Privacy Policy

Last updated: November 13, 2025

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use ZotoFace and tells You about Your privacy rights and how the law protects You. By using ZotoFace You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Capitalized words used in this Privacy Policy have the meanings given in the Definitions section below.

Definitions

• Account means an account created for You to access Our Service.
• Application / Service refers to ZotoFace, the facial-recognition attendance and access-management software provided by the Company.
• Company (referred to as "We", "Us" or "Our") refers to Zoto ERP / ZotoFace.
• Country refers to: Pakistan.
• Device means any device that can access the Service such as a computer, a mobile phone or a tablet.
• Personal Data means any information that identifies or can identify an individual.
• Service Provider means third-party companies or individuals that process data on Our behalf.
• Usage Data is data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
• You means the individual or organization using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using ZotoFace, We may ask You to provide certain personally identifiable information that can be used to contact or identify You, including but not limited to:

• Full name
• Email address
• Phone number
• Employee ID or other account identifiers
• Photographs and biometric templates (facial recognition data) — collected and used only for attendance and access management as described below

Usage Data

Usage Data is collected automatically when using the Service and may include IP address, browser type, device information, pages visited, timestamps (check-in / check-out times), and other diagnostic data.

How We Use Your Personal Data

We may use Personal Data for the following purposes:

• To provide and maintain Our Service, including attendance verification and access control.
• To manage Your Account and authentication.
• To calculate payroll and integrate with HR/Payroll modules (when enabled by your organization).
• To contact You regarding Service updates, security notices, and support communications.
• To detect, prevent and address technical or security issues (including fraud and misuse).
• For compliance with legal and regulatory obligations.
• For analytics and improvement of the Service (aggregated/anonymized where possible).

Biometric Data — Special Notice

ZotoFace collects and processes facial recognition data and related biometric templates to authenticate users for attendance and access control. Biometric data is considered sensitive in many jurisdictions; We process such data only when necessary for the stated operational purposes and subject to applicable law and explicit organizational consent where required. Biometric templates are stored in encrypted form and are not used for any purpose outside of authentication and authorized administrative processes.

Retention of Your Personal Data

We retain Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. Usage Data may be retained for internal analysis for a limited period unless longer retention is required for security or legal reasons.

Transfer of Your Personal Data

Your information may be processed in locations outside Your jurisdiction. By submitting information You consent to such transfers. We take commercially reasonable steps to protect data transferred across borders.

Delete Your Personal Data

You have the right to request deletion of Personal Data We hold. In many cases You can manage or delete certain data via the Service account settings. To request deletion or help with removal, contact zeeshan@firm11.com. Please note We may retain certain information where legally required.

Disclosure of Your Personal Data

We may disclose Personal Data in the following situations:

• With Service Providers who perform services on Our behalf (e.g., cloud hosting, analytics) under confidentiality obligations.
• With affiliates or business partners when necessary to deliver the Service features You or Your organization enabled.
• For business transfers (e.g., merger, acquisition), where Personal Data may be among transferred assets.
• To comply with legal obligations or in response to valid governmental requests.

Security of Your Personal Data

We use commercially reasonable technical and organizational measures to protect Personal Data, including encryption of stored biometric templates and TLS for data-in-transit. However, no method of transmission or electronic storage is 100% secure and absolute security cannot be guaranteed.

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect Personal Data from anyone under 13. If You believe We have collected such data, contact Us and We will take steps to delete it as required by law.

Links to Other Websites

ZotoFace may contain links to third-party sites. We are not responsible for the content or privacy practices of those sites and recommend You review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, We will post the updated Policy on this page and update the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or requests regarding Your data, contact us at:

• Email: zeeshan@firm11.com