Privacy Notice

1. Who we are and scope

ZonOne is operated by HELODA PTE. LTD., a company registered in Singapore. In this notice, “ZonOne”, “we”, “us”, and “our” refer to HELODA PTE. LTD.

This notice applies to zonone.com, the ZonOne application atapp.zonone.com, and related support interactions. It does not govern a third-party service you connect to ZonOne; that service’s own terms and privacy notice continue to apply.

2. Data we collect

The data involved depends on how you use ZonOne and which connections and permissions you enable.

Information you provide

• Account and business contact details, such as your name, email address, company, and role.
• Workspace settings, preferences, and information you choose to add to the service.
• Messages, files, and other information you send when requesting support.
• Subscription and transaction records associated with your account.

Information from services you connect

• Authorization tokens and identifiers required to maintain the connection you approve.
• Seller, advertiser, marketplace, profile, and account identifiers.
• Advertising data, including campaigns, ad groups, targets, search terms, bids, budgets, placements, and performance metrics.
• Product listing, catalog, sales, inventory, order, and other operational data available through the permissions you select, where relevant to the ZonOne features you use.

Technical and usage information

• Device, browser, IP address, timestamps, and diagnostic or security logs.
• Actions taken in the service and feature usage needed to operate, secure, and troubleshoot it.
• Strictly necessary cookies or similar storage used for sign-in, security, and preferences.

3. How we use data

We collect, use, and otherwise process data where needed to:

• create and administer accounts, workspaces, connections, and permissions;
• provide the Ads Manager, Automation, Campaign Builder, analysis, and related ZonOne features;
• carry out actions that an authorized user configures or approves;
• provide support, diagnose errors, maintain reliability, and secure the service;
• manage subscriptions, enforce our agreements, and keep business records;
• understand and improve how ZonOne performs; and
• comply with law and protect the rights, safety, and integrity of users, ZonOne, and others.

We do not use data obtained from a connected Amazon account for third-party advertising or for a purpose unrelated to providing and securing ZonOne.

4. Connected services and consent

When you authorize a connection, the authorization screen identifies the service and permissions requested. ZonOne then accesses and uses the connected data to provide the features associated with that connection. You should only connect an account if you are authorized to do so.

You may withdraw your authorization by disconnecting the service in ZonOne or through the connected service, where that option is available. Disconnecting stops new collection through that connection but may also stop related features. It does not affect processing that occurred before withdrawal, and some records may remain where retention is required for security, legal, or legitimate business purposes.

5. How we disclose data

We may disclose data only as reasonably necessary to:

• authorized members of your organization or workspace;
• service providers that host, maintain, secure, support, or otherwise process data for ZonOne under appropriate obligations;
• Amazon or another connected service when carrying out an action you configure or approve;
• professional advisers, regulators, courts, or authorities where required or permitted by law;
• a successor in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to applicable safeguards; or
• another party at your direction or with your consent.

Certain service providers

Cloudflare provides web application firewall, TLS proxy, and private infrastructure services. OpenAI and Anthropic process limited, seller-authorized Amazon Ads metrics through secure APIs to generate analyses and recommendations within ZonOne. They do not receive Amazon credentials or buyer personal information from ZonOne for this purpose. We do not permit them to use this data for advertising or their own independent purposes. Access and processing are isolated by tenant within ZonOne.

6. Amazon Data

We access Amazon Data only through permissions granted by an authorized seller and use it only to provide, maintain, secure, and support the ZonOne features that seller uses. ZonOne does not sell, license, monetize, publicly disclose, or use Amazon Data for advertising or an unrelated independent purpose.

Amazon credentials are not disclosed to OpenAI or Anthropic. Service providers may process only the limited data needed to perform their contracted function for ZonOne, subject to access controls and confidentiality obligations. Amazon Data is tenant-isolated within ZonOne and is not made available to other sellers.

7. Retention

We retain data only for as long as reasonably necessary for the purposes described in this notice. The period depends on the type of data, whether the account or connection remains active, the feature being provided, security and dispute needs, and applicable legal or contractual requirements. When data is no longer needed, we delete it or remove the means by which it can be associated with an individual, subject to technically necessary backup cycles.

8. Security and international transfers

We use reasonable administrative, technical, and organizational measures designed to protect data against unauthorized access, collection, use, disclosure, alteration, loss, or destruction. No method of transmission or storage is completely secure.

ZonOne is operated from Singapore and may use providers or infrastructure in other countries. Where personal data is transferred outside Singapore, we take steps required by applicable law to provide a comparable standard of protection.

9. Your choices and rights

Depending on applicable law and subject to relevant exceptions, you may ask to access or correct your personal data, withdraw consent, or request deletion of data that is no longer needed. An authorized workspace administrator may also manage team access and connected accounts in ZonOne.

We may need to verify your identity and authority before completing a request. Withdrawing consent or requesting deletion may prevent us from providing some or all of the service.

10. Children

ZonOne is a business service and is not directed to children. We do not knowingly request that a child create a ZonOne account.

11. Changes to this notice

We may update this notice when our practices, services, or legal obligations change. We will publish the updated notice here and revise the “Last updated” date. Where required, we will provide additional notice or request consent.

12. Contact us

For a privacy request, question, or suspected privacy or security incident, emailsupport@zonone.com. To help us route an incident promptly, use the subject “Privacy or security incident” and include the affected workspace, a concise description, and a way to contact you. Do not include passwords, access tokens, or other credentials in your message.

We acknowledge reports, record and track them through investigation, communicate with the reporter when appropriate, and resolve or escalate them under our incident-response process.

You may also write to us and mark the correspondence “Attention: Data Protection”: