Privacy Policy

ZillionMedia ("we", "us", "our") is a performance marketing agency headquartered at 12th Floor, Velocity Business Hub, LP Savani Road, Adajan, Surat 395009, Gujarat, India. This policy applies to zillionmedia.in and any workspace tools we operate at that domain.

Depending on how you interact with us, we may collect:

• Contact & enquiry data — name, email, phone, company, and message you submit through contact or lead forms.
• Onboarding data — business details, marketing history, KPIs, and creative preferences you submit via /onboarding.
• Account data — email, hashed password, and role (admin / member / worker) for users of our internal workspace.
• Attendance & task data — check-in/out timestamps, hours, and task activity for team members using the attendance module.
• Billing data — invoice details, GSTIN, and payment status for clients we invoice.
• Uploaded media — files (images, video, PDFs) you upload to the Vault or as task submissions.
• Technical data — IP address, device, browser, referrer, and pages visited (via server logs and privacy-respecting analytics).

• Respond to enquiries and deliver contracted services.
• Operate our team workspace (auth, attendance, project management, payroll).
• Issue invoices, quotations, and contracts.
• Improve our website, services, and security.
• Meet legal, tax, and accounting obligations under Indian law.

We process personal data under one or more of: your consent, performance of a contract with you, our legitimate business interests (running and securing our services), and compliance with legal obligations.

We use vetted service providers who process data on our behalf:

• Lovable Cloud (Supabase) — database, authentication, storage, and edge functions.
• Google OAuth — optional sign-in provider.
• Google Gemini (via Lovable AI Gateway) — AI-assisted PDF extraction for quotations.
• Hosting & CDN — content delivery for the website and uploaded media.
• Payment rails — UPI / bank transfer processed by your bank; we do not store card numbers.

Each provider processes data only for the purposes stated above.

We retain personal data only as long as needed for the purposes above or as required by law (typically 7 years for financial records under Indian tax law). Account and workspace data is deleted or anonymised on request unless retention is required by law.

You may request to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data (subject to legal retention).
• Withdraw consent for marketing communications at any time.

Email hello@zillionmedia.in to exercise any of these rights.

We use row-level security, encrypted transport (HTTPS), hashed passwords, and role-based access control. No system is 100% secure — please use a strong, unique password and notify us immediately if you suspect unauthorised access.

Our services are not intended for anyone under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on our homepage or via email where appropriate.