Zoa Zone Services ("HelloBiz", "we", "us", "our") operates the following platforms:

HelloBiz operates in India (under Zoa Zone Services Pvt Ltd) and the United States (under Zoa Zone Services LLC). Applicable privacy laws vary by your location — both jurisdictions' requirements are covered in this policy.

2.1 Account & Identity Data

2.2 Platform Activity Data

2.3 Technical & Device Data

2.4 AI Voice Data

🤖 If you interact with HelloBiz AI Voice Assistant (powered by AEVOICE), your call audio may be transcribed and processed. See Section 7 for full details.

3.1 How We Collect Consent

• ✓At registration, via clearly labeled, un-pre-checked checkboxes for each communication channel.
• ✓When you add a phone number to your account (for OTP/booking alerts).
• ✓When you enable AI Voice features for your business listing.
• ✓Consent logs include: timestamp, IP address, channel, and consent method — retained for 5 years.
• ✓Marketing consent is collected separately from transactional consent.

3.2 Message Types We Send

3.3 How to Opt Out

Manage all preferences in Account Settings → Notifications, or email privacy@hellobiz.app.

All SMS messages sent to US numbers are delivered through carriers registered with The Campaign Registry (TCR) under the A2P 10DLC framework.

4.1 Our A2P Commitments

• ✓All SMS campaigns registered with TCR with declared use cases (transactional, marketing, account notifications).
• ✓Sender ID clearly identified as 'HelloBiz' in every message.
• ✓Opt-out mechanism included in every message: reply STOP to unsubscribe.
• ✓No messages sent between 9:00 PM and 8:00 AM local recipient time.
• ✓Consent records retained for minimum 5 years.
• ✓Phone numbers are never sold or shared with third-party marketers.
• ✓Message content matches the declared campaign use case on TCR registration.

4.2 TCPA Compliance

• ✓Prior express written consent obtained before any marketing SMS.
• ✓STOP requests honored immediately, suppression lists maintained indefinitely.
• ✓AI voice interactions clearly identified as automated at the start of every call.
• ✓No auto-dialing to numbers without prior consent.

HelloBiz sends WhatsApp messages via the official WhatsApp Business API (Meta). We comply fully with WhatsApp's Business Messaging Policy and Commerce Policy.

5.1 WhatsApp Consent Rules

• ✓Explicit opt-in collected at registration or when you add WhatsApp to your account.
• ✓Opt-in is never pre-checked.
• ✓Message type disclosed at time of opt-in (bookings, quotes, OTPs, etc.).
• ✓Our business name (HelloBiz.app) included in every message.
• ✓Opt-out honored within 24 hours of STOP request.
• ✓Only approved WhatsApp Message Templates used for regulated categories.
• ✓No cold outreach or promotional messages without prior opt-in.

5.2 WhatsApp Message Categories We Use

Email communications comply with CAN-SPAM Act (US), CASL (Canada), GDPR (EU), and applicable Indian IT Rules.

• ✓Every email identifies Zoa Zone Services as sender, with physical address.
• ✓Subject lines are never deceptive or misleading.
• ✓Unsubscribe link included in every marketing email.
• ✓Unsubscribe requests honored within 10 business days.
• ✓No purchased or third-party email lists used.
• ✓Transactional emails (OTPs, booking confirmations, receipts) cannot be opted out of while your account is active.
• ✓Marketing emails require separate explicit opt-in.

7.1 User Rights in AI Voice Calls

• ✓Every AI-handled call begins with a disclosure: 'You are speaking with an AI voice assistant.'
• ✓Users may request to speak with a human at any time — the call is transferred or a callback is arranged.
• ✓Call recordings and transcripts are processed for service quality and AI training only with consent.
• ✓Consent to AI calls is separate from SMS/WhatsApp consent and collected at registration or first call.
• ✓Users may opt out of AI voice calls entirely by contacting the business or HelloBiz support.
• ✓AI calls comply with TCPA (US), TRAI regulations (India), and state-level AI disclosure laws (e.g., California AB 302).

7.2 For Businesses Using HelloBiz AI Voice

8.1 Between Buyers & Providers

• •Contact details shared between buyer and provider only after a quote request is accepted or booking confirmed.
• •Phone numbers are masked by default until both parties consent to direct contact.
• •Reviews and ratings are publicly visible and tied to your display name.
• •Classifieds and Wanted Posts are visible to other users — do not include sensitive personal information.
• •Messaging between users is logged for 12 months for dispute resolution and safety.

8.2 Business Listings

• •Business name, address, phone number, and category are publicly listed.
• •Businesses may claim and manage their listing — verified businesses are marked with a trust badge.
• •We do not share your private business data (booking details, CRM records) with other businesses.

Security vulnerability? Email security@hellobiz.app. We acknowledge within 48 hours and respond with a timeline within 7 business days.

All verified requests responded to within 30 days. Identity verification may be required.

Upon account deletion, personal data is anonymized or deleted within 30 days, except where retention is required by law.

• ✓We are a Data Fiduciary under the DPDP Act 2023 for personal data of Indian users.
• ✓Consent is obtained in clear, plain language in English (and regional languages where applicable).
• ✓You have the right to access, correct, and erase your personal data.
• ✓You may nominate another person to exercise your data rights on your behalf.
• ✓We appoint a Consent Manager / Data Protection Officer accessible at dpo@hellobiz.app.
• ✓Grievances may be submitted to our Grievance Officer within 48 hours; we respond within 30 days.
• ✓We do not process children's data (under 18) without verifiable parental consent.
• ✓Cross-border transfer of Indian user data complies with applicable DPDP rules and notified countries.
• ✓Data localisation requirements are respected — Indian user data stored on servers in India where mandated.

HelloBiz services are intended for users aged 18 and older. We do not knowingly collect personal data from minors. Under the India DPDP Act, we obtain verifiable parental consent before processing data of users under 18 where applicable.

If you believe a minor has registered, contact privacy@hellobiz.app and we will delete the account promptly.

• •Updated policy posted here with new effective date.
• •Email notification to all registered users for material changes.
• •In-app banner displayed for 30 days after update.
• •Re-consent collected if changes affect messaging permissions.

We respond to all inquiries within 5 business days. Data requests within 30 days.