Privacy Policy
Last updated: October 20, 2026
At Zynocode Labs, operated by Zynocode IT Solutions, we prioritize the protection and confidentiality of your personal data. This Privacy Policy explains our data processing practices, emphasizing our client-side architectural paradigm, what information we collect, how it is used, and your rights under Indian privacy regulations, including the Digital Personal Data Protection Act, 2023 (DPDP Act 2023) and the Information Technology Act, 2000 (IT Act 2000).
1. Our Core Principle: Client-Side Security
The vast majority of utilities on Zynocode Labs (including the EMI Calculator, GST Calculator, Word Counter, JSON Formatter, Password Generator, and PDF tools) process data, files, and cryptographic keys locally within your browser memory. No files, text, or database configurations are uploaded to our servers for these operations. Once you close the browser tab, all processed memory is reclaimed by your operating system, eliminating potential server-side interception or leakage vectors.
2. Information We Collect
We collect and process personal data only when strictly necessary to secure, operate, and analyze our services.
- Account and Authentication Data: If you register or authenticate an account (leveraging NextAuth.js), we collect your name, email address, and profile picture. This data is stored in our managed PostgreSQL database (Neon).
- Usage and Quota Logging: To prevent abuse of resource-intensive tools (such as large PDF merges or heavy image compression), our systems track the number of daily runs per account or IP. We record the tool ID and execution count.
- Analytics: We do not currently use third-party analytics or advertising trackers. If we add analytics in the future, it will run only after you opt in through our cookie preferences.
- Payments: Paid plans and credit packs are processed by Razorpay. We receive the order and payment IDs and payment status; we never receive or store your full card, UPI or bank details.
3. Cookies and Tracking Technologies
We use only strictly necessary cookies to keep you signed in and protect forms. Full details, including browser storage and how to change your choices, are in our Cookie Policy.
| Cookie Name | Provider | Purpose | Retention |
|---|---|---|---|
| __Secure-next-auth.session-token | NextAuth.js | Maintains active logged-in sessions. | 30 Days |
| __Secure-next-auth.callback-url | NextAuth.js | Redirects user back to initial route post-login. | Session |
| __Host-next-auth.csrf-token | NextAuth.js | Cross-Site Request Forgery security verification. | Session |
4. Third-Party Services & Integrations
We communicate with the following third parties during your site interaction:
- Razorpay: Processes payments for paid plans and credit packs inside its secure checkout.
- Cloudflare: Delivers and protects the website (DDoS and bot protection).
- Hugging Face (hf.co / huggingface.co): Our AI-powered tools download pre-trained machine learning models directly into your browser via WebWorkers. Model downloads and connection handshakes are initiated with Hugging Face servers.
- jsDelivr (cdn.jsdelivr.net): Serves static open-source stylesheets and scripts for fast, global delivery.
- NextAuth Providers: Social login handshakes are processed via Google OAuth where authorized by you.
5. Data Retention
Account profiles are stored for as long as your registered account remains active. Usage logs are rotated every 30 days. Payment and invoice records are kept as long as required by Indian tax law.
6. User Rights
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to request access to, correction of, or erasure of your personal data stored on our servers. To execute these rights, or to file a grievance, please contact our Data Protection Officer (DPO) at [email protected].
7. Security
We deploy standard secure transit protocols (HTTPS/TLS) and strict Content Security Policies (CSP) to mitigate MITM, cross-site scripting (XSS), and clickjacking attacks. We enforce X-Frame-Options: DENY across all user dashboard and profile contexts.
8. Contact Information
If you have queries regarding this Policy, please contact our privacy compliance desk:
Email: [email protected]
Address: Zynocode IT Solutions, Jaipur, Rajasthan, India.