Privacy Policy

Roles and data categories

The owner-supplied business identity is Kshitiz Kaushal, sole proprietor trading as Brevo Technologies. Account/identity, business contact, enquiry/discovery, billing and support information have distinct purposes. SaaS business data may be processed for an organisation under its instructions; actual controller/processor or other legal roles depend on the purpose and contract. Supporting records, lawful processing roles and basis require final legal verification; the business identity is not an unanswered commercial decision.

Current and proposed processing

The frontend contains labelled illustrative data and local planning drafts. Activated customer authentication would process native identity, verification, session and security records; payment/booking/support functions must not be described as live before verification. The approved notice must map each real field, purpose and recipient, including website analytics and customer uploads.

Recipients and security

Review actual infrastructure, email, registrar, payment and support processors and locations before disclosure. Do not claim that no third parties are involved. Administrative/payment secrets and raw auth tokens must not enter browser JavaScript or diagnostic logs. No assertion of completed legal compliance is made.

Rights, retention and contact

Privacy, access, correction, export, closure and deletion requests may be sent to support@zoihost.com. Existing account holders should identify their account/service reference; staff create a ticket, verify identity and organisation authority proportionately, record the authorised decision and outcome, and target review within 30 days. Account creation is not required to exercise applicable rights. Optional marketing consent is separate from service communications. Services are for adults and authorised business representatives; suspected children’s data or mistaken collection should be reported for review. Lawful holds and necessary third-party/provider records are explained before limiting a request.

Commercial terms

The owner-supplied contracting identity is Kshitiz Kaushal, sole proprietor trading as Brevo Technologies, Plot No. 53, Ganesh Nagar Extension-2, Shakarpur, Delhi – 110092, India. Development and technical project communications: dev@zoihost.com. Sales and feedback: sales@zoihost.com. Complaints and grievances: support@zoihost.com. Telephone: +91 9891 380 346. Supporting business/tax records and any required grievance-officer appointment must be verified before publication or official tax invoicing. No NSF or other business identity or GSTIN is adopted.

Sky, Flow, OS and custom digital projects use accepted quotations and contracts, not arbitrary public fixed prices. Development milestones are 10% booking, 40% development advance before the agreed development stage, and 50% after explicit customer acceptance of the identified staging/demo deliverables and before handover. Opening a link, silence or a browser payment claim is not acceptance or verified payment. Final handover requires verified final payment. Separately agreed maintenance, hosting, domains, licences, third-party services, taxes and eligible consultation credits remain identifiable and are not silently folded into the development milestone base. These development percentages do not determine Domain/DIY or consultation charges.

For Sky, Flow, OS and custom digital projects cancelled before the 40% development advance is paid or adjusted, the cancellation fee is 5% of the accepted one-time development price, plus actual documented eligible costs and disclosed charges. Aggregate deductions must not exceed the lower of 10% of that accepted development price or the amount paid. The percentage base excludes taxes, annual/recurring services and separately itemised third-party services. No cost is counted twice, and deductions cannot exceed the amount paid. Actual eligible costs require evidence and are not an automatic minimum. Calculate directly in the immutable accepted quotation currency: INR for an INR quotation, USD for a USD quotation. Do not convert through a current exchange rate, relabel a currency, or substitute the current model/list price for the accepted development amount. Monetary rounding must not exceed the accepted cap or amount paid. After the development advance is paid or adjusted, the accepted contract and applicable mandatory remedies govern cancellation. Preserve remedies for failed or incorrect services, duplicate/incorrect charges and mandatory legal rights. This custom-project rule never applies to eligible Domain/DIY cancellations accepted within the full readiness-based 60-second window, which retain the approved eligible full refund. This percentage rule applies only to new quotations accepted with this policy version on or after 9 November 2026; earlier quotations, prices, accepted policy snapshots and receipts are not rewritten.

The consultation base fee is non-refundable for customer change-of-mind cancellation. After the consultation is completed, its eligible base fee may be credited once against a confirmed Sky, Flow or OS project within 90 days following that completion. The credit is separate from a refund and cannot be applied twice. One free reschedule is permitted with at least 24 hours’ notice before the appointment. Late cancellation or a customer no-show forfeits the fee. If Zoihost cannot deliver the consultation, the customer may choose a refund or rescheduling. Mandatory legal remedies, incorrect charges and duplicate-payment corrections are preserved. Applicable taxes and any separately disclosed, permitted gateway charges are treated separately; no automatic refund or recurring mandate is created.

