality, security and deletion obligations.

If you are an individual whose data is held by one of our clients, please contact that organisation first; we will assist them in responding to your request.

06Cookies

We use a small number of cookies and similar technologies:

• Strictly necessary: required for security and basic site functions. These cannot be switched off.
• Analytics: privacy-friendly, aggregated statistics that help us understand which pages are useful. Used only with your consent where required by law.

We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; some parts of the site may not work as intended if you block strictly necessary cookies.

07How we share information

• Service providers who host our website, deliver email and provide analytics, under contracts that require them to protect your data and use it only on our instructions.
• Professional advisers such as auditors and lawyers, under duties of confidentiality.
• Authorities, where required by law or to protect the rights, property or safety of Zebbi, our clients or others.
• A successor business, if Zebbi is involved in a merger, acquisition or sale of assets. We will notify you before your data becomes subject to a different privacy policy.

08International transfers

Our team and infrastructure span several countries, so your data may be processed outside the country where you live. When we transfer personal data internationally, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, and we comply with any transfer restrictions notified under Indian law.

09How long we keep data

• Enquiries and correspondence: up to 24 months after our last interaction, unless a business relationship follows.
• Newsletter subscriptions: until you unsubscribe; we then keep a suppression record so we do not email you again.
• Website logs: up to 90 days, unless needed to investigate a security incident.
• Job applications: up to 12 months after the role is filled, unless you ask us to delete them sooner.

10Security

We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit and at rest, role-based access controls, multi-factor authentication, logging and monitoring, and regular security reviews led by our Chief Security Officer.

No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as required by law.

11Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and obtain a copy.
• Correct inaccurate or incomplete data.
• Have your data erased.
• Restrict or object to certain processing, including direct marketing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting earlier processing.
• Nominate another person to exercise your rights in the event of death or incapacity (India).
• Complain to a data protection authority, such as the Data Protection Board of India or your local EU/UK regulator.

To exercise these rights, email privacy@zebbi.online. We will respond within 30 days, and may need to verify your identity first. Every newsletter includes a one-click unsubscribe link.

12Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

13Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. If we make material changes, we will highlight them on this page and, where appropriate, notify subscribers by email.

14Contact and Grievance Officer

Questions, requests or complaints about this policy or our handling of personal data can be sent to:

We aim to acknowledge grievances within 48 hours and resolve them within 30 days.