Legal
Privacy Policy
Last updated: 19 May 2026
Who we are
Zakro is a manufacturing operations platform operated by Orosfort Private Limited (CIN: U36996TN2022PTC156746), a company incorporated in Chennai, India. Registered address: No. 1603, Floor 16, Emerald, Godrej Azure, Padur, Rajiv Gandhi Salai (OMR), Chennai, Tamil Nadu — 603103, India.
This Privacy Policy explains how we collect, use, store, and protect information about you when you use Zakro at zakro.io or app.zakro.io.
What we collect
Account information — your name, email address, phone number, and company name when you register.
Business data — the operational data you enter into Zakro: clients, products, work orders, invoices, inventory, staff records, and related content. This data belongs to you.
Usage data — pages visited, features used, session duration, browser type, and IP address. We use this to improve the product.
Payment information — billing is handled by our third-party payment gateway. We do not store your card details. The payment processor's privacy policy governs how they handle payment data.
Communication — if you contact us via email or WhatsApp, we retain those messages to respond and improve support.
How we use your information
To provide, operate, and improve the Zakro platform.
To send transactional emails — account confirmation, password reset, invoices, and payment receipts.
To send product update emails. You can unsubscribe at any time.
To respond to support requests.
To detect and prevent fraud, abuse, or security incidents.
We do not sell your data to third parties. We do not use your business data to train AI models or for advertising.
Payment security
All subscription payments are processed by our third-party payment gateway, which is PCI DSS Level 1 certified — the highest standard for payment card data security.
Zakro does not collect, store, transmit, or process raw card details (card numbers, CVV, expiry dates). When you enter payment information, it is submitted directly to our payment processor's secure environment and never passes through Zakro's servers.
Your card is stored as a secure token by the payment processor, not as raw card data. All payment transmissions are encrypted using TLS 1.2 or higher.
Data storage and security
Your data is stored on servers hosted in India or Singapore. We use industry-standard encryption in transit (TLS) and at rest.
Access to production data is restricted to authorised Zakro engineers and is logged. We conduct regular security reviews.
No system is perfectly secure. If we become aware of a breach that affects your data, we will notify you within 72 hours of becoming aware.
Data retention
We retain your account data for as long as your account is active. If you cancel, your data is retained for 90 days to allow for reactivation or export, then permanently deleted.
You can export all your data at any time from within the app. Your data belongs to you — we will never hold it hostage.
Third-party services
We use the following third-party services to operate Zakro:
- Third-party payment gateway — billing and payment processing
- WhatsApp Business API — dispatch and payment notifications (only sent when you trigger them from the app)
- Resend / email provider — transactional email delivery
- Cloudflare — CDN, DDoS protection, and DNS
These services may process your data as sub-processors under data processing agreements.
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and data
- Export your business data in CSV format
- Opt out of marketing communications
To exercise any of these rights, email us at privacy@zakro.io. We will respond within 30 days.
Cookies
Zakro uses session cookies to keep you logged in, and analytics cookies to understand how the product is used. We do not use advertising cookies or cross-site tracking.
You can disable cookies in your browser settings. Doing so will prevent you from logging in.
Children
Zakro is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. When we make significant changes, we will notify you by email and update the "Last updated" date above. Continued use of Zakro after changes take effect constitutes your acceptance of the updated policy.
Contact
Questions about this policy? Email us at privacy@zakro.io or write to us at:
Orosfort Private LimitedNo. 1603, Floor 16, Emerald
Godrej Azure, Padur, Rajiv Gandhi Salai (OMR)
Chennai, Tamil Nadu — 603103, India