Legal
Privacy Policy
Last updated: May 15, 2026
Information we collect
ZoroBiz stores company details, administrator details, employee records, attendance logs, GPS coordinates, selfie verification images, customer records, vendor records, quotations, invoices, purchase orders, inventory records, uploaded documents, support requests, and payment confirmation details submitted by users.
Employee location and selfie data
GPS coordinates and selfie images are collected only when an employee uses attendance features that require them. Company administrators are responsible for telling employees how attendance verification works and for using location data only for legitimate business attendance and workforce management purposes.
How we use information
We use information to provide account registration, authentication, attendance, site management, invoicing, inventory, HRM, reporting, subscription management, customer support, security monitoring, and service improvement.
Company data ownership
Customer companies remain responsible for the business records they enter into ZoroBiz, including employee data, payroll-related fields, invoices, tax details, customer records, and uploaded documents.
Data access
Company administrators can access data for their own company. Employees can access only the employee features assigned to them. Platform administrators may access account data only for support, security, billing, legal compliance, abuse prevention, or operational maintenance.
Storage and security
ZoroBiz uses Supabase authentication, database, and storage services. Access is restricted with authentication, role-based application logic, and tenant isolation policies designed to keep one company from reading another company’s data. No system can be guaranteed perfectly secure, so customers should use strong passwords and limit admin access.
Service providers
ZoroBiz may use infrastructure, authentication, hosting, email, chat, analytics, or support providers to operate the service. These providers process data only as needed to deliver the service.
Retention
Business records are retained while an account is active and may be retained after closure where needed for legal, accounting, backup, security, or dispute-resolution purposes. Customers may request deletion or export review through support.
International use
ZoroBiz is positioned for GCC businesses. Data may be processed using cloud infrastructure or service providers that operate outside the customer’s country. Customers are responsible for confirming their own industry-specific data residency or regulatory requirements before using the service.
Contact
For privacy questions, access requests, deletion requests, or data handling questions, contact support@zorobiz.online.