Privacy Policy

This Privacy Policy outlines the practices of Zlendo Technologies (referred to herein as 'Zlendo', 'we', 'us' or 'our'), encompassing its website and Zlendo Realty products. We are committed to protecting your Personal Data and respecting your privacy.

By using our Site and/or Services, you signify your acceptance of this Policy and Consent to the collection, storage, usage, and disclosure of your Personal Data as described herein. Where Applicable Laws require a specific lawful basis for processing such as consent, contractual necessity, legitimate interest, or legal obligation, Zlendo shall rely on the applicable lawful basis as set out in this Policy and in accordance with the laws of your jurisdiction.

1. We collect two types of information: Personal Data and Non-Personal Data.
2. Specific Data Categories Collected. We may collect the following data categories from Users, especially during registration, inquiries, or website usage:

3. Purposes for collecting data. We use the collected information for the following explicit purposes, based on legal grounds such as contractual necessity, legitimate interests, or your Consent. The specific lawful basis relied upon for each processing purpose (where required under GDPR, UK GDPR, or analogous laws) is indicated below:
   1. To Provide Services and Support: To create and manage your account, deliver content, respond to your customer service requests and support needs, and communicate with you about the products and Services you are using.
   2. To Improve and Personalize Experience: To personalize user experience, monitor trends, understand how users use our platforms, improve our products/Services, and develop new features for lawful basis and legitimate interest.
   3. For Marketing and Promotion: To send periodic emails or notifications about company news, updates, related product/Service information, promotions, contests or events (unless you opt-out).
   4. For Security and Compliance: To administer and protect our business, prevent fraud, troubleshoot technical problems, enforce our terms, and comply with legal or regulatory obligations.
   5. For Business Operations: To process payments, administer activities on our behalf and to enable communication between Users and Service Providers when Services are offered through the Platform.
   6. Optimization: To apply AI algorithms to create optimized, functional, or inspired room layouts.
   7. Integration: To facilitate API integrations, allowing other platforms to plug Zlendo’s costing and design engines into their own products.
   8. Use of Uploaded Floor Plans for Training Purposes: Floor plans and design inputs uploaded by Users to Zlendo Realty may be used by Zlendo for internal research, analytics, and training of its systems, including improvement and refinement of design, estimation, and AI-assisted functionalities. Such use shall be limited to enhancing platform performance and capabilities and shall be undertaken in accordance with this Privacy Policy and Applicable Laws. Zlendo shall not use such floor plans to identify individual Users and shall implement reasonable measures to ensure confidentiality and data security while using such data for training purposes. Where required under Applicable Laws, Zlendo shall anonymise or pseudonymise such data in accordance with applicable anonymisation standards before use for AI training.

We do not sell, trade, or rent your Personal Data to others. We share your information only in the ways described below and only with parties who adhere to appropriate confidentiality and security measures:

1. Internal Sharing: We may share Personal Data with affiliates and other entities within the Zlendo group for purposes consistent with this Policy, such as technical operations and customer support.
2. Service Providers and Sub-Processors: We employ and contract with third-party service providers and sub-processors (e.g., hosting, payment processors, cloud infrastructure, analytics providers, email service providers) to perform certain tasks on our behalf. These third parties are authorized to use your Personal Data only as necessary to provide these services to us and must process the data based on our instructions. Where required under Applicable Laws, Zlendo enters into Data Processing Agreements with all such sub-processors, and a list of current sub-processors is available upon request. While we take reasonable steps to ensure compliance, third-party service providers and sub-processors may process data independently. We are not responsible for their security measures or data practices.
3. Third-party Links: We may provide links to third-party websites for your convenience and information. These websites may not be owned, controlled, or operated by us. We do not have control over how these third-party websites collect, use, share, or secure your Personal Data. We recommend reviewing their privacy policies before interacting with them.
4. Business Partners/Affiliates: We may share your data with Service Providers, business partners and affiliates to facilitate Service delivery. Subject to the Applicable Laws, Zlendo shall endeavour to identify the categories of third-party recipients and the items of Personal Data shared, as required. For marketing purposes, we may share generic aggregated demographic information not linked to any Personal Data with partners or advertisers.
5. Legal Requirements and Protection: We may disclose Personal Data if required to do so by Applicable Laws, regulation, legal process, governmental request, or court order. This includes investigation of potential violations, defending against legal claims, and protecting the rights, property, or safety of Zlendo, its users, or the public.
6. Business Transfers: In the event Zlendo becomes involved in a merger, acquisition, or sale of all or a portion of its assets, your Personal Data might be among the assets transferred. We will notify you via email or prominent notice if such a transfer occurs.
7. Cross Border Transfers: We may process your Personal Data outside India and may transfer your Personal Data to individual companies, affiliated companies or third parties in locations around the world for the purposes described in this Privacy Policy or under contractual obligations. We shall comply with our legal and regulatory obligations in relation to your Personal Data, including having a lawful basis for transferring Personal Data and putting appropriate safeguards in place to ensure an adequate level of protection for Personal Data. These countries may have different data protection laws, and your Personal Data may be accessed or disclosed to governmental, regulatory, or other authorities as required by local law or official processes. Zlendo’s primary data processing occurs in India.

