Privacy policy

Effective Date: 2 November 2026

Who we are

Zootric is a platform where businesses get creative and technical work done, find useful products and buy ready-built websites. Two companies run it:

  • Zootric LLC, a limited liability company registered in Wyoming, United States, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. It serves clients outside India and runs zootric.com.
  • Zootric LLP, a limited liability partnership registered in Kerala, India (LLPIN ACM-6225), registered office at Atharamban House, Jubilee Nagar, 12th Bridge, Vythiri Tharuvana Road, Vythiri, Wayanad, Kerala 673576, India. It serves clients and talent in India and is the data fiduciary for personal data processed in India.

This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have. It covers zootric.com, app.zootric.com (the client and talent portals and our apps), originals.zootric.com, and the social publishing we do for clients.

1. What we collect

1.1 when you contact us or buy from us

The contact form, email and messages: your name, email, phone number, company, the kind of project and your message. Buying an Original: your name, email, business name, website and brief. Card details go straight to Stripe; we never see or store your card number.

1.2 clients

For you and the people you add to your company account: name, email, phone and WhatsApp number, role, sign-in details, and what you do in the portal (projects, messages, files, approvals, invoices, payments, signatures). For your company: name, billing contact, billing and mailing address, tax country and tax number.

1.3 talent and agencies

When you apply or join: name, email, phone and WhatsApp number, country, time zone, skills, experience, rates, portfolio and profile links, a short bio, and for an agency its name and team size. Once you work with us: the projects you are on, your work files, messages, attendance and leave if you use them, invoices and payments, and the payout details you enter (legal name, bank or payout account, tax details). Payout details are encrypted.

1.4 leads and outreach

We contact some businesses whose contact details are published on their own website or a public business listing. We keep the business name, the published email or phone, the website and our notes. Anyone can ask us to stop and to delete this, and we keep the address on a do-not-contact list so we never write again.

1.5 connected social accounts

When a client connects a Facebook Page, Instagram professional account, Threads profile, LinkedIn page or YouTube channel so we can publish for them, we store the access and refresh tokens (encrypted with AES-256-GCM), the platform's account identifiers, the public profile name, picture and link, the permissions granted, and a record of each post we publish. We never receive your social media password. Full details, and how to revoke access, are on our Data Deletion Instructions page.

1.6 devices, logs and the website

If you allow notifications in our apps or browser, we store a device token to send them. Our servers record technical logs and errors, which can include your account id or email when something goes wrong for you. On zootric.com we count visits without cookies and without storing your IP address. Our marketing pages may also use Google Analytics and the Meta pixel.

2. Why we use it

  • To deliver the work you engaged us for, run your account and the portals, and talk to you about it.
  • To match talent with projects, pay talent and keep payroll records.
  • To invoice, take payment and meet tax, accounting and company law.
  • To keep the platform secure, find and fix errors, and prevent fraud.
  • To reply to enquiries and, for businesses, to send a small number of outreach emails you can stop at any time.

We rely on your consent where we ask for it (you can withdraw it at any time, as easily as you gave it), on the contract with you, on legal obligations, and on our legitimate interest in running and securing the business. We do not sell personal data, do not use it to build advertising profiles, and do not train AI models on it. We use AI tools to help draft content and answer internal questions; access tokens and payout details are never sent to them.

3. Who we share it with

Only service providers that process it for us, on our instructions:

  • Supabase (database, sign-in and file storage), Vercel (hosting).
  • Google Workspace and Google Drive (email and project files).
  • Anthropic, OpenAI and Google Gemini (AI assistance), Replicate (image generation), Tavily (web research), ElevenLabs (voice).
  • Resend (email), Twilio and Meta WhatsApp (messages), Firebase and Apple (app notifications).
  • Stripe, Razorpay and Cashfree (payments), Mercury and our Indian bank (payouts).
  • Cal.com (booking calls), Google Analytics and Meta (website analytics and ad measurement on zootric.com). The social platforms you connect, only for the accounts you connect.

Within a project, your name and messages are visible to the other people on that project. We disclose data to authorities only when the law requires it. Some providers process data outside India, including in the United States; we use providers with appropriate safeguards.

4. How long we keep it

  • Your account and its data: while the account is open. When you delete it, everything below the law's minimum is erased.
  • Invoices, payment and payroll records and the legal name on them: as long as tax and company law requires (up to 8 years in India and 7 years in the United States).
  • Signed contracts: as long as contract and company law requires.
  • Error logs: 90 days. Server logs at our hosting provider: a short rolling period, then deleted automatically.
  • Enquiries and leads that do not become work: until you ask us to delete them, and we review them at least once a year.
  • Backups: our database backups are kept for 14 days and then deleted. Data you delete leaves the backups within that time.

5. Your rights

Wherever you live, you can ask us to:

  • tell you what personal data we hold about you and how we use it, and give you a copy;
  • correct or complete it;
  • delete it, and withdraw any consent you gave;
  • stop outreach to you.

Deleting your account. Clients and talent can do it themselves: in the portal or app, open Account and choose Request account deletion. Anyone can also email support@zootric.com. We confirm within 30 days. Deletion removes your profile, sign-in, files, payout details, notifications, devices, applications, leads and our internal records about you from every system we run, including our search index and logs. We keep only what the law requires (see section 4), and messages you wrote in shared project threads stay with your name removed, because they are also the other side's record.

In India you can also nominate another person to exercise these rights if you die or cannot act.

6. Data protection in india (DPDP act 2023)

For personal data processed in India, Zootric LLP is the data fiduciary under the Digital Personal Data Protection Act, 2023 and its Rules. You have the rights in section 5, and the right to have a grievance answered.

Grievance officer: Mubashir Abdulgafoor, Designated Partner, Zootric LLP, support@zootric.com. We reply within 7 days and resolve within 30 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India (www.dpb.gov.in). Please write to us first so we can put it right.

If you are in the European Union or the United Kingdom, the GDPR or UK GDPR also applies, and you can complain to your local data protection authority.

7. Security and breaches

  • Everything is served over HTTPS. Access tokens and payout details are encrypted at rest.
  • Each person sees only their own data and their own projects, enforced in the database itself, not only in the app. Staff access is limited to the people who need it.
  • Most files are private and opened through short-lived links.

If a breach affects your personal data, we will tell you without delay: what happened, what data, what it could mean for you, what we are doing about it and what you can do. Where Indian law applies we also report it to the Data Protection Board. No system is perfectly secure; if you think your account has been misused, email support@zootric.com straight away.

8. Children

Zootric is for businesses and professionals. We do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.

9. Changes

When we change this policy we update the effective date above, and we tell clients and talent directly about any change that matters.

10. Contact

Privacy questions, requests and complaints: support@zootric.com, subject Privacy. Everything else: hello@zootric.com.

See also our Terms & Conditions and our Data Deletion Instructions.