Privacy Policy

Last updated: September 2026

This Privacy Policy explains how GenHub Inc Pte Ltd (UEN 202334943N), trading as Zolin ("we", "us", "our"), collects, uses, discloses and protects personal data when you visit zolin.io, enquire about our services, or work with us.

Zolin is registered in Singapore and works with clients globally. Our home regime is Singapore's Personal Data Protection Act 2012 (PDPA). Where we work with clients in other markets, we also work under the regime that applies there: the Privacy Act 1988 in Australia, the UK GDPR in the United Kingdom, and the GDPR in the European Union. We name the regime that applies to you in your service agreement. Questions about this policy go to team@zolin.io or WhatsApp +65 8104 0297.

1. Who this policy applies to

Visitors to zolin.io
Owners, operations leads and staff at businesses who enquire about or use our services
Individuals whose personal data is processed as part of a system we build or run on a client's behalf

2. What personal data we collect

We collect personal data you provide directly to us, including:

Contact information: name, email address, WhatsApp or phone number
Business information: business name, your role, business address
Enquiry and communication data: messages sent to us by WhatsApp, email or a booking form, and notes from calls
Payment information: billing name and details, processed by our payment provider. We do not store full card numbers ourselves.
Engagement data: information about your operations, systems and processes that you share with us during a diagnosis or build

The contact form on zolin.io does not store anything on our website. It opens WhatsApp with your message pre-filled, and the message is then handled by WhatsApp under Meta's terms and this policy.

3. How we use personal data

To respond to enquiries and arrange fit calls
To scope, deliver, configure and maintain the services in your service agreement
To process payments and manage billing
To send service-related communications: updates, handover material, renewal notices
To improve our services based on how they are used
To comply with our legal obligations under Singapore law and any other law that applies to the engagement

We only use personal data for the purposes it was collected for, or for purposes directly related to them.

4. How we collect personal data

When you message us on WhatsApp, email us, or book a call
When you sign a service agreement, scope of work or NDA with us
When you share documents, access or data with us during an engagement
Through basic website analytics (pages visited, browser type) that help us improve zolin.io

5. Data processed inside systems we build

When we build or run a system for a client, personal data belonging to the client's customers, patients or staff may pass through it. In that context the client is the data controller and Zolin acts as a data intermediary (or processor, in GDPR terms). We process that data only to deliver the agreed services, never for our own purposes, and we do not retain copies after the engagement ends.

Systems are built inside the client's own accounts and tools wherever possible, so the data stays where the client already holds it
Clients remain responsible for obtaining the consents required from their own customers and for their own obligations as controllers
The specific tools, storage locations and retention settings for each build are documented in the handover material for that engagement

6. Disclosure of personal data

We do not sell personal data. We share it only with the service providers we need to deliver our services, and only to the extent necessary:

Third party	Purpose
Meta (WhatsApp Business)	Messaging with enquirers and clients
Calendly	Booking fit calls
Payment provider (named in your invoice)	Secure payment processing and invoicing
Google Workspace	Email, documents and calendar
AI model and automation providers used in a specific build	Named in the scope of work and handover material for that engagement
Website analytics	Understanding how zolin.io is used

We require service providers to maintain appropriate security standards and to use personal data only for the purposes it was shared for. We may also disclose personal data where required by law, regulation or an order of a competent authority.

7. Storage and security

We take reasonable security measures to protect personal data against unauthorised access, disclosure, copying, use or modification, including encrypted transmission (HTTPS), access controls limiting who in our team can see personal data, and keeping payment data within our payment provider's infrastructure. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cross-border transfers

Because our founders work from Singapore and Melbourne and our service providers operate internationally, personal data may be stored or accessed outside the country where it was collected. Where we transfer personal data across borders we take steps to ensure it receives a standard of protection comparable to the regime that applies to you, and we document the location of data for each build in the handover material.

9. Retention

Client contact and business data: for the duration of the engagement and up to two years after it ends, for legal and record-keeping purposes
Payment records: as required by Singapore financial record-keeping obligations
Data processed inside client systems: retained by the client under the client's own settings; Zolin does not retain copies after handover

10. Your rights

Depending on the regime that applies to you, you may have the right to access the personal data we hold about you, correct data that is inaccurate or incomplete, withdraw consent (subject to legal and contractual limits), and, under GDPR, request erasure, restriction or portability of your data. To exercise any of these rights, contact team@zolin.io or WhatsApp +65 8104 0297. We respond within the timeframe required by the regime that applies.

11. Cookies and analytics

zolin.io uses only the cookies needed for basic analytics and site functionality. We do not use advertising cookies. You can block cookies in your browser without affecting your ability to read the site or contact us.

12. Changes to this policy

We may update this policy from time to time. Changes take effect when posted here, and the date at the top of the page tells you when that was.

13. Contact

GenHub Inc Pte Ltd (UEN 202334943N), trading as Zolin
Email: team@zolin.io
WhatsApp: +65 8104 0297
Registered in Singapore.