Privacy Policy

1. Introduction & Overview

Zuno Suite ("we", "our", or "us"), operated by independent developer entity ZunoPad, provides productivity, research, and visual learning tools including the ZunoPad browser extension and web services at zunopad.in. We are committed to the highest standards of data privacy, user autonomy, and compliance with global and European data protection regulations, including the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the EU Digital Services Act (DSA).

All Zuno Suite extensions are built on a local-first, privacy-by-default architecture: your personal notes, study screenshots, drawn annotations, task checklists, and video timestamps remain stored locally on your device.

2. Information We Collect and Process

Under the principle of data minimization (GDPR Art. 5(1)(c)), we only process the minimum data strictly required to deliver and verify your service:

• Study Notes & Screenshots (Local Only): All captured video frames, canvas drawings, chapter hierarchies, timestamps, and written notes are saved exclusively inside your browser's local storage (chrome.storage.local). They are never transmitted to, monitored by, or stored on ZunoPad servers.
• Account & License Verification: If you purchase or activate ZunoPad PRO, we store your Google email address in our secure database to verify and maintain your active PRO license.
• Payment Information: Payments are processed directly through PCI-DSS certified payment gateways (Razorpay & PayPal). We receive transaction identifiers and verification status, but we never access, collect, or store your credit/debit card numbers, CVVs, bank credentials, or UPI PINs.
• No Browsing History or Telemetry: We do not track, log, analyze, or monitor your web browsing history, search queries, or the video content you watch.
• Website Usage Analytics (Website Only): When visiting our website (zunopad.in), aggregated, non-personally identifiable metrics (such as page views, button clicks like "Add to Chrome", and referral attribution) are processed via Google Analytics 4. All query parameters containing emails or credentials are automatically redacted before transmission. The Chrome Extension client contains zero analytics or telemetry code.

3. Legal Bases for Processing (GDPR Article 6)

For users located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process personal data under the following lawful bases:

• Performance of a Contract (Art. 6(1)(b)): Processing your email address and payment reference is necessary to issue and verify your digital PRO license and provide access to premium functionality.
• Explicit Consent (Art. 6(1)(a)): Used when you explicitly choose to connect optional third-party cloud synchronization (Google Drive or Microsoft OneNote). You may revoke this consent at any time directly in the extension settings.

4. Chrome Extension Permissions & Usage

In strict accordance with the Google Chrome Web Store Developer Program Policies, ZunoPad requests only minimal, justified permissions:

• host_permissions (<all_urls> / http / https): Required solely to locate the active HTML5 <video> element on educational portals and render the local snapshot overlay. It does not monitor or collect browsing traffic.
• storage & unlimitedStorage: Required to persist high-resolution study screenshots and organized notebook folders locally on your device without storage limits.
• activeTab: Used strictly when you trigger a note capture or shortcut to capture the active lecture frame.
• scripting: Used strictly to safely attach the local note-taking overlay when opening the extension on previously restored browser tabs.
• identity: Used exclusively to authenticate your Google or Microsoft account when you explicitly initiate cloud sync or license verification.

5. Google API Services & Limited Use Disclosure

ZunoPad offers optional integration with Google Drive for backing up study notes. When connected, ZunoPad requests the https://www.googleapis.com/auth/drive.file scope. This permission is strictly restricted to files and folders created directly by ZunoPad (e.g., your ZunoPad/ backup folder). ZunoPad cannot and does not access, read, modify, or delete any other files in your Google Drive.

Google API Limited Use Policy: ZunoPad's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Zero Data Sale & Third-Party Transfers

We do NOT sell, rent, monetize, or trade your personal information, notes, or study data to third parties, data brokers, or advertising platforms under any circumstances.

Optional direct synchronization is supported for:

• Microsoft OneNote: Notes and images are synced directly from your browser to your OneNote notebook via Microsoft Graph API with your explicit authorization.
• Obsidian: Notes are exported to your local Obsidian vault via the Local REST API plugin without passing through external servers.
• Razorpay & PayPal: Secure PCI-DSS compliant payment processing for domestic and international checkouts.
• Website Analytics (Google Analytics 4): Our public website (zunopad.in) uses privacy-configured Google Analytics 4 (GA4) with automated IP anonymization, restricted data processing, disabled advertising personalization, and mandatory PII sanitization to measure anonymous traffic, conversion funnels, and referral attribution. Google Analytics is never embedded inside or loaded by the browser extension itself. For more information on how Google handles analytics data, visit Google's Partner Privacy Policy.

7. Your GDPR & Privacy Rights (Data Erasure & Portability)

Users in the EU, UK, and worldwide enjoy complete control over their personal data:

• Right to Access & Portability (Art. 15 & 20): You can export all your notes and images at any time as standard A4 PDFs or Markdown vaults directly from the ZunoPad dashboard.
• Right to Erasure / "To Be Forgotten" (Art. 17):
  • Local Data: You can delete individual notes, subjects, or your entire notebook at any time from the dashboard, or by uninstalling the extension.
  • License Record: To permanently erase your email address and license record from our server database, send an erasure request to zunopad.official@gmail.com. We will permanently delete your record within 30 calendar days. (Note: Erasing your license verification record will permanently deactivate PRO features).
• Right to Revoke Cloud Permissions: You can disconnect Google Drive or OneNote at any time directly in the extension settings or via your Google/Microsoft account security page.
• Right to Lodge a Complaint (Art. 77): EU residents have the right to lodge a complaint with an EU Supervisory Authority in their Member State if they believe their data rights have been infringed.

8. Security Safeguards

We employ industry-standard encryption protocols (HTTPS / TLS 1.3) for all external communications. We strictly prohibit remote code execution (eval / new Function) within the extension, ensuring complete code integrity and protection against injection attacks.

9. Data Controller & Contact Information

For any questions, feedback, or data privacy requests under GDPR or global standards, please contact our official Data Controller channel:

Official Privacy Contact: zunopad.official@gmail.com
Website: https://zunopad.in
Country of Operation: India