Relevant ResellerClub customer/registrar agreements are available at https://store.resellerclub.com/legal-agreements and https://manage.resellerclub.com/servlet/ViewAgreementServlet?requestfor=registraragreement . The actual product, TLD, sponsoring registrar and agreement version must be identified and accepted before a provider purchase, renewal or transfer. Read-only inventory or a search does not place an order. Zoihost remains responsible for its own agreed obligations; upstream terms do not remove mandatory customer remedies. Provider purchases and automatic fulfilment are unavailable at this launch.

The proposed standard domestic GST rate is configurable and subject to verified tax identity and classification. International/export treatment must be independently established; Indian GST is not automatically charged to every overseas transaction. Tax invoices remain gated pending verification.

Approved refunds are targeted for Zoihost processing within 7–15 business days. Bank/payment-provider settlement time is separate; a cancellation, refund request or provider acknowledgement is not proof of a completed refund. This target does not delay a shorter mandatory legal obligation.

Service-specific application and safeguards

Current public processing includes server access/security logs, submitted domain queries and browser-local planning drafts. Account, booking, payment and support processing must be described only when activated. Identify each purpose, recipient and retention basis before collecting additional data. DPDP commencement is phased; this notice does not assert that every provision applied on 1 November 2026. Optional marketing consent remains separate.

Eligible Domain and DIY cancellation — owner-directed terms incorporated

Only a specifically approved Domain or DIY product that supports deferred provider fulfilment may use this workflow. No domain purchase or DIY provisioning is currently activated by this policy. Domain search does not reserve a name or create ownership. The final product, price, provider agreement and exact applicable policy versions must be disclosed and affirmatively accepted before payment.

After verified payment is durably linked to an eligible order, provider fulfilment is held. The server starts one fixed 60-second cancellation window only when the authenticated, rendered order interface first acknowledges readiness. Payment redirect time does not consume that window: payment verified at 16:00:00 and interface ready at 16:00:18 means the full 60 seconds starts at 16:00:18, not a 42-second remainder. A cancellation atomically accepted before the server deadline prevents provider submission. Refreshes, retries, other tabs and confirmation dialogs cannot restart or extend an already-started window. Cancellation is also available during the approved pre-window access hold. At or after the deadline, the guaranteed window has expired, subject to mandatory rights and actual provider state.

An eligible order successfully cancelled within that guaranteed window qualifies for a full refund of its order payment, without the custom-project fee, estimated costs or other deductions. Cancellation and refund completion are separate states. Zoihost verifies eligibility and the payment-provider refund result. Approved refunds are targeted for Zoihost processing within 7–15 business days; bank/payment-provider settlement is separate. This target does not postpone a shorter mandatory legal obligation.

After the guaranteed 60-second window expires, ordinary customer change-of-mind cancellation or refund is not offered for eligible third-party-backed Domain/DIY orders. This does not exclude remedies for failed or incorrect service, duplicate or incorrect charges, applicable provider obligations or mandatory legal rights. A third-party dependency does not waive Zoihost obligations. Eligibility and the actual product-specific upstream terms must be verified before sale.

After the waiting period, availability, registrant authority, selected domain/TLD and period, registry requirements, pricing and order authorisation must be revalidated as applicable. If the requested service cannot be supplied, no substitute may be ordered without separate authority. An uncertain upstream response requires reconciliation, not a speculative second registration. Provider timing after eligibility is not guaranteed to occur at exactly 60 seconds.

Before authenticated interface readiness, provider submission remains blocked for a maximum access hold of 10 minutes after verified payment. If readiness is not acknowledged before that hold expires, the order moves to manual review without automatic provider fulfilment. Reopening the expired hold does not start a new cancellation window. If readiness occurs before expiry, the full fixed 60-second server-authoritative window starts at that first valid readiness acknowledgement; redirect time is not deducted and refreshes cannot extend it. Runtime configuration, scheduler behaviour and outage handling must match these approved rules before activation.

The contracting business and current support/privacy/grievance contact are identified in the business/contact section of this version. No other business’s identity or GSTIN applies.

