Introduction
If you are a visitor to a Zykrr Website or a customer of a Zykrr Service, then this Privacy Policy applies to your use of such Website or Service, except as expressly set forth below. If you are a visitor to or user of a third-party website or service (“Third-Party Property”) that utilizes any Zykrr communication or survey products (such as the Zykrr survey widget), then any information you submit to such Third-Party Property (including via the Zykrr product) is collected under the privacy policy of the owner of such Third-Party Property. You should contact that owner with any related requests or inquiries. If you have any inquiries specifically directed towards Zykrr, please email us at support@zykrr.com.
At Zykrr, we respect the privacy rights of our users and recognize the importance of protecting the personal information we collect about you. This Privacy Policy is designed to help you understand what information we collect, how we use and share that information, and the choices available to you.
As used in this Privacy Policy:
“Websites” means Zykrr’s websites (including, without limitation, www.zykrr.com, www.zykrr.ai, and all related subdomains).
- “Services” means Zykrr’s survey and communications products, applications, and services, in whatever format they may be offered now or in the future.
“Offerings” refers collectively to the Websites and Services.
Information We Collect
Information Related to Your Interaction with Zykrr and the Offerings
Registration and Contact Information – We collect information about you when you (a) register to use the Services, or (b) provide contact information to us via email, mail, or through our Offerings. This may include your username, first and last name, email address, mailing address, or phone number.
Technical, Usage, and Location Information – We automatically collect information on how you interact with the Offerings, including IP address, date and time of access, browser type, operating system, device details, pages viewed, and items clicked. We may also collect location information provided by your device. Cookies and similar technologies are used to collect some of this information (see Zykrr’s Cookie Policy for details).
Third-Party Platforms – We may collect information when you interact with our advertisements and other content on third-party sites or platforms, such as social networking sites. This may include profile information, “Likes,” or confirmation that you viewed or interacted with our content.
Other Information – We may collect additional information not specifically listed here, which will be used in accordance with this Privacy Policy or with your consent.
Legal Basis – Zykrr has a legitimate interest in collecting relevant data to enable customer engagement and to send surveys based on this information. For website visitors, we store data for as long as requested by our customer (whose site you are visiting) or until you opt out. For app customers, we retain this data in line with customer requests or until individual users opt out.
How We Use the Information We Collect
We use your information to operate, provide, and improve our Offerings, communicate with you, and ensure compliance with legal obligations. Importantly, we do not sell, trade, share, or transfer your personal information to third parties except in the following limited circumstances:
With Parent Companies, Subsidiaries, and Affiliates – We may share your personal information with our parent companies, subsidiaries, and affiliates to ensure efficient business operations and service delivery.
With Third-Party Service Providers – We may share your personal information with trusted service providers who assist us in providing, maintaining, and improving the features and functionality of our Offerings. This may include marketing, analytics, or customer communication support. For example, we may provide personal information to email service providers for distribution of newsletters or notifications.
For Legal and Regulatory Compliance – We may share your personal information when we have a good-faith belief that access, use, preservation, or disclosure is reasonably necessary to:
– Satisfy any applicable law, regulation, legal process, or enforceable governmental request,
– Enforce a Customer Agreement, including investigating potential violations, or
– Protect against imminent harm to our rights, property, or safety, or that of our users or the public.
For Fraud Prevention and Security Purposes – We may share personal information with third parties (including service providers and government entities) to detect, prevent, or otherwise address fraud, security risks, or technical issues.
With Business Partners – We may share your personal information with business partners who jointly offer services with us, for example when running a cross-promotion.
In Corporate Transactions – We may share or transfer your personal information if Zykrr becomes involved in a merger, acquisition, bankruptcy, or any form of sale of some or all of its assets.
With Your Consent – We may share your personal information with third parties when we have obtained your explicit consent.
Aggregated or Anonymized Information – We may share aggregated or anonymized information with third parties for analytical, research, or other lawful purposes. Such information does not identify you individually, but may include usage, viewing, and technical metrics collected through our technology. Where applicable law requires this to be treated as personal information, we will only disclose it as described above. Otherwise, we may disclose such information without restriction.
