Privacy Policy
OZZO Technologies — OZZO web dashboard, OZZO SALES Android application and ozzo.co.in
Effective date: 27 September 2026 · Last updated: 27 September 2026
This Privacy Policy explains how OZZO Technologies (“OZZO”, “we”, “us”, “our”) collects, uses, discloses, retains and protects information in connection with the OZZO web dashboard, the OZZO SALES — Field Sales CRMAndroid application, and this website (together, the “Service”). It applies to every product and page that links to it.
Who this policy is for
OZZO is a business-to-businessSales Force Automation and CRM platform. It is bought by a company or organisation (the “Organisation”) and provided by that Organisation to its own employees, field representatives, managers and administrators (“Users”).
This distinction runs through the whole policy, so it is worth stating plainly:
- Where we decide why and how information is handled — for example, an enquiry you send us through this website — we are the controller of that information.
- Where your Organisation decides what goes into OZZO — customers, orders, attendance, location, photographs — the Organisation is the controller and we act as a processor, handling that data on the Organisation’s instructions and for no purpose of our own.
If you are a User and you want to know why your Organisation has enabled a particular feature, or you wish to have your information corrected or erased, your first point of contact is your Organisation. We will support them in answering you.
How this policy is organised
- Part I — information OZZO collects and controls: website visitors, enquiries and account signup.
- Part II — information OZZOprocesses on your Organisation’s behalf: everything inside the product, including how long it is kept and how it is protected.
- Part III — general matters: your rights, our Grievance Officer, changes to this policy, and how to contact us.
Part I — Information we collect and control
1. Information you give us
- Enquiries and demo requests. When you submit a form on this website we collect your name, business email address, telephone number, company name, team size, industry, and anything else you choose to write to us.
- Account signup. When an account is created we collect the administrator name, business email address, telephone number, company name and the plan selected.
- Support and sales conversations. We keep records of email, WhatsApp and telephone correspondence so that we can answer you and keep a history of what was agreed.
- Payment information. Where you pay us we record the fact of payment, the amount, the invoice and your billing and tax details. We do not store card numbers. Card details, where used, are handled by the payment provider and do not reach our servers.
2. Information collected automatically
- Technical information — IP address, browser type and version, operating system, device model, language, time zone, referring page, and the date and time of access.
- Usage information — which pages and screens are opened and which features are used, so we can understand what helps and where people get stuck.
- Diagnostic information — error reports and performance measurements when something fails, so we can fix it.
3. Cookies
This website uses a small number of cookies. What they do and how to control them is set out in our Cookie Policy.
4. Why we use this information
- to respond to your enquiry and to provide a demonstration or a quotation;
- to create, administer and support your account;
- to invoice you and keep the accounting records the law requires;
- to provide customer support and keep a record of it;
- to notify you about changes to the Service, to pricing, or to this policy;
- to improve the Service — to understand which features are used, find faults and measure performance;
- to protect the Service against fraud, abuse and security incidents;
- to comply with the law.
5. Marketing
We may contact you about OZZO products, features and offers where you have given us your details in a business context. Every marketing email carries an unsubscribe link, and you can ask us to stop at any time by writing to hello@ozzo.co.in. Opting out of marketing does not stop service messages such as invoices, security notices and renewal reminders, which are part of the Service itself.
6. When we share information
We do not sell personal information, and we never have.We do not share it for anyone else’s advertising. We disclose it only in these situations:
- Service providers. We use a small number of carefully selected companies to host the Service, send email, deliver notifications and build our mobile application. They may handle personal data strictly to provide those functions to us, are bound by contract, and may not use it for their own purposes. A current list is available to customers on request.
- Your Organisation.If you are a User, information about your use of OZZO is visible to your Organisation’s administrators and managers. That is the purpose of the product.
- Legal requirements. Where we are required to disclose information by law, by a court or by a competent authority; or where disclosure is necessary to establish, exercise or defend a legal claim.
- Business transfer. If OZZO Technologies is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We would notify you before your information became subject to a different privacy policy.
7. Where information is held
Data is currently hosted in Mumbai, India (AWS ap-south-1). By using the Service you consent to your information being processed in the location stated above.
Part II — Information we process for your Organisation
8. What this part covers
This part concerns the data your Organisation and its Users put into OZZO. Your Organisation decides what is entered, who may see it, and how it is used. We hold it on their behalf.
Depending on the plan and the features switched on, this includes:
- Business records — customers, contacts, products, price lists, territories, routes, orders, invoices, payments, quotations, dispatches and stock movements.
- User records — names, business contact details, roles, reporting managers, assigned areas and device information.
- Work records — attendance, visits, tasks, leads, expenses, leave and route execution.
- Location data — see section 9.
- Photographs — see section 10.
9. Location data
Location is the most sensitive category OZZO handles, so we set it out in full.
- Location is collected only where the Organisation has enabled tracking for that User. It is not switched on by default for every feature or every plan.
- Where enabled, the OZZO SALES application records the device’s position periodically during the working day, and at the moment a User marks attendance or checks in to or out of a customer visit.
- The application requests location permission through the standard Android prompt, and may collect location in the background so that the day’s route is continuous. A User can withdraw that permission at any time in device settings, although the Organisation’s attendance and visit features may then not work.
- Location is used to show attendance, the route travelled and distance covered, and to confirm that a visit took place at the customer’s premises where the Organisation has enabled that check.
- Location is never used for any purpose of ours, is never sold, and is never shared outside the Organisation except as described in section 6.
10. Photographs
Where the Organisation has enabled the relevant features, the application captures photographs: an attendance selfie at punch-in and punch-out, photographs taken during a customer visit, and photographs of expense bills and odometer readings. These are stored against the record they belong to and are visible to the Organisation’s managers and administrators.
11. The mobile application and offline working
OZZO SALES is designed to work without a network connection. To do this it keeps a copy of the User’s own data on the device and synchronises when connectivity returns. That copy is held in the application’s private storage, is not readable by other applications, and is removed when the User signs out.
12. How long we keep data
Data in OZZO falls into two groups, and each has its own rule.
12.1 Business data — kept while the account is active
We do not age out the record of your business. The following are kept for as long as the Organisation’s subscription remains active:
| Data | Why it is kept |
|---|---|
| Customers, contacts, products, price lists, territories, routes, schemes and other master records | They are the configuration your business runs on. |
| Orders, invoices, payments, quotations, dispatches and stock movements | Financial records. Deleting them would corrupt outstanding balances and stock positions, and they are subject to statutory retention — see section 12.4. |
| Visits, tasks, leads, deals, attendance, leave and expenses | Your operating history, and the basis of every report in the product. |
| Expense bills, payment receipts and odometer photographs | Kept at full size with the financial record they evidence, for as long as that record is kept. |
12.2 Tracking data — kept for one year
High-volume material generated continuously by the mobile application is kept for 365 days and then reduced, not discarded:
| Data | Kept in full | After that period |
|---|---|---|
| Location points — the detailed route shown on a map | 365 days | Replaced by a daily summary for each User: distance travelled, first and last recorded location, time on field and customers visited. The summary is retained while the account is active, so distance and attendance reporting continues to work for earlier periods. The individual points are permanently deleted. |
| Attendance selfies and visit photographs | 365 days at full resolution | Replaced by a reduced-resolution copy, retained while the account is active. The photograph remains viewable as a record; only its file size is reduced. |
12.3 Technical logs — kept for 90 days
Device health records, automation event logs, delivery records for notifications already sent, and import job histories are retained for 90 days and then deleted. They exist for troubleshooting and contain no business content.
12.4 Statutory retention
Indian tax law requires businesses to preserve accounting records, including invoices and payment records, for 6 years. Where the Organisation is subject to such an obligation, it remains the Organisation’s responsibility, and the Organisation should export its records before closing its account. We may also retain limited information beyond the periods above where the law requires it, or where necessary to establish, exercise or defend a legal claim.
13. When a subscription ends
If a subscription is cancelled or lapses, the account is suspended but nothing is deleted for 90 days. During that period the Organisation may request a complete export of its data at no charge, and restoring the subscription restores full access. After 90days the account’s data is permanently deleted from our live systems. Deletion is irreversible.
