Privacy Policy

1. Who this policy applies to

This policy applies to three groups of people whose information may pass through Zuno:

• Account holders — business owners, managers, and staff who sign up for or use a Zuno account.
• End customers of our merchants — shoppers, diners, and loyalty members whose information is entered into Zuno by a merchant using our POS, CRM, or marketing tools.
• Website visitors — anyone browsing zuno-os.com, requesting a demo, or contacting us.

For end customers of our merchants, the merchant is the data controller and Zuno acts as a data processor on their behalf. Questions about how a specific shop handles your data should be directed to that shop.

2. Information we collect

2.1 Information you give us directly

• Account and contact information: name, business name, email address, contact number, role, and password.
• Business information: company size, store locations, business type, and tax or registration details where relevant for billing.
• Payment information: billing details processed through our payment partners. Zuno does not store full card numbers on our own servers.
• Demo requests and support messages: anything you send us through forms, email, or chat.

2.2 Information generated through your use of Zuno

• Operational data: sales transactions, items sold, prices, discounts, refunds, tabs, and receipts processed through the POS.
• Inventory data: stock levels, suppliers, and movement history.
• Customer relationship data: customer profiles, visit history, purchase history, loyalty points, and SMS or promo engagement that you choose to record in the CRM.
• Marketing data: campaigns you create, audiences, and performance metrics.
• HR data: staff schedules, attendance, roles, and communications you manage in Zuno's HR module.
• Reports and analytics: aggregated and individual metrics generated from the data above.

2.3 Information collected automatically

• Device and log data: IP address, browser type, operating system, device identifiers, referring pages, pages viewed, and timestamps.
• Cookies and similar technologies: see Section 7.

2.4 Information from third parties

• Authentication providers when you sign in through a third-party account.
• Payment processors and telecom partners for billing and SMS delivery.
• Analytics and infrastructure providers that help us operate the Service.

We do not knowingly collect sensitive personal information (as defined under the DPA) unless it is strictly necessary and you have given consent.

3. How we use your information

We use information to:

• Provide, operate, and maintain the Service, including POS, CRM, inventory, marketing, and HR features.
• Process payments and manage subscriptions.
• Send transactional messages such as receipts, account notices, and security alerts.
• Send SMS or email campaigns on behalf of merchants, where the merchant is responsible for obtaining the recipient's consent.
• Respond to demo requests, inquiries, and support tickets.
• Generate reports, dashboards, and analytics for merchants.
• Improve, troubleshoot, and secure the Service, including detecting fraud and abuse.
• Comply with legal, tax, and regulatory obligations.
• With your consent, send marketing communications about Zuno. You can opt out at any time.

We rely on the following legal bases under the DPA: your consent, performance of a contract with you, compliance with a legal obligation, and our legitimate interests in running and improving the Service, balanced against your rights.

4. How we share information

We do not sell your personal information. We share information only in these situations:

• With service providers who help us run Zuno — for example, cloud hosting, payment processing, SMS delivery, analytics, customer support, and email infrastructure. These providers are bound by confidentiality and data protection obligations.
• Between merchants and their end customers, as the merchant directs through the Service.
• For legal reasons, when required to comply with a law, regulation, court order, or lawful government request, or to protect the rights, property, or safety of Zuno, our users, or the public.
• In a business transfer, such as a merger, acquisition, or sale of assets, in which case we will notify you and any new owner will be bound by this policy.
• With your consent, for any other purpose disclosed to you at the time.

5. Beta status

Zuno is currently offered in Beta. This means features are evolving, and we may use information from Beta accounts to debug issues, improve functionality, and shape the product. We apply the same security and confidentiality standards described in this policy to Beta data. If Beta participation involves any additional data uses, we will disclose them separately.

6. Data storage, location, and security

We store information on secure cloud infrastructure. Data may be processed or stored in the Philippines or in other jurisdictions where our service providers operate. When personal information is transferred outside the Philippines, we use contractual and technical safeguards consistent with the DPA.

We apply administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption of data in transit using TLS.
• Encryption of sensitive data at rest where applicable.
• Role-based access controls and the principle of least privilege.
• Logging, monitoring, and regular security reviews.
• Employee confidentiality obligations and access training.

No system is perfectly secure. If we become aware of a personal data breach that is likely to give rise to a real risk of serious harm, we will notify the NPC and affected individuals.

7. Cookies and similar technologies

We use cookies and similar technologies to:

• Keep you signed in and remember your preferences.
• Measure how the Service is used so we can improve it.
• Secure accounts and detect suspicious activity.

You can control cookies through your browser settings. Blocking certain cookies may break parts of the Service, such as staying logged in.

8. Data retention

We keep personal information only for as long as needed to provide the Service, comply with legal obligations (including tax and accounting rules), resolve disputes, and enforce our agreements.

When information is no longer needed, we delete or anonymize it. Merchants can request export or deletion of their account data by contacting us, subject to retention required by law.

9. Your rights

Under the Data Privacy Act, you have the right to:

• Be informed about how your personal information is processed.
• Access the personal information we hold about you.
• Object to processing in certain cases.
• Correct inaccurate or outdated information.
• Request erasure or blocking of information that is incomplete, outdated, unlawfully obtained, or no longer necessary.
• Data portability for information processed by electronic means.
• File a complaint with the National Privacy Commission.
• Claim damages for violations of your data privacy rights.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by law.

If you are an end customer of a merchant using Zuno, please contact that merchant first, since they control the data you provide to their shop.

10. Children's privacy

Zuno is built for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us and we will take appropriate steps to delete it.

11. Third-party links and services

The Service may contain links to third-party websites, apps, or services that we do not control. This policy does not apply to those third parties. We encourage you to review their privacy policies before sharing information with them.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version on this page and update the “Last updated” date above. If the changes are significant, we will provide a more prominent notice, such as an email or in-product message. Continued use of the Service after the changes take effect means you accept the updated policy.

13. Contact us

If you have questions, concerns, or requests about this Privacy Policy or your personal information, please contact us:

• Instagram: @zuno.ph
• Website: zuno-os.com