To the extent mandated by law, by accessing or using Zlendo’s Services, you provide your Consent for the collection and processing of your Personal Data, subject to the following conditions:

1. Your Consent shall be free, informed, specific, unconditional, and unambiguous, and shall be obtained through a clear affirmative action;
2. Your Personal Data shall only be collected and processed for the purposes specified at the time of collection and as described in this Privacy Policy;
3. Where required under Applicable Laws, we will obtain your Consent through appropriate electronic or written means or via governing contracts;
4. You have the right to withdraw your Consent at any time. Such withdrawal shall not affect the legality of any processing carried out prior to the withdrawal however it may impact our ability to continue providing you Services.
5. You may withdraw your Consent or raise any concerns regarding Your Personal Data by contacting Our DPO using the contact details provided in this Privacy Policy.
6. Where Zlendo relies on legitimate interests as the lawful basis for processing (under GDPR, UK GDPR, or analogous laws), Zlendo has conducted a balancing assessment to ensure that its interests do not override your fundamental rights and freedoms.
7. Zlendo shall not use Personal Data beyond the specified purpose of utilisation without obtaining prior consent, except as permitted by law.

1. Data Storage: Zlendo primarily stores your Personal Data at servers located in India. Where operationally necessary, data may also be processed in other jurisdictions, subject to the safeguards described in Section 5(a)(vii) above. Information of Users are retained for meeting the servicing requirements, unless such Consent is withdrawn by you. If future transfers outside India are contemplated, we will comply with DPDP Act provisions, ensuring adequate protection, contractual safeguards, or your explicit consent.
2. Data Security: We implement, enforce, and maintain security policies and appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your Personal Data, username, password, transaction information, and data stored on our Site. Security measures include:
   • Encryption: Data exchange happens over secured communication channels and is encrypted.
   • Access Control: We restrict access to Personal Data to employees, contractors, and agents on a need-to-know basis.
   • User Responsibility: You are responsible for maintaining the security of your password or other forms of authentication involved in accessing secured resources.
3. Data Retention: We retain your personal information for as long as it is required to fulfill the purposes stated in this Policy, or as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:
   • Account and transaction data: duration of the account plus 3 years (or such longer period as required by applicable tax or commercial laws);
   • Marketing data: until you withdraw consent or opt out;
   • Technical/usage data (logs, cookies): up to 24 months from collection;
   • Design input data used for AI training: retained in anonymised form only, for as long as reasonably necessary for research and improvement purposes.
   These periods are subject to variation where a longer retention period is mandated by Applicable Laws. General Fiduciary data is retained for a time period to achieve the purpose for which it was collected or as required by the Applicable Laws.
4. Secure Disposal: Personal data that is no longer required is securely deleted or otherwise disposed of to prevent any possibility of recovery or misuse. Where mandated under applicable law, Zlendo shall inform the User whose data is being erased prior to such deletion or disposal.

To the extent mandated by law:

