Legal · Privacy
Privacy notice.
This notice covers this website only. Product data (for example Scrabyt clinical records) is covered by the agreement and notice for that product.
Draft for legal review before launch · last updated 28 September 2026
Who we are
ZAVOEN (“we”) is the data fiduciary (under India’s Digital Personal Data Protection Act, 2023) and controller (under the GDPR) for personal data collected on this website. Contact: hello@zavoen.com.
What we collect, and why
- Contact, demo and waitlist forms: name, email, organisation, organisation type, product interest, your message, the campaign tags in the link you followed (UTM), and your consent. We use these only to reply to you and, for the waitlist, to write once when early access opens. Legal basis: your consent.
- Essential preferences on your device: your choices for sound, Lite mode, paused motion and privacy, stored in your browser’s local storage. These never leave your device.
- Visit counts, only if you allow them: the page path, an event name and the referring website’s domain, counted per day. No cookies, no IP address, no device fingerprint and no identifiers are stored.
- Security: to prevent abuse of our forms we check requests with Cloudflare Turnstile and apply rate limits keyed to a one-way hash of your IP address, which we do not store with your submission.
Who processes it
Our hosting provider, our database provider, Upstash (rate limiting), Cloudflare (Turnstile) and Resend (email delivery). Each processes data only on our instructions. [PLACEHOLDER: list regions and transfer safeguards once providers are confirmed.]
How long we keep it
Form submissions: up to 24 months after our last conversation, then deleted. Daily visit counts: kept in aggregate. [PLACEHOLDER: confirm retention periods.]
Your rights
You can ask to access, correct or erase your data, withdraw consent at any time, and nominate someone to exercise your rights. Under the GDPR you may also object, restrict processing, ask for portability and complain to your supervisory authority; under the DPDP Act you may seek grievance redressal and approach the Data Protection Board of India. Write to hello@zavoen.com.
Grievance officer
[PLACEHOLDER: name, designation and contact of the grievance officer / DPO.]