Data Retention & Security
Data Retention
We retain Customer Data strictly in accordance with the terms of our Customer Agreements. Retention obligations are defined by client contracts and legal requirements. Once the purpose of processing is fulfilled, or upon expiration/termination of the Customer Agreement, Customer Data is deleted or securely anonymized, unless retention is mandated by law.
Security
The security of your personal information is of the highest importance to us. Zykrr implements a comprehensive set of technical, organizational, and administrative safeguards to protect the confidentiality, integrity, and availability of your personal information.
Access to personal information is strictly limited to employees, contractors, and service providers who require such access to deliver Zykrr’s Offerings. These individuals are bound by confidentiality obligations and subject to disciplinary action in case of non-compliance.
We employ robust physical, electronic, and procedural controls to safeguard your data. Sensitive information, such as account passwords, is encrypted in transit using industry-standard Transport Layer Security (TLS). All data is stored on secure servers with layered access controls, monitoring, and audit logging to prevent unauthorized access or misuse.
Zykrr’s security practices are aligned with globally recognized compliance frameworks, including:
– ISO/IEC 27001 – Implementation of an Information Security Management System (ISMS) for structured risk management and continuous improvement.
– SOC 2 – Assurance of controls around security, availability, processing integrity, confidentiality, and privacy, validated through independent audits.
– HIPAA – Safeguards for the protection of health-related personal data where applicable to customer use cases.
Despite these measures, no method of transmission over the internet or electronic storage can be guaranteed to be 100% secure. While Zykrr applies industry best practices to safeguard your personal information, we cannot guarantee absolute security.
Other Access to or Disclosure of Your Information
The Offerings may contain links to third-party websites. This Privacy Policy applies only to information collected by Zykrr. We are not responsible for the privacy practices of third parties and encourage you to review their policies.
Additionally, the Websites may allow you to post publicly viewable content (e.g., reviews, comments). Any information shared publicly can be read, collected, or used by others, and Zykrr is not responsible for such disclosures. Please see our Website Terms of Use for further guidance.
Your Controls and Choices
Opt-Outs – Choose not to have your personal information used for certain purposes.
Communication Preferences – Unsubscribe from promotional communications, while continuing to receive service-related updates.
Blocking Cookies – Manage cookies via browser settings (some functionality may be affected).
Do Not Track Signals – Currently, our Offerings do not respond to browser-based “Do Not Track” signals.
Accessing and Updating Your Personal Information
You may access, review, correct, update, or delete your information by contacting us at support@zykrr.com or through your Service profile.
We may reject requests that are repetitive, technically infeasible, or infringe on the rights of others. Access and correction are provided free of charge unless disproportionate effort is required.
If you stop using the Services or your account is terminated, you may lose access to update your data. We may retain necessary data for legal, contractual, or business purposes. Content you post may remain visible even after account termination.
No Children Under Age 13
The Offerings are not intended for use by anyone under the age of 13, nor does Zykrr knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, you may not attempt to register for the Offerings or send any information about yourself to us, including your name, address, telephone number, or email address.
In the event that we confirm that we have collected personal information from someone under the age of 13 without verification of parental consent, we will delete that information promptly. If you are a parent or legal guardian of a child under 13 and believe that we might have any information from or about such child, please contact us at the email or mailing address provided at the end of this Privacy Policy.
International Transfer of Data; EU-U.S. and Swiss-U.S. Privacy Shield
We may transfer your personal information to other countries outside the United States and make it accessible to our parent companies, subsidiaries, affiliates, and trusted third-party service providers internationally. Regardless of where your information is processed, we will protect it in accordance with this Privacy Policy.
If you have questions or need to contact us regarding this Privacy Policy, please email us at support@zykrr.com.
Global Compliance Obligations
Zykrr recognizes the importance of global privacy laws and the rights they confer on individuals. This section outlines the obligations and rights under four key regulations—GDPR (EU/EEA), India’s DPDPA (2023), the California Consumer Privacy Act (CCPA), and California’s Shine the Light Law—and explains how Zykrr complies with each.
General Data Protection Regulation (GDPR)
Your Rights under GDPR
Right to Access – Obtain confirmation of whether your personal data is being processed and access to that data.
