Version v1.1 · Last Updated: 1 October 2026 · Effective for all Zenvo Technology client accounts, e-book purchases and website enquiries.
1. Identity of the Data Fiduciary
Zenvo Technology (“we”, “us”), Aamgola, Pankhatoli, Muzaffarpur, Bihar 842002, India, operates this website, the client dashboard and the e-book library. For the purposes of the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023), Zenvo Technology functions as the Data Fiduciary responsible for determining the purpose and means of processing personal data.
2. Categories of Personal Data Collected
We collect and process only the minimum necessary personal data required to fulfill our contracts and legal obligations:
Identity & Contact Data: Full name, corporate or personal email address, telephone number.
Enquiry Data: Name, email, and optionally phone number, business name and service of interest, plus your message, when you use our contact form. We use it only to reply to you, and delete it 12 months after our last update to it.
Billing & Statutory Tax Records: State of supply, optional corporate GSTIN, transaction identifier, SAC 9984 invoice records.
Reading Telemetry & Digital Watermark: Reading progress percentage, bookmarks, and dynamic forensic watermark stamps applied to downloaded PDFs to protect intellectual property.
Cookies & Analytics: Essential cookies keep you signed in, protect your account and remember your cookie choice. Only if you choose Accept All, Google Analytics also records the pages you visit, your device and browser type and your approximate location (city level), using _ga cookies.
Security Logs: When you use the site, our servers log your IP address, the pages requested, your browser type and sign-in events, to protect accounts and investigate attacks.
Consent Audit Trail: Immutable timestamp, IP address, and consent version at the moment of affirmative opt-in.
3. Specified Purposes of Processing
Your personal data is processed strictly for:
Provisioning your authenticated workspace and digital library in /dashboard/ebooks.
Generating legal, GST-compliant tax invoices under HSN/SAC Code 9984.
Generating dynamically watermarked vector PDFs for offline reading.
Replying to enquiries sent through our contact form.
Providing customer support and statutory communication.
Only with your consent: measuring which pages are useful (Google Analytics) and sending marketing emails. You can withdraw either at any time.
Note: We do not sell, rent, or trade your personal data to third-party data brokers or behavioral advertisers.
4. Where Your Data Is Stored
Your account, order and billing data are stored in our database on servers run by our hosting provider, and e-book files in Cloudflare R2 object storage, with access restricted to our systems. We never see or store your card, UPI or bank details: payments are processed by Razorpay, an RBI-authorised payment aggregator, which handles payment data under RBI rules.
To fix problems quickly, technical error reports (what went wrong, on which page, in which browser) are sent to Sentry, our error-monitoring provider, stored in the EU. We remove cookies, IP addresses, email addresses, phone numbers and form contents before anything is sent.
If you accept analytics, Google (Google Analytics) processes the analytics data described above, possibly on servers outside India. Our emails (sign-in codes, receipts, replies) are delivered through our email service provider.
5. How Long We Keep It
Account data: while your account is active. When you delete your account, your name, email, phone, company and GSTIN are erased or anonymised at once.
Orders, payments and invoices: kept for as long as Indian tax law requires, even after account deletion, but linked only to an anonymised record.
Contact-form enquiries: 12 months after our last update to them.
Security logs: 1 year, as Indian cyber-security and data-protection rules require, then deleted automatically.
Consent records: kept as proof of the consent you gave or withdrew.
Analytics: kept by Google under our Google Analytics retention setting; choosing Essential Only stops collection and deletes the cookies in your browser.
6. Your Rights under the DPDP Act
As a Data Principal, you possess statutory rights enforceable directly via your dashboard or by emailing our Grievance Officer:
Right to Access & Summary: Request a complete machine-readable copy (JSON export) of all personal data held about you.
Right to Correction: Update outdated corporate contact or tax information.
Right to Erasure (Right to be Forgotten): Request the permanent deletion of your account and personal identifiers, subject to statutory tax record retention obligations under Indian GST laws.
Right to Withdraw Consent: as easily as you gave it. Turn off marketing emails in your dashboard, and change analytics under Cookie settings in the site footer. Withdrawal does not affect processing already done.
Right to Nominate: name a person to exercise these rights for you in case of death or incapacity, by writing to our Grievance Officer.
Right to Grievance Redressal: Direct recourse to our Grievance Officer (below). If you are not satisfied with our response, you may complain to the Data Protection Board of India.
7. Children
Our services are for adults aged 18 or over. We do not knowingly collect personal data of anyone under 18. If you believe a child has given us their data, contact our Grievance Officer and we will delete it.
