Draft — subject to legal review before publication.
Privacy Policy
This Privacy Policy explains how RDMD Engineers and Consultants ("we", "us"), a sole proprietorship that operates NewZonix, collects, uses, shares and protects information when you use NewZonix.
Effective date: 26 September 2026 · Version: 2026-09-26
1. Who we are and what this policy covers
NewZonix is a software service that helps businesses create, store and publish content using automated and AI-based tools, and connect their own accounts on third-party platforms. NewZonix is operated by RDMD Engineers and Consultants.
This policy covers information about the people who register for and use NewZonix, and information our customers submit to it. When you put information about other people into NewZonix - for example photos of people, the phone numbers of people you message on WhatsApp, or contact details shown on a website you publish - you decide why that information is used, and you are responsible for having a lawful basis and any permission required to use it. We process it to provide the service to you.
Privacy laws differ between countries. This policy describes our practices; it does not claim that those practices satisfy every law in every jurisdiction. Rights you have under the law that applies to you are not reduced by this policy.
2. Information we collect
Account information. Your email address, a password (which we store only as a one-way Argon2 hash, never in readable form), your name if you provide it, and a personal contact phone number if you add one to your profile.
Invitations. Where an account is created by invitation, we store the email address the invitation was sent to and whether the invitation has been used or has expired.
Business information you provide. Your business name and description, industry, contact email and phone number, billing country and region, and settings; and brand details such as brand name, tagline, colours, typography, tone of voice and logo.
Content you submit. Prompts and instructions you enter, and reference images you upload (PNG, JPEG or WEBP), including the original file name and size. Uploaded images may contain people, faces or other personal information - only upload material you are entitled to use.
Content generated for you. Generated images and logos, together with the inputs used to create them and which AI provider and model produced them, and the content of websites you build.
Published websites. If you publish a website built with NewZonix, the content you publish (which can include business contact details you entered) becomes publicly accessible at its public address.
Your AI provider credential. The AI features use an API key for an AI provider that you supply (currently OpenAI). We store it encrypted and use it only to check with that provider that it works when you save it, and to send your requests to that provider. See section 4.
Connected accounts. When you connect a Facebook Page, Instagram account, LinkedIn profile or YouTube channel, we store the access tokens that platform issues (encrypted), identifiers and display names for the connected account, and records of publishing requests and their results.
WhatsApp. When you connect your WhatsApp Business account, we store its account identifier, phone number identifier, display phone number, verified business name, access token (encrypted), how it was connected and, if you register the number through NewZonix, when you did so (never the PIN). When people message your connected number, or a message you sent is delivered, read or fails, Meta notifies us; we store the message identifier, the type of message or the delivery status, its time, any error code and the other person's WhatsApp number - not the content of any message.
Payment and subscription information. The plan you buy, amounts, currency, tax, any promotion applied, your billing country and region, payment status, and the order and payment identifiers issued by our payment processor, Razorpay. Card and other payment instrument details are entered in Razorpay's checkout; we do not receive or store them.
Usage and audit records. Your subscription status, usage counts against your plan's limits, and records of significant account actions - for example connecting an account, sending a WhatsApp message, or deleting an account - kept for security and accountability. Our servers also keep operational logs; our logging is configured to redact designated password, token and secret fields.
Legal acceptance records. When you accept the Terms of Service and this Privacy Policy, we record which document and which version you accepted, and when. These records are kept as evidence of your acceptance and cannot be edited.
Advertisers and advertisement clicks. If you ask to advertise on the NewZonix website, we store the business and contact details, advertisement text and destination address you send, our review notes and the commercial terms and payment status agreed with you, and use them only to handle your request and run the campaign. When anyone clicks an advertisement, we add one to that advertisement's click count - nothing about who clicked is stored - and send them to the advertiser's website, which has its own privacy practices.
Information stored in your browser. When you sign in, the NewZonix web application stores your session tokens and email address in your browser's local storage so you stay signed in. Our servers keep a record of each sign-in session - containing a one-way fingerprint of the session token, not the token itself - so that sessions can be renewed, and ended when you sign out. The NewZonix application does not currently use analytics or advertising trackers, and does not set its own cookies. Third-party services we load (such as Razorpay's checkout) may use their own cookies under their own policies.
3. How we use information
- to create and secure your account and authenticate you;
- to provide the service, including generating content you request and storing it for you;
- to publish content or send messages through connected platforms when you instruct us to;
- to process payments, apply your plan's features and limits, and keep financial records;
- to protect the service, investigate misuse and keep security and audit records;
- to respond to your questions and requests; and
- to comply with legal obligations.
We do not sell your personal information, and we do not use your content to train AI models of our own.
4. AI processing
NewZonix's AI features currently run using an AI provider credential that you supply (currently an OpenAI API key). We store that credential encrypted and use it only to check that it works when you save it and to send your requests. When you use an AI feature, the relevant inputs - your prompts and instructions, the business and brand details the feature uses, and any reference images you choose - are sent to that provider under your own account with it, and the provider returns the result.
How the AI provider handles and retains that data is governed by your own agreement with that provider, not by NewZonix. We do not control the provider's retention of your requests.
AI output is produced automatically. It can be inaccurate, and it can unintentionally contain names, faces, likenesses or other information you did not intend. Review generated content before you use or publish it. Do not include sensitive personal information about yourself or others in prompts or uploads unless it is necessary and you are entitled to use it.
5. Who we share information with
- The AI provider whose credential you supply (currently OpenAI) - to generate content, under your own account with that provider (see section 4).
- Razorpay - to process payments for your plan.
- Our file storage provider - uploaded and generated files are kept in S3-compatible object storage.
- Hosting and infrastructure providers - which run the servers and databases for NewZonix.
- Platforms you connect - Meta (Facebook, Instagram and the WhatsApp Business Platform), LinkedIn and Google (YouTube). We exchange information with these platforms only to connect your account and to carry out actions you request (see section 6).
- Google Maps - if you add a location to a website you publish, the website may show an embedded Google Maps view. People who visit that website then interact with Google, which provides the map under its own terms and privacy policy.
- Authorities and others where required - where we are required to by law, or where it is necessary to protect rights, safety or the service.
Each third party handles information under its own terms and privacy policy. We are not responsible for how a platform you connect treats content you publish or messages you send there.
6. Connected platforms and WhatsApp
You connect each platform by signing in to it (for WhatsApp, through Meta's own onboarding screens, or by providing its credentials). Currently:
- Facebook Pages - we can publish photo posts to a Page you connect, when you ask us to.
- LinkedIn - we can publish text posts to your LinkedIn profile, when you ask us to.
- Instagram and YouTube - you can connect an account, but publishing to these platforms is not currently available.
- WhatsApp Business - you can send WhatsApp message templates approved by Meta from your own WhatsApp Business account. This is messaging, not publishing: when you send a message, the recipient's phone number, the template you choose and its contents are sent to Meta to deliver it. You are responsible for obtaining each recipient's permission to be contacted, as WhatsApp's own policies require.
Your connected accounts remain yours. When you disconnect an account in NewZonix, we delete the access tokens we stored for it; for LinkedIn and YouTube we also ask the platform to revoke our access, and for a WhatsApp account connected through Meta's onboarding we remove our app's subscription to it. You can also revoke NewZonix's access at any time from each platform's own account, app or business settings.
7. How we protect information
Security measures currently in place include:
- passwords stored only as one-way Argon2 hashes;
- access tokens for connected platforms and stored AI provider credentials encrypted (AES-256-GCM) before they are saved, and never returned to your browser;
- database-level row security on the tables that hold customer account and content data, restricting each customer's records to that customer;
- uploaded reference images and logos stored under customer-specific paths and made available through links that expire after 15 minutes;
- role-based access controls, request rate limiting, and standard security headers on our API;
- sign-in sessions that stop working immediately if an account is suspended or deleted; and
- logging configured to redact designated password, token and secret fields.
No system connected to the internet can be guaranteed to be completely secure. You are responsible for keeping your password and devices secure. If a security incident affects your personal information, we will act as applicable law requires.
8. International processing
The service providers listed above may store or process information in countries other than the one you are in, where data protection laws may differ from those in your country.
9. How long we keep information
There are currently no fixed retention periods or automatic deletion schedules. We keep your information while your account exists.
You can ask us to delete your account (see our Data Deletion page). After your account is deleted, the following records may remain, pending a defined retention policy:
- payment records;
- subscription records;
- audit records, including the record of the deletion itself;
- an archived internal account record, which contains internal identifiers and account status but no profile or contact details;
- records of which versions of the Terms of Service and Privacy Policy were accepted, and when;
- invitation records, which contain the email address an invitation was sent to.
10. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your personal information, and to object to or restrict certain processing. You can view and update your profile and business profile in the application. Other requests are handled by our team on request: contact us using the details below. We may need to verify your identity before acting on a request, and we will respond within the time required by the law that applies to you.
11. Minimum age
NewZonix is a business service for people aged 18 or over. Do not use NewZonix if you are under 18, and do not submit personal information about children unless you are lawfully permitted to do so.
12. Changes to this policy
We may update this policy as NewZonix changes. We will post the updated version on this page with a new effective date.
13. Contact us
For privacy questions or requests, contact RDMD Engineers and Consultants at privacy@newzonix.com.