Privacy Policy

Zebest protects user information across its services, including ZEBEST BUSINESS and transaction-protection, payment, payout, dispute and support services.

Information we collect

• Account and identity information such as phone number, name, business name, username, role, branch and NIDA where required for the relevant service.
• Transaction, payment and payout details, including references, status and payout destination when those features are used.
• For ZEBEST BUSINESS: sales, purchases, stock, expenses, invoices, receipts, reports, customers, suppliers, branches and other business operating records.
• For workforce/industry features: employee, attendance and schedule information, plus records about other people such as customers, students, patients or suppliers that an authorized business enters.
• Location/geofence and device-proof information where features such as attendance or field work use it to validate an event and its security.
• Dispute, support and business attachments such as photos, PDFs, voice notes, documents or other evidence you choose to upload.
• Push notification token, device/session identifiers, device type, IP/network metadata, security/audit logs and essential technical information needed to operate the service.

How we use information

We use information to verify accounts, operate business and transaction features, generate reports/receipts, enforce permissions and attendance controls, prevent fraud, resolve disputes, provide support, send notifications and meet applicable audit, financial or legal obligations. We do not sell personal information and we do not use an advertising ID for advertising.

Service providers and business access

Information may be processed by providers of cloud infrastructure, authentication, database, storage, notifications, location/maps, communications or payments where the relevant feature requires them. In ZEBEST BUSINESS, business users with the appropriate roles and permissions may access records needed for their work. We share only what is necessary to provide, protect or lawfully operate the service.

Retention and security

We use authentication, permissions, session security and audit logging to protect information. Closed dispute/support media may be removed under the applicable retention policy. Transaction, accounting, payroll, attendance, dispute, security and audit evidence may be retained when needed for accounting, continuity, fraud prevention, security or legal obligations. For ZEBEST BUSINESS, an Owner-requested business/account deletion is scheduled 30 days ahead and can be cancelled before the deletion date; immutable financial/legal/audit evidence is not cascade-deleted.

Account and data deletion

For general Zebest services, use the account deletion page. For ZEBEST BUSINESS, use ZEBEST BUSINESS Account & Data Deletion; the Root Owner uses the canonical Business deletion flow with a 30-day cooling-off/recovery period. Personal data that is no longer required is deleted or minimized, while financial, audit, security or legally required records may remain in a retention-safe form.

Privacy contact

If you can sign in, use the Help Center inside Zebest. If you cannot sign in, send your question here: