Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to personal and organizational data processed by ZYROM (SMC-PVT) LTD. across our corporate website (https://zyrom.com), our client engineering engagements, and our 7 proprietary software brands: Postabi (postabi.com), XSoft (xsoft.pk), Profylio (profylio.com), Wasender (wasender.online), EURL (eurl.site), MeraSafar (merasafar.com), and Asal Pakistan (asalpakistan.com).

2. Information We Collect

We collect information to provide robust software services and maintain corporate compliance:

• Contact & Identification Data: Name, work email address, phone/WhatsApp number, company affiliation, and job title when you submit inquiries or register for accounts.
• Product & Technical Usage Data: IP addresses, browser types, device identifiers, and system interaction logs when interacting with our web platforms.
• Enterprise Billing Data: Payment transaction metadata handled securely via Stripe or PayPal. ZYROM does not store raw credit card numbers on local infrastructure.
• WhatsApp Message Metadata: Message delivery timestamps, phone numbers, and template delivery receipts processed via Postabi using the official Meta WhatsApp Cloud API.

3. WhatsApp Business API & Meta Tech Partner Terms

Under our verified Meta Tech Partner brand Postabi (verified December 12, 2025), customer communications sent through the WhatsApp Business API are processed according to strict Meta developer data policies:

• We do not sell, rent, or lease end-customer messaging content or contact databases to third parties.
• All messaging payloads are transmitted over TLS-encrypted connections directly to Meta Cloud API servers.
• Customers retain full data ownership over contact lists, tags, and broadcast histories.
• Notice: Only Postabi holds Meta Tech Partner status; no other ZYROM brand claims Meta partnership.

4. Cross-Border Transfers & Compliance

ZYROM operates across three primary international markets: Pakistan, the United States (USA), and the United Kingdom (UK). Data is processed adhering to applicable regional frameworks:

• Pakistan: Adherence to the Prevention of Electronic Crimes Act (PECA) and relevant SECP enterprise regulations.
• United Kingdom: Alignment with UK GDPR principles of transparency, minimization, and purpose limitation for UK clients.
• United States: Commercial data compliance ensuring explicit opt-outs and secure transactional records.

5. Data Retention & Security Measures

We apply defense-in-depth security principles. Relational data in MySQL and Oracle databases is safeguarded by strict firewalls, role-based access controls, encryption at rest, and automated backup routines. We retain customer data only as long as required to fulfill contractual obligations or legal requirements under SECP corporate law.

6. Contacting the Data Protection Officer

For questions regarding this policy, data subject access requests, or deletion of personal data across our 7 brands, contact CEO Ali Raza Jatoi directly at:

ZYROM (SMC-PVT) LTD.
M80, Ashyana Shopping Center, Gulberg III, Lahore, Pakistan
Email: aliraza@zyrom.com
WhatsApp: +92 334 4655700