Last updated: 14 October 2026
This Privacy Policy (“Policy”) governs the processing of personal data by ZysCo (“Zysco” , “we” , “us” , or “our”) through the website ZysCompany.com and all associated products and services. Zysco is the publisher of this Policy and, where applicable, the data controller or data processor of personal data as defined below.
By accessing, downloading, installing, or using any Zysco product or service, you acknowledge that you have read, understood, and accepted this Policy. If you do not agree, you must not use our services.
Zysco’s role depends on the context of data processing:
When Zysco’s mobile applications, SaaS platforms, APIs, and cloud services are used by a business customer or organization (“Client”), the Client is the Data Controller with respect to personal data relating to its employees, end users, customers, contractors, or third parties. Zysco acts strictly as the Data Processor and processes such data only on documented instructions from the Client, pursuant to a Data Processing Agreement (“DPA”) that supplements this Policy.
Zysco acts as a Data Controller only for data strictly necessary to operate, secure, and improve its services, including:
Regardless of role, Zysco:
This Policy applies to all personal data processed through:
This Policy does not cover third-party websites, applications, or services that may link to or integrate with Zysco. Users should review the privacy policies of such third parties independently.
Depending on the service and configuration, Zysco may process the following categories of data, primarily on behalf of Clients:
Clients and their end users are solely responsible for the data they input, upload, capture, or transmit through Zysco services.
Zysco does not monitor, pre-screen, or verify the nature, accuracy, legality, or appropriateness of user-submitted content.
Clients must:
Unless (i) expressly permitted by the applicable service plan and DPA, (ii) legally authorized, and (iii) accompanied by appropriate safeguards, Clients and users must not upload, transmit, or process through Zysco services:
Zysco reserves the right, but has no obligation, to suspend processing or remove content that it reasonably believes violates this Policy, applicable law, or the service agreement.
Personal data is processed strictly for:
Where AI-powered features are activated by the Client or user:
Zysco does not:
The Client, as Data Controller, determines the legal basis for processing (e.g., consent, contract performance, legal obligation, legitimate interest, public interest).
Zysco relies on the following legal bases:
Zysco may create aggregated, de-identified, or irreversibly anonymized datasets derived from processed data. Such datasets:
Zysco may use such datasets for analytics, product improvement, research and development, capacity planning, security research, and industry benchmarking. No identifiable personal data is ever commercialized.
AI features provided within Zysco services are assistive and advisory. They:
Users are solely responsible for the outputs they accept, adopt, or act upon.
When AI features are used, only the data strictly necessary to fulfill the requested operation is transmitted, such as:
The following are never transmitted to AI providers as input:
AI service providers engaged by Zysco:
AI features are disabled by default where user-level activation applies
Activation requires an explicit action by the Client administrator or user
Users or administrators may disable AI features at any time from the service settings
Zysco cannot technically prevent users from entering personal or sensitive data into free-text fields; the Client remains responsible for internal policies and user training
Zysco engages trusted third-party providers to deliver hosting, storage, infrastructure, security, monitoring, payment processing, customer support tooling, and AI services. All sub-processors:
An up-to-date list of sub-processors is available upon request to Clients. Zysco will provide reasonable advance notice of material changes to its sub-processor list in accordance with the applicable DPA.
Where personal data is transferred outside the European Economic Area, the United Kingdom, or other jurisdictions with data-export restrictions, Zysco implements appropriate safeguards, including:
Personal data is retained only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law:
Zysco implements and maintains technical and organizational measures appropriate to the risks presented by processing, including:
No method of electronic transmission or storage is completely secure. While Zysco strives to protect personal data using commercially reasonable measures, Zysco cannot guarantee absolute security. Clients and users are responsible for maintaining the confidentiality of their credentials and for configuring their use of the services appropriately.
In the event of a personal data breach affecting Client data, Zysco will notify the affected Client without undue delay and, where feasible, within seventy-two (72) hours of becoming aware of the breach, providing available information to enable the Client to comply with its own notification obligations.
Depending on applicable law, individuals have the right to:
Requests must generally be directed to the Client (Data Controller). Zysco will assist Clients in responding to such requests as required by the DPA, at reasonable cost where applicable. Where Zysco receives a request directly from a data subject, it will forward the request to the relevant Client and acknowledge receipt.
For data for which Zysco is the Controller (Section 1.2), requests may be submitted directly to contact@zyscompany.com.
Zysco websites and web applications may use cookies and similar technologies strictly necessary for:
Where optional analytics or functional cookies are used, Zysco obtains consent through a cookie banner in accordance with applicable law. Zysco does not use advertising, marketing, or cross-site tracking cookies.
Zysco services are intended for professional and business use and are not directed to children. Zysco does not knowingly collect personal data from children under the age of sixteen (16), or such other minimum age defined by applicable law (including the age of thirteen (13) in the United States under COPPA). If you become aware that a child has provided personal data to Zysco, please contact contact@zyscompany.com so that the data can be deleted.
To the maximum extent permitted by applicable law, and without limiting any express contractual obligations to the Client under the service agreement or DPA:
Nothing in this Policy excludes or limits liability that cannot lawfully be excluded or limited, including under applicable data- protection law.
The Client agrees to indemnify and hold Zysco harmless from and against any claims, damages, liabilities, fines, penalties, costs, and expenses (including reasonable legal fees) arising out of or relating to:
This Section survives termination of the service agreement.
This Policy is governed by the laws specified in the applicable service agreement between Zysco and the Client. In the absence of such specification, this Policy is governed by the laws of California, USA, without regard to conflict-of-laws principles. Any dispute arising from or relating to this Policy is subject to the exclusive jurisdiction of the competent courts of California, USA, without prejudice to mandatory consumer-protection or data-protection rights.
Zysco Privacy Contact contact@zyscompany.com
For Clients with a designated Data Protection Officer or privacy contact under the DPA, please use the channels specified in that agreement.
Zysco may update this Policy from time to time to reflect:
Material changes will be communicated through the services, by email to Client administrators, or by posting a notice on ZysCompany.com. The Last updated date at the top of this Policy reflects the most recent revision. Continued use of the services after the effective date of an updated Policy constitutes acceptance of the changes.
By downloading, installing, accessing, or using any Zysco mobile application, cloud service, website, or API, the Client and its users acknowledge that they have read, understood, and agreed to this Privacy Policy. Clients are responsible for making this Policy available to their end users.