Deferred-order records and purposes

Eligible order records include customer/organisation ownership, verified payment references/timestamps, interface readiness, the fixed cancellation deadline, provider claim/reference, cancellation/refund state, policy acceptance and audit evidence. These support agreed fulfilment, cancellation, reconciliation and security, not optional marketing. Registrant/provider payloads stay server-side and go only to the relevant authorised provider. Such transactions remain unavailable until their actual provider/payment contracts are verified.

Customer support and grievance intake

Support, privacy/deletion and grievance intake: Accounts Officer, support@zoihost.com, Monday–Friday, 10:00–17:00 IST. Requests are ticketed, identity/organisation authority is verified where necessary, an authorised decision is recorded and the outcome is communicated. There is no automatic 24/7 service or universal response-time SLA.

Current tax collection instruction

The owner states that Zoihost currently collects no GST, relying on an initial registration-threshold position. This records the current business instruction, not independent confirmation of registration eligibility, exemption of every product or zero-rating of every international transaction. No GST amount or GST tax invoice may be represented as collected under an unverified registration. Any future GST collection requires verified registration/status, applicable transaction classification and approved configuration. International relief applies only to qualifying documented exports and applicable procedures; a foreign billing address alone is not sufficient. Existing orders retain their agreed lawful tax snapshot.

Separately purchased customer backup service

Customer backup services require a separately purchased and accepted plan identifying covered data, retention, responsibility and tested recovery commitments. No customer backup coverage or recovery-time guarantee is inferred from website hosting, account creation or a domain order. This does not make Zoihost platform security, internal recovery safeguards, agreed processing duties or applicable legal obligations optional.

Explicit quotation decision record

Work requiring an approved quotation must not proceed while that quotation is pending or rejected. Record the authenticated authorised customer decision, quotation revision or snapshot hash, actor and timestamp. Viewing a quotation, silence, a pre-sales enquiry or a payment redirect is not approval. Material scope or price changes require the applicable new approval and preserved prior records.

Retention and privacy-request process

Retain active account/service data for the agreed service purposes. Review verified closure/deletion requests within 30 days. Security logs target 90 days unless an incident, dispute or lawful hold requires longer retention; financial records follow applicable statutory periods. Staff document the relevant record categories, decision, retention reason and disposal/outcome. Backup copies follow the purchased or applicable platform retention/rotation and lawful exceptions; a restore must not undo completed revocation or deletion instructions. No automatic deletion mechanism is claimed.

Current processing and recipients

The owner-operated WordPress Business Core backend is in India. Enquiries that do not become customers are reviewed for deletion/anonymisation after 12 months unless an active discussion, dispute or lawful hold requires retention. This is a ticketed review target, not an automatic deletion claim. Vercel hosts/delivers the frontend and handles the associated service/security metadata; its platform may process data outside India under its published terms and data-processing arrangements (https://vercel.com/legal/dpa and https://vercel.com/legal/sub-processors). The configured SMTP hosting provider and MailBaby outbound relay process necessary transactional email. For a linked registrar account or an authorised registrar operation, MilesWeb’s registrar gateway and the relevant ResellerClub/registrar provider process the necessary customer/domain data. Registrar inventory linking does not authorise marketing or a purchase. Razorpay is the intended payment provider but online payment collection is temporarily unavailable; no live payment or card data collection is activated by this notice.

Support and privacy requests are handled through support@zoihost.com with a ticket/reference, proportionate verification, authorised review/approval and a recorded outcome. Staff do not request passwords or recovery/MFA codes. Records required for a dispute, financial/legal retention, security incident or provider/domain obligation may need to be retained with a documented reason. No automatic account/database deletion or unverified recovery guarantee is represented as implemented.

Launch availability and version application

Online payments, automatic provider purchases/renewals and paid booking are temporarily unavailable. Customers may review scope, request quotations and use capabilities actually enabled for their account; nothing here activates a disabled integration. Where a capability is unavailable, Zoihost will say so rather than imply payment or fulfilment success.

The owner requested an effective date of 1 November 2026. This version was approved and published on or after 9 November 2026 and applies when accepted or otherwise lawfully applicable; it does not fabricate an earlier publication, acceptance, delivery or payment record, or retroactively replace a customer’s previously accepted version.