Privacy policy
Last updated 17 October 2026
Draft for review. This policy hasn't been reviewed yet and isn't in effect.
This policy explains what [Legal entity name] ("ZOMAGS", "we") collects when you use www.zomags.com, the ZOMAGS Marketplace and its vendor portal, and what we do with it. The ZOMAGS platform you install runs on your own server: what you store in your installation stays there, and we don't receive or keep a copy of it.
What we collect
- Your account: your name, email address and password. We store the password only as a one-way hash.
- Sign-in and security records: when you sign in, and a log of requests to our service (including your IP address and account), used to keep the service secure and to investigate problems.
- Plans and orders: the plan you choose, its dates, and any orders you place.
- Support: the tickets and messages you send us.
- Your installed platform: when you connect an installation, its name, version and regular health reports (whether it is running), so we can deliver plugins and licences to it. Not the data inside it.
- Vendors: business details and the payout account you give us, so we can pay you. Payout details are stored encrypted.
What we use it for
- To run your account, your plan, your installations and your orders.
- To send the emails the service needs: verifying your address, resetting a password, activation codes and notices about your account.
- To answer support requests.
- To keep the service secure and working, and to meet our legal obligations.
We don't sell your data, we don't show advertising, and we don't use tracking or analytics tools on this site.
Cookies
We use one essential cookie, which keeps you signed in. While you are signed in, your browser tab also holds a short-lived sign-in token, which is cleared when you close the tab. There are no advertising or tracking cookies.
Who else handles it
We use a small number of providers to run the service, and only for that purpose:
- a hosting provider for our servers;
- an email delivery provider for the emails we send;
- a cloud storage provider for our encrypted backups;
- a payment provider, once online payments launch, to process payments.
How long we keep it
We keep account, plan and order records while your account is open and for as long as the law requires afterwards. Request and security logs are kept for a limited period and then deleted.
Your rights
You can ask us for a copy of your personal data, ask us to correct it, or ask us to delete your account, subject to the records we must keep by law. We handle requests under applicable data-protection law, including India's Digital Personal Data Protection Act, 2023. Email support@zomags.com from the address on your account.
Changes
If we change this policy, we'll update the date at the top, and tell account holders by email about important changes.
Contact
Questions about privacy: support@zomags.com, or see Contact.