This page is a draft and is still being reviewed.
Privacy policy
Last updated 25 October 2026
Zendue sends payment reminders for your invoices and reads your customers' replies. To do that, it needs your invoice data. This page explains, in plain language, what we hold, why, who helps us run it, how long we keep it, and what you can do about it. Zendue is run by Soham Bhole, trading as Zendue, Plot no. 5, 'Yogi', Varsha Colony, Jalgaon, Maharashtra ("we", "us").
Your data and your customers' data
Two kinds of personal data pass through Zendue. Your own account details are ours to look after: we decide how they're used, as this page describes. Your customers' details (their names, email addresses and what they write back) are data you give us so we can chase payments on your behalf. For that data, you decide what goes in and why, and we act on your instructions. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), that makes your business the data fiduciary for your customers' data, and us the processor working for you.
What we hold
About you and your business:
- Your business name and the email address you sign in with.
- Your password, stored only as a one-way hash (bcrypt). We can't read it, and nor can anyone who sees our database.
- If you turn on two-factor login: the authenticator secret (encrypted) and your recovery codes (stored only as keyed hashes).
- A record of sign-ins and account changes: when they happened, the IP address and the type of browser. You can see it on your Account page.
- Your subscription payments to Zendue: amounts, dates, and the Razorpay order and payment references. Razorpay handles your card or UPI details; we never see or store them.
- Your settings, such as reminder timing and wording.
About your customers, from the invoices you upload or type in:
- Customer names and email addresses.
- Invoice numbers, amounts, due dates and payment status.
- The reminders we send them, their replies, how we read each reply (for example "promised to pay on 12 March"), and any dates they promise.
- What the AI decided to do next and why, and any alerts raised for you.
If you contact us through the website form: your name, email, phone number, company and message. These are emailed to our team and not added to any product account.
Server logs: our servers record technical events (for example "reminder sent"). Where a log line mentions a customer's email address, only its first letter and domain are written (r***@example.com).
Why we use it
- To send payment reminders to your customers in your business's name, at sensible times.
- To read customer replies and work out what they mean, so you only hear about what needs you.
- To show you your dashboard, customer histories and alerts.
- To bill you for Zendue after your free trial.
- To keep your account secure, for example by spotting unusual sign-ins and limiting repeated guesses.
- To answer your questions, and to meet our obligations under Indian law.
We don't sell your data or your customers' data, we don't show ads, and we don't use your data to train AI models of our own. We email your customers only about the invoices you've given us.
Who processes it for us
We use a small number of service providers to run Zendue. Each one gets only what it needs for its job:
| Provider | What it does | What it sees |
|---|---|---|
| Neon | Database | Everything listed above under "What we hold" is stored there. |
| Render | Hosting: runs Zendue's servers | All data passes through it while Zendue is working, plus server logs. |
| Cloudflare | Domain name and network services | Technical connection details such as IP addresses. |
| Resend | Sends reminder emails and receives customer replies | Customer names and email addresses, reminder contents and replies. Also your email, for account emails. |
| Google (Gemini) | AI that reads customer replies to work out what they mean, and helps decide the next follow-up | The text of customer replies. For follow-up decisions, also the invoice number, amount, how overdue it is and the customer's payment history. We don't send it customer email addresses, but a reply may include whatever the customer wrote, such as their name or signature. We use Google's paid Gemini API, under whose terms Google doesn't use this data to improve its products; it keeps it for a limited time only to detect abuse. |
| Razorpay | Takes your subscription payments | Your payment details and the amount. Razorpay keeps its own payment records under its own policies. |
| Google Fonts | Typefaces for the website | Your browser's IP address when it loads the fonts. |
| Google Analytics | Counts visits and sign-ups on zendue.in | The pages you view, how you arrived, your device and browser type, and your approximate location from your IP address. Never your invoices or your customers' details. |
Some of these providers store or process data outside India: our database, servers and email provider are in the United States, and Google may process analytics data in other countries. The DPDP Act allows this except to countries the Government of India restricts, and we'll stop using any provider in such a country.
How long we keep it
- We keep your business's data for as long as your account is open, so your history and reminders keep working.
- When you delete your account, everything is removed from our live database at once. Copies can stay in our database provider's backup and restore history for up to 6 hours before they're overwritten. Nobody uses them in that time.
- Server logs are kept by our hosting provider for up to 7 days.
- If your free trial ends and you don't subscribe, your account becomes read-only and your data stays for 6 months, so you can download it or carry on later. After that we delete the account and all its data. We email you at least 30 days before, and if that email goes out late, the deletion waits until 30 days after it. A business that has paid for Zendue at any point is never deleted this way.
- Contact form messages stay in our inbox for up to 12 months.
Your rights
Under the DPDP Act you can:
- Get a copy of your data. On your Account page, "Download my data" gives you everything we hold for your business as one Excel file, at any time, even after your trial ends.
- Correct it. You can edit invoices and customer details in your dashboard. For anything else, email us.
- Delete it. On your Account page, "Delete my account" permanently deletes your business and all its data. It can't be undone.
- Withdraw consent. Deleting your account withdraws it. You can also email us.
- Nominate someone to act for you if you die or can't act yourself, by emailing us.
- Complain. Contact our grievance officer (below). If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
If you're one of our users' customers and you got a reminder from a business through Zendue: that business decides what data about you it gives us, so please contact them first. You can also write to our grievance officer and we'll pass your request on and help them deal with it.
How we protect it
Data is encrypted in transit (HTTPS), passwords are hashed, every business's data is kept separate from every other's, and you can add two-factor login. Our security page describes exactly what's in place.
If something goes wrong
If we find out that personal data we hold has been accessed, changed, lost or leaked without permission (a "breach"), we will:
- email the businesses affected without delay, saying what happened, what data was involved, what we're doing about it and what you should do;
- give you the details you need to tell your own customers, where their data is involved;
- report it to the Data Protection Board of India, and to CERT-In, within the time limits Indian law sets.
Cookies
We use one cookie to keep you signed in. It can't be read by scripts on the page and is sent only to Zendue. Google Analytics also sets its own cookies (named _ga) so we can count visits and see which pages lead to sign-ups; they never carry your invoices or your customers' details. You can block them in your browser's settings. We don't use advertising cookies.
Who Zendue is for
Zendue is a service for businesses. It isn't meant for anyone under 18, and we don't knowingly collect data about children.
Changes to this policy
If we change this policy in a way that matters, we'll email account holders before the change takes effect and update the date at the top.
Contact and grievances
For any question about your data, or to make a complaint, contact our grievance officer. We'll reply within 7 working days.
- Grievance officer: Soham Bhole
- Email: sohamybhole02@gmail.com
- Post: Plot no. 5, 'Yogi', Varsha Colony, Jalgaon, Maharashtra