Privacy Policy
Zybim Technologies (OPC) Private Limited ("Zybim", "we", "us") operates the website at www.zybim.com and provides read-only Microsoft 365 and cloud security assessment services. This policy explains what information we collect, how we use it, and your rights. We are committed to handling your data responsibly and transparently.
Who we are
Zybim Technologies (OPC) Private Limited is the data controller for the information described here. If you have any questions about this policy or your data, contact us at kiran.dk@zybim.com.
Information we collect
Information you provide. When you request an assessment, use our tools, or contact us, we collect the details you submit — typically your name, work email address, company name, and phone number.
Assessment data. When your organization's administrator grants consent, we access read-only security posture, configuration, licensing, and sign-in metadata from your Microsoft 365 and/or cloud environment through Microsoft's official APIs (Microsoft Graph and Azure Resource Manager). We use this to generate your assessment report. We do not access, read, or store your emails, files, documents, or user content. Access is granted on Microsoft's own consent screen and can be revoked by your administrator at any time from the Microsoft Entra portal, after which our access ends immediately.
Email security checks. When you use our email security checker, we read only publicly available DNS records (DMARC, SPF, DKIM, MTA-STS) for the domain you enter. This requires no access to any account.
Usage data. Like most websites, we collect standard analytics (pages visited, approximate location, device/browser type) to understand and improve our service. We use Microsoft Application Insights for this purpose.
How we use your information
We use the information we collect to: deliver the assessment or check you requested; generate and send your reports; respond to your enquiries; provide the services you engage us for (remediation, licensing, monitoring); and, where you have opted in, follow up with relevant information about our services. We do not sell your personal information to third parties.
Legal basis
Where applicable law requires a legal basis for processing (such as the GDPR or India's Digital Personal Data Protection Act), we rely on your consent (which you may withdraw at any time), the performance of a contract with you, and our legitimate interests in operating and improving our services.
Data sharing
We share data only as needed to operate our service: with Microsoft (as the platform providing the APIs and our hosting infrastructure), and with service providers who help us run the business under appropriate confidentiality obligations. We may disclose information where required by law. We do not otherwise share your personal data.
Data retention
We retain your contact details and assessment results for as long as needed to provide our services and for a reasonable period afterwards, unless you ask us to delete them. You can request deletion at any time (see "Your rights" below).
Data security
We use Microsoft Azure infrastructure and follow security best practices to protect your data, including encryption in transit, least-privilege access, and read-only permissions. No system is perfectly secure, but we take the protection of your information seriously — it is core to what we do.
Your rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email kiran.dk@zybim.com and we will respond within a reasonable time.
International transfers
We are based in India and use Microsoft Azure data centres. Where your data is transferred across borders, we rely on the safeguards provided by Microsoft's infrastructure and applicable data-protection frameworks.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the latest revision. Material changes will be reflected on this page.
Contact
Zybim Technologies (OPC) Private Limited
Email: kiran.dk@zybim.com
Website: www.zybim.com
This policy is provided as general information and is not legal advice. We recommend having it reviewed by a qualified legal professional for your specific circumstances and jurisdictions.