14. Backups
Backup copies are taken for disaster recovery and are encrypted. Because a backup is a copy taken at a point in time, data deleted from the live system may continue to exist in a backup until that backup expires in the ordinary cycle. Backups are used to recover from loss of the system as a whole; they are not used to restore individual records deleted by a User.
15. How we protect data
We maintain technical and organisational measures appropriate to the nature of the data we hold. These include:
- Separation between Organisations. OZZO serves many Organisations from one application. Every record carries the identity of the account it belongs to, and access is enforced in the database itself, not only in application code. A fault in the application cannot expose one Organisation’s data to another, because the database refuses the read regardless of what is asked of it.
- Encryption in transit. All traffic between the mobile application, the web dashboard and our servers is encrypted using TLS. Unencrypted connections are not accepted.
- Encryption at rest. Databases, stored files and backups are encrypted on disk.
- Passwords. Passwords are stored only as salted one-way hashes. They cannot be read by us or recovered — only reset.
- Permissions within an Organisation. What a field User may see, compared with a manager or an administrator, is enforced by the same database-level controls, not merely hidden in the interface.
- Restricted staff access. Access to production systems is limited to personnel who require it, protected by multi-factor authentication, recorded in an audit log, and withdrawn when no longer needed.
- Secure development. User-supplied content is sanitised before display; database queries are parameterised; secrets and keys are held server-side and are not shipped inside the mobile application; and changes affecting authentication or access control are reviewed before release.
No method of transmission or storage is completely secure and we cannot guarantee absolute security. We do commit to applying the measures described above and to keeping them current.
16. The Organisation’s responsibilities
Where we act as a processor, the Organisation is responsible for the lawfulness of what it does with OZZO. In particular, the Organisation should:
- inform its Users that OZZO is in use and what is collected — including, where enabled, location and photographs;
- obtain any consent its own obligations require before enabling tracking;
- give access only to those who need it, and remove access when a User leaves the Organisation;
- keep account credentials secure and not share logins between people;
- respond to its own Users’ requests about their personal data.
Part III — General
17. Your rights
Under the Digital Personal Data Protection Act, 2023 and other applicable law, you may have the right to:
- obtain confirmation of whether we hold personal data about you, and a summary of it;
- have inaccurate or incomplete personal data corrected or completed;
- have personal data erased where it is no longer needed for the purpose it was given;
- withdraw a consent you have given, without affecting what was done before;
- nominate another person to exercise these rights in the event of death or incapacity;
- make a grievance, as described in section 19.
18. How to make a request
If you are a User of an Organisation’s OZZO account, please make your request to that Organisation. They control the data and can act on it directly. If they ask us for help, we will assist them.
Otherwise, write to hello@ozzo.co.in. We may need to verify your identity before acting, and we may be unable to comply in full where the law requires us to retain something.
19. Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023, the following person may be contacted regarding any complaint or request concerning personal data:
Sumit Vegad
Grievance Officer, OZZO Technologies
hello@ozzo.co.in
We will acknowledge your communication and respond within 30 days.
20. Children
OZZO is a workplace tool sold to businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child’s data has been provided to us, contact us and we will delete it.
21. Artificial intelligence features
Certain features, where enabled by the Organisation, use artificial intelligence to assist with tasks such as answering product questions or summarising information. Customer data is not used to train artificial-intelligence models, whether ours or anyone else’s. No decision producing a legal or similarly significant effect on an individual is taken by automated means without human involvement.
22. Third-party links
This website and the Service may link to sites we do not operate, including Google Play. We are not responsible for their content or their privacy practices, and we encourage you to read their policies.
23. Changes to this policy
We may update this policy as the Service develops or the law changes, and the effective date at the top of this page will change with it. Where a change materially affects how we handle personal data we will notify account administrators by email in advance. Continuing to use the Service after a change takes effect indicates acceptance of the updated policy.
24. Contact
OZZO Technologies
Email: hello@ozzo.co.in
Telephone: +91 92271 26301 (Mon–Sat, 10:00 AM – 7:00 PM IST)
Commercial terms, including refunds and service activation, are in our Terms of Service. Cookies are covered in our Cookie Policy.