Privacy Policy
The short version
ZonGrow is a cloud ERP for online sellers. We collect the data we need to run the service — your account, your orders, your inventory, your customer's order data (so we can ship to them) — and we never sell it. You can export or delete it anytime. We use industry-standard encryption and access controls. Our parent company is Experts InfoTech (Pvt) Ltd. in Faisalabad, Pakistan.
1. Who we are
ZonGrow is a product of Experts InfoTech (Pvt) Ltd. ("Experts", "we", "us"), a company registered in Pakistan, with offices at H-19, Block-E, Millat Town, Faisalabad, Pakistan and 7 Derby Street, Manchester M8 8QE, UK.
If you have any questions about this policy, email info@expertspk.com.
2. What data we collect
a) Account & billing
- Your name, email, phone, company name
- Billing address, tax ID, payment-method token (handled by our PCI-compliant payment processor — we never store your full card number)
- Plan & subscription history
b) Operational data (the data you put into ZonGrow)
- Products, SKUs, prices, inventory, warehouses, vendors
- Orders, customers, shipping addresses, tracking numbers
- POS transactions, returns, refunds
- Production / BOM data if you use production workflows
- Custom templates, reports, dashboards
c) Customer data (your customers, not yours)
When you process an order, you give us your customer's name, phone, email and address so we can ship to them, send them order updates (SMS/WhatsApp/email/IVR), and handle returns. We use this data only to provide the service to you.
d) Technical data
- IP address, user agent, browser, device type
- Pages visited, features used, error logs
- Cookies (essential for login, optional for analytics — see §7)
3. How we use your data
- To provide, maintain and improve ZonGrow
- To process payments and prevent fraud
- To send you service emails (outages, security, important product changes)
- To respond to your support requests
- To send operational communications to your customers (order confirmations, dispatch, delivery) — as configured by you
- To comply with applicable law and enforce our terms
We never sell your data. We never use your data to train third-party AI models. We do not share it with advertisers.
4. How we share data
We share data only with the subprocessors needed to run ZonGrow:
- Couriers (TCS, Leopard, PostEx, BlueEx, DHL, FedEx, UPS, Aramex etc.) — to book shipments, print labels, track parcels, and schedule returns
- Marketplaces & stores (Shopify, WooCommerce, Daraz, Amazon, etc.) — to sync products, orders, inventory
- Communication providers (WhatsApp Business API, SMS gateways, IVR vendors) — to send the order confirmations you've configured
- Payment processor (Stripe / Paddle / local PSP) — for subscription billing
- Cloud infrastructure (AWS / DigitalOcean / regional providers) — to host the platform
- Email & analytics — for transactional email and (optional) product analytics
We require all subprocessors to sign a data-processing agreement and follow equivalent security standards. A current list is available on request.
5. Data storage, retention & location
Data is stored in encrypted cloud databases hosted on AWS or equivalent regional providers. By default, data is stored in the EU or US; Enterprise customers can request PK, UAE, or on-prem deployments.
We retain your operational data for the life of your account. If you cancel, we keep a backup for 30 days in case of accidental closure, then permanently delete. Anonymized, aggregated analytics may be retained indefinitely.
6. Your rights
You can, at any time:
- Export all your data from the dashboard (Excel, CSV, JSON)
- Correct any data via the dashboard or by emailing us
- Delete your account and all data — request from info@expertspk.com
- Opt out of optional product analytics
For customers in the EU/UK, the data controller is Experts InfoTech (Pvt) Ltd. and our representative for GDPR purposes is reachable at the email above. You have the right to lodge a complaint with your local supervisory authority.
7. Cookies
We use only essential cookies (session, CSRF token, login). We do not use third-party advertising or tracking cookies. We may use a privacy-respecting product-analytics tool (e.g. Plausible or self-hosted) that does not set persistent identifiers — you can opt out from your account settings.
8. Security
- All data in transit is encrypted with TLS 1.2+
- All data at rest is encrypted with AES-256
- Daily backups, stored encrypted, in a separate region
- Two-factor authentication available for every account
- Role-based access, audit logs, and SSO for Enterprise
- Regular penetration tests and vulnerability scans
9. Children's data
ZonGrow is a B2B service. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy. If the changes are material, we'll email you at least 30 days in advance. The current version is always at zongrow.com/privacy.html.
11. Contact
Questions, complaints, data requests: info@expertspk.com · +92 321 669 4784 · H-19, Block-E, Millat Town, Faisalabad, Pakistan.