Right to Rectification – Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”) – Request deletion of personal data in certain circumstances.
Right to Restrict Processing – Request temporary suspension of data processing.
Right to Data Portability – Request transfer of your personal data in a structured, machine-readable format.
Right to Object – Object to processing based on legitimate interests or direct marketing.
Rights related to Automated Decision-Making and Profiling – Not to be subject to decisions based solely on automated processing that significantly affect you.
How Zykrr Complies
Zykrr processes personal data in accordance with GDPR principles of lawfulness, fairness, and transparency. Data subjects may exercise their rights by contacting support@zykrr.com, and Zykrr will respond within the statutory timeframes. Mechanisms for rectification, erasure, and restriction are maintained, and automated decisions are subject to meaningful human review where required.
Exercising Your Rights
a. Consent Withdrawal Form – If you have previously given consent to Zykrr to store and process your personal data for the purpose of providing services, and you now wish to withdraw that consent, please download the Consent Withdrawal Form and follow the instructions provided.
b. Data Subject Access Request (DSAR) Form – If you are a citizen of a country under the jurisdiction of the GDPR and wish to exercise your right to access your personal data by submitting a Subject Access Request, please download the DSAR Form and follow the instructions provided in it.
Digital Personal Data Protection Act (DPDPA), 2023 (with 2025 Amendment)
Your Rights under the DPDPA
Right to Access Information – Request details about the processing of your personal data.
Right to Correction and Erasure – Correct or delete your personal data.
Right to Grievance Redressal – File complaints with a Data Fiduciary and escalate unresolved grievances to the Data Protection Board.
Right to Nominate – Appoint a nominee to exercise your rights in the event of incapacity or death.
Right to Withdraw Consent – Revoke previously granted consent at any time.
Right to be Forgotten (2025 Amendment) – Request that your personal data no longer be made available or processed when it is no longer necessary for the purpose of collection.
How Zykrr Complies
Zykrr functions as a Data Fiduciary when collecting data directly and as a Data Processor when handling Customer Data on behalf of clients. We implement transparent consent, correction, and withdrawal mechanisms, along with grievance redressal escalation paths. Following the 2025 amendment, we have enhanced our workflows to enable individuals to exercise the “Right to be Forgotten,” ensuring their data is anonymized or erased upon valid request.
California Consumer Privacy Act (CCPA)
Your Rights under CCPA
Right to Know – Request details of personal data collected, sources, and purposes.
Right to Delete – Request deletion of personal information, subject to certain exceptions.
Right to Opt-Out – Opt out of the sale or sharing of personal information.
Right to Non-Discrimination – Exercise privacy rights without facing discriminatory treatment.
Right to Correct – Request correction of inaccurate personal information maintained by businesses.
How Zykrr Complies
Zykrr honors verifiable consumer requests submitted under the CCPA by confirming identity before responding. We do not sell personal information but, where data is shared with service providers, contracts include strict limitations on use. Opt-out mechanisms are available, and Zykrr ensures that individuals are not discriminated against for exercising their rights.
California “Shine the Light” Law
Your Rights under the Shine the Light Law
Right to Request Disclosure of Marketing-Related Data Sharing – California residents may request information regarding personal data disclosed to third parties for direct marketing purposes.
Right to Annual Request – You may submit one such request per calendar year.
Right to Removal of Content (California Minors) – Residents under the age of 18 may request deletion or removal of posts shared through Zykrr’s Offerings.
How Zykrr Complies
Zykrr responds to Shine the Light requests by confirming whether any disclosures for marketing purposes were made and, where applicable, providing a free report detailing the categories of information shared and the third parties involved. Requests can be directed to support@zykrr.com, and Zykrr will honor one verified request per calendar year. For minors, we enable deletion of posts or content via account tools or direct support. While deletion features are available, users should be aware that removal of posts may not guarantee comprehensive erasure across all systems.
Accountability Matrix
Changes to This Privacy Policy
Zykrr may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or business requirements. If material changes are made, we will provide notice via email, on our website, or within our Services prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us at:
Support: support@zykrr.com
Data Protection Officer (DPO): dpo@zykrr.com
