Privacy Policy

Privacy Policy

How Guzloo collects, uses, stores and protects personal data, and the rights you have under the Digital Personal Data Protection Act, 2023.

Last updated 6 October 2026

1. Who is responsible

This policy is issued by [LEGAL ENTITY NAME], a company registered in India (CIN [CIN], GSTIN [GSTIN]) with its registered office at [REGISTERED ADDRESS, CITY, STATE, PIN] ("Guzloo", "we", "us"). For data that an organisation puts into Guzloo about its own people and customers, the organisation decides why and how that data is used and we process it on its behalf.

2. What we collect

  • Account data: your name, phone number, optional email and recovery details, profile and preferences.
  • Organisation data: organisation name and address, the people in it and their roles, and the bill-to details (legal name, address, GSTIN) used on invoices.
  • Content: what you and your organisation create in the products: messages, files, forms and answers, courses, tickets, HR and payroll records.
  • Payment data: amounts, invoices and payment status. Card numbers and bank credentials are handled by our payment partners and never stored by us.
  • Usage and security data: sign-ins, devices, IP addresses (stored only as a hash for rate limiting), and an audit log of changes.

3. Why we use it

  • To provide the services, sign you in and keep your account secure.
  • To bill your organisation and meet tax and accounting obligations.
  • To support you and tell you about changes to the services or these policies.
  • To prevent fraud and abuse and to meet legal obligations.

We do not sell personal data, and we do not use your organisation's content to advertise to you or to anyone else.

4. Consent and your choices

Where we rely on your consent, you can withdraw it at any time in your account settings or by writing to the Grievance Officer; withdrawal does not affect processing already done.

5. Where it is stored and how it is protected

Guzloo runs on Amazon Web Services in the Mumbai region (India). Personal fields are encrypted with AES-256-GCM keys from our own key service; sign-in uses one-time codes; and sensitive actions ask for a fresh code. Access by our staff is limited to what their role needs and is logged.

6. Who we share it with

We share personal data only with service providers that help us run Guzloo, under contract and only for that purpose: cloud hosting (Amazon Web Services), SMS delivery for one-time codes, and payment partners for collecting payments. We disclose data to authorities only where the law requires.

7. How long we keep it

We keep personal data for as long as your account or organisation is active, and then for up to 30 days to allow export, after which it is deleted, except records we must keep by law (such as tax invoices, kept for the period the GST law requires) and security logs kept for up to 400 days.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask for a summary of the personal data we process about you, ask us to correct, complete, update or erase it, nominate someone to exercise your rights if you die or become unable to, and have your grievances addressed. Many of these you can do yourself in your account settings; for the rest, write to the Grievance Officer below. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

9. Children

Where an organisation admits a member under 18, it must obtain verifiable consent from a parent or guardian. We do not track or advertise to children.

10. Cookies

This website sets no cookies and uses no trackers; it remembers your light or dark theme choice in your browser only. The Guzloo app uses only the storage it needs to keep you signed in.

11. Changes

We will post any change to this policy here with its date and tell account holders about material changes before they apply.

Grievance Officer

Under the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

Name
[GRIEVANCE OFFICER NAME]
Email
[GRIEVANCE EMAIL]
Address
[LEGAL ENTITY NAME], [REGISTERED ADDRESS, CITY, STATE, PIN]
Hours
Monday to Saturday, 10:00 to 18:00 IST, except national holidays

We acknowledge a grievance within 24 hours and resolve it within 15 days of receiving it.