Who we are
Zyqo ("we", "us", "our") is the data controller / data fiduciary for the personal data described in this policy.
Legal entity
Analytica AI Labs Pvt Ltd, operating as Zyqo
Registered office
[REGISTERED ADDRESS, BENGALURU]General contact
contact@zyqo.ai
Grievance / DPO
EU representative (GDPR Art. 27): [NAME & ADDRESS — or documented exemption]
What data we collect
We collect only what's needed for the purpose at hand.
Contact / demo requests
Name, work email, phone (optional), company, role, and the message you share
Waitlists — CXO Assist, ArtistPro
Name, email, and anything you choose to share about your organisation or needs
SkillStack enquiries
Name, email, phone, and details about your learning or training needs
Newsletter
Email address, confirmed via double opt-in
Careers
Name, contact details, CV/resume, and application content
Product & service use
Data necessary to deliver the product, as set out in the relevant agreement
Automatic, on-site
IP address, browser and device info, usage data — via cookies, only with consent
We do not knowingly collect data from anyone under 18. Zyqo is built for professionals and businesses.
Why we use your data & legal basis
| PURPOSE | DATA USED | BASIS (GDPR) | BASIS (DPDP) |
|---|---|---|---|
| Respond to enquiries / demo requests | Contact details, message | Legitimate interest / pre-contract | Consent |
| Manage waitlists | Name, email, org details | Consent | Consent |
| Deliver SkillStack / training | Contact & enquiry details | Contract / pre-contract | Consent |
| Send newsletter | Consent (double opt-in) | Consent | |
| Process job applications | Application data, CV | Pre-contract / consent | Consent |
| Provide products & services | Per service agreement | Contract | Consent / contractual necessity |
| Improve & secure the site | Technical / usage data | Consent (analytics) / legitimate interest (security) | Consent |
For Indian data principals, we design consent-first — we don't rely on "legitimate interest" where the DPDP Act requires consent.
International transfers
We're based in India and may process data here and with service providers elsewhere. Where we transfer EU users' data outside the EU, we rely on safeguards such as the EU Standard Contractual Clauses (2021) plus a Transfer Impact Assessment. For Indian data, we follow DPDP cross-border rules and keep our architecture able to meet data-residency requirements.
How long we keep data
| DATA | RETENTION |
|---|---|
| Enquiry / demo contact data | e.g. 24 months from last contact |
| Waitlist data | Until launch + [X months], or until you unsubscribe |
| Newsletter | Until you unsubscribe |
| Job applications | e.g. 12 months, then deleted, unless hired |
| Product / service data | As set out in the relevant agreement |
Your rights
GDPR — EU USERS
- Access, correct, delete
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your supervisory authority
DPDP — INDIA
- Access a summary of your data
- Correct or complete it
- Erase it
- Nominate someone to exercise your rights
- Grievance-redressal process
To exercise any right, contact [GRIEVANCE / DATA CONTACT EMAIL]. Withdrawing consent is as easy as giving it.
How we protect your data
Encryption
In transit and at rest
Access control
Role-based, least privilege
Audit logging
Tracked and reviewed
Incident response
Defined runbooks
Our processes are aligned with ISO 27001 practices. Your data is never used to train third-party AI models without your explicit consent.
Data breaches
If a personal-data breach occurs, we follow our breach-response procedure — notifying affected individuals and relevant authorities within the timelines required by the DPDP Act, and GDPR where applicable.
AI transparency
As an AI company, we're transparent about our use of AI. Where AI features interact with you directly, we disclose it. Where we publish AI-generated content, we label it — in line with EU AI Act transparency principles.
Changes to this policy
We may update this policy from time to time. We'll post the new version here with an updated date, and where changes are significant, we'll take reasonable steps to let you know.
Contact
Questions about this policy or your data?