1. As a User, You have the right to access, correct, update or delete Your Personal Data held by Zlendo (subject to exceptions, such as legal obligations).
2. You may withdraw Your Consent for data processing at any time, except where retention is required by law.
3. Zlendo recognizes the right to nominate. This right allows an individual who is under incapacity to designate a person (a nominee) to exercise the data subject rights available to them under this Privacy Policy. Zlendo reserves the right to verify and validate any nominations submitted under this right before acting upon them.
4. You also have the right to raise grievances about our handling of Your Personal Data.
5. To exercise any of these rights or submit a complaint, please contact our Data Protection Officer at: dataprotection@zlendorealty.com.
6. Additional rights available under specific jurisdictions (to the extent applicable to you):
   1. EEA/UK Users (GDPR / UK GDPR): You have the right to: (a) data portability (receive your data in a structured, commonly used, machine-readable format); (b) restriction of processing; (c) object to processing based on legitimate interests or for direct marketing; and (d) lodge a complaint with a supervisory authority in the EU/EEA Member State or the UK Information Commissioner’s Office (ICO), as applicable. Zlendo shall respond to data subject requests within 30 days (extendable by a further 60 days for complex requests, with notice).
   2. US Users (California / CCPA-CPRA and analogous state laws): You have the right to: (a) know what Personal Data is collected, used, shared, or sold; (b) request deletion; (c) opt out of the sale or sharing of Personal Data; (d) non-discrimination for exercising your rights. Zlendo does not sell or share (as defined by the CCPA) your Personal Data. To submit a verifiable consumer request, contact us using the details in Section 13.
   3. Japanese Users (APPI): You have the right to request disclosure, correction, addition, deletion, or cessation of use of your Personal Data, or cessation of provision to third parties. Requests may be submitted to the DPO.
   4. Singapore Users (PDPA): You have the right to access and correct your Personal Data, and to withdraw consent for processing. Zlendo shall respond within 30 days.
   5. Malaysian Users (PDPA 2010): You have the right to access and correct your Personal Data and to withdraw consent for processing. A fee may apply for access requests as permitted under the PDPA 2010.
   6. Australian Users (Privacy Act 1988): You have the right to access and correct your Personal Data. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response.
   7. UAE Users (Federal Decree-Law No. 45 of 2021): You have the right to access, rectify, erase, and restrict processing of your Personal Data in accordance with the UAE Data Protection Law.

In the event that Zlendo becomes aware of a Personal Data Breach, we will act immediately to investigate the incident.

1. Notification to Users: If Zlendo, acting as the Data Fiduciary, learns of a Personal Data Breach, Zlendo shall, subject to Applicable Laws and instructions from any agency or authority, promptly notify affected Users. If required by Applicable Laws, Zlendo shall notify affected data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
2. Remedial Measures and Compliance: Zlendo will take prompt remedial measures, including reasonable measures to restore the security of the Personal Data and limit unauthorized or illegal dissemination of the data. Zlendo will also notify relevant regulatory or government authorities, where required by Applicable Law, within such period of becoming aware of the breach as may be mandated under such law. This includes, as applicable, supervisory authorities in the EEA/UK, the PPC in Japan, the PDPC in Singapore, the OAIC in Australia, and other applicable regulators.

1. This Privacy Policy shall be governed by, construed, and enforced in accordance with the laws of India.
2. In case of any dispute or difference either in interpretation or otherwise, of any terms of these Terms between the parties hereto, the parties shall attempt to resolve the same through discussion. In case the parties fail to arrive at an amiable solution through discussion, the same shall be referred to Arbitration at the request of either Party in writing, in accordance with the provisions of Arbitration and Conciliation Act, 1996, as amended from time to time. The arbitration shall be conducted by a sole Arbitrator to be mutually appointed between the Parties and decision of the arbitrator shall be final and binding on the parties hereto. The seat and venue of arbitration shall be Madurai, Tamil Nadu, India. The rights and remedies provided in these Terms are cumulative and are in addition to and not in substitution for any other rights and remedies available at law or in equity.

The following addenda apply to Users in the specified jurisdictions and supplement (but do not replace) the main body of this Privacy Policy. In the event of conflict between the main body and a jurisdiction-specific addendum, the addendum shall prevail to the extent of the conflict for Users in that jurisdiction.

1. EEA/UK Addendum:
   1. Zlendo processes Personal Data of EEA/UK users in reliance on one or more of the lawful bases set out under GDPR / UK GDPR, as specified in Section 3(c) above.
   2. Zlendo does not engage in automated individual decision-making, including profiling, that produces legal effects or similarly significant effects on Users, within the meaning of GDPR. The AI-generated design recommendations and cost estimates provided by Zlendo Realty are assistive outputs only and do not constitute automated decision-making.
   3. Where Zlendo processes data for direct marketing purposes based on legitimate interest, EEA/UK users have the absolute right to object at any time, and Zlendo shall cease such processing upon receipt of the objection.
2. United States Addendum (California and analogous state laws):
   1. Categories of Personal Information collected, the business or commercial purposes for collection, and the categories of third parties to whom information is disclosed are set out in Sections 3 and 5 above.
   2. Zlendo does not ‘sell’ or ‘share’ Personal Information as those terms are defined under the CCPA/CPRA.
   3. Zlendo does not use or disclose ‘sensitive personal information’ for purposes other than those permitted under the CCPA/CPRA.
   4. Zlendo retains each category of Personal Information for the periods set out in Section 8(c).

Last Updated: April 2026