Skip to content
Zavtro

Privacy policy

Last updated 1 June 2026

This policy explains what we collect, why we collect it, and the choices you have. It applies to our website, the customer portal and any service we deliver.

On this page

  1. 1. Who we are
  2. 2. What we collect
  3. 3. How we use it
  4. 4. Legal basis
  5. 5. Sharing and processors
  6. 6. Where data is stored
  7. 7. How long we keep it
  8. 8. Your rights
  9. 9. Security
  10. 10. Changes to this policy
  11. 11. Grievance officer

1. Who we are

ZAVTRO INFOTECH is the data controller for personal data processed through our website and customer portal. Our registered office is at Plot No 1052, Fakirabad, Kendrapara, Odisha, India.

For any privacy question, or to exercise a right described below, write to support@zavtro.co.in.

2. What we collect

We collect only what we need to deliver a service or answer an enquiry.

  • Contact details you give us — name, email, phone, company and, if you choose to provide it, your GSTIN
  • Billing information — address and payment metadata, never full card numbers
  • Service data — domains, hosting accounts and project records tied to your account
  • Technical data — IP address, browser and device type, captured in security logs
  • Usage data — which pages are visited, counted on our own servers without cookies. Visitors are counted using a value derived from your address and browser that changes every day, so it cannot be used to recognise you tomorrow or to build a profile. We do not store your address alongside it, and we honour Do Not Track and Global Privacy Control by recording nothing at all

3. How we use it

We use personal data to provide the services you have bought, to invoice you, to respond to support requests and to meet statutory record-keeping obligations.

We do not sell personal data, and we do not use customer data to train third-party models.

4. Legal basis

We process data to perform our contract with you, to comply with legal obligations, and where you have given consent — for example marketing email, which you can withdraw at any time.

5. Sharing and processors

We share data only with processors needed to run the service: payment gateways, email delivery providers, cloud infrastructure and analytics, each under a data processing agreement.

  • Payment gateways — PhonePe, Razorpay, Cashfree, Stripe
  • Email delivery — Brevo and Amazon SES
  • Infrastructure — AWS and Cloudflare
  • Analytics — none. Visitor numbers are counted by our own servers and are not sent anywhere

6. Where data is stored

Customer data is stored in the Mumbai (ap-south-1) region by default so it stays in India. Alternative regions are available on request for customers with different residency requirements.

7. How long we keep it

Account and billing records are retained for eight years to meet Indian tax and company law requirements. Support tickets are kept for three years. Security logs are kept for twelve months.

8. Your rights

You can ask us to do any of the following, and we will respond within 30 days.

  • Access a copy of the personal data we hold about you
  • Correct anything inaccurate
  • Delete data we no longer have a legal basis to keep
  • Export your data in a portable format
  • Withdraw consent for marketing or analytics

9. Security

We use encryption in transit and at rest, role-based access control, mandatory two-factor authentication for staff with production access, and logged administrative actions.

10. Changes to this policy

Material changes are announced by email to account holders at least 14 days before taking effect. The date at the top of this page always reflects the current version.

Grievance officer

If you have a question or a complaint about how we handle your personal data — including a request we have refused, delayed or handled badly — this is who to contact. You do not need to use a particular form of words.

Officer
Grievance Officer
Address
ZAVTRO INFOTECH, Plot No 1052, Fakirabad, Kendrapara, Odisha 754211, India
Hours
Monday to Friday, 10:00–18:00 IST, excluding public holidays

We acknowledge every grievance within 72 hours and aim to resolve it within 30 days. If we need longer, we will tell you why and when to expect an answer.

If you are not satisfied with our response, or we do not respond in time, you may complain to the Data Protection Board of India. The Act asks that you raise the matter with us first, which is what this page is for.