Privacy Policy

This Privacy Policy explains how Zoldesk (“Zoldesk,” “we,” “us”) collects, uses, and safeguards information when you visit our website or use our People, Payroll, Expenses, and HR products (the “Services”). We are an India-based company and act as a data fiduciary in respect of the personal data we determine the purpose and means of processing.

We designed Zoldesk to be private by default. We never sell your personal data, and we process customer data only to provide and improve the Services.

• Account data — name, work email, company, and role you provide when you sign up or request a demo.
• Customer content — the employee, payroll, and expense records you and your team store in the Services.
• Usage data — device, browser, pages viewed, and feature interactions, collected to keep the Services secure and reliable.
• Payment data — billing details processed by our payment partners; we do not store full card numbers on our systems.
• Communications — messages you send to support, sales, or via forms on this site.

• Provide, maintain, and improve the Services.
• Authenticate users and protect against fraud and abuse.
• Respond to your requests and provide customer support.
• Send service updates and, where permitted, relevant product news (you can opt out anytime).
• Comply with legal obligations and enforce our agreements.

We share data only with sub-processors that help us run the Services (e.g. cloud hosting, analytics), under contracts that require equivalent protection. We may disclose information when required by law or to protect the rights and safety of Zoldesk, our customers, or the public.

We do not sell or rent personal information to third parties.

Customer data is encrypted in transit and at rest. We apply industry-standard security controls, enforce least-privilege access, and continuously monitor our infrastructure. No method of transmission is 100% secure, but we work hard to protect your information and will notify you and the relevant authorities of any material personal-data breach as required by law.

Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) you may request access to, correction of, completion of, updating of, or erasure of your personal data, nominate another individual to exercise your rights, and withdraw any consent you have given. You may also raise a grievance with us (see “Grievance Officer” below).

To exercise these rights, email hello@zoldesk.com. We respond within the timelines required by applicable law.

We retain account and customer data for as long as your account is active and as needed to provide the Services. After termination, customer content is deleted within 90 days unless a longer period is required by law or agreed in your contract.

Zoldesk and our sub-processors may store and process personal data on servers located in India or in other countries. Where data is transferred outside India, we do so in accordance with the DPDP Act and put contractual and technical safeguards in place to ensure your information remains protected.

We use essential cookies to keep you signed in and a small number of analytics cookies to understand how the site is used. You can control cookies through your browser settings; disabling essential cookies may affect site functionality.

We may update this policy from time to time. Material changes will be posted on this page with a revised “Last updated” date, and where appropriate we will notify you by email.

In accordance with the DPDP Act, you can reach our Grievance Officer for any concern about how your personal data is handled at hello@zoldesk.com or by writing to Zoldesk at WeWork Prestige Atlanta, Koramangala, Bengaluru, Karnataka 560095, India. We will acknowledge and address your grievance within the timelines prescribed by law.

Questions about this policy? Email hello@zoldesk.com or write to us at WeWork Prestige Atlanta, Koramangala, Bengaluru, Karnataka 560095, India.