Privacy Policy

Zero Technology LLC (“Zero Technology”, “we”, “us”, or “our”) is a software company headquartered at Regis Place, 120 Myngat, Khan Uul District, Ulaanbaatar, Mongolia. This Privacy Policy explains how we handle personal data when you visit zerotech.mn, contact us, apply for a job with us, or do business with us as a client or partner.

Our products (such as our loyalty, POS, and workforce platforms) are often operated by our business clients. When we process personal data inside those products on a client's behalf, the client is responsible for that data and its own privacy notice applies; we act as its service provider under a written agreement. Some of our consumer apps also have their own product-specific privacy policies, which take precedence for those apps.

We collect only what we need, in the following ways:

• Information you give us. When you contact us, our contact form opens an email in your own mail app containing your name, company, email address, and message. We receive these details only if you send that email. If you apply for a role, we receive your CV, contact details, work history, and anything else you choose to include.
• Business contact information. If you represent a client, partner, or supplier, we keep your name, job title, company, email, and phone number so we can manage our relationship and contracts.
• Technical information. Like most websites, our hosting infrastructure automatically records basic server logs — IP address, browser type, requested pages, referring URL, and timestamps — to keep the site secure and working.

We do not intentionally collect sensitive data (such as health, religious, or biometric information) through this website, and we ask that you do not send it to us.

We use personal data to:

• respond to your enquiries and provide information you request;
• assess job applications and communicate with candidates;
• negotiate, perform, and manage contracts with clients and partners;
• operate, secure, and improve our website and detect abuse or fraud;
• comply with legal, accounting, and regulatory obligations.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects on you.

We process personal data in accordance with the Law of Mongolia on Personal Data Protection and, where it applies to you, the EU General Data Protection Regulation (GDPR). Depending on the purpose, we rely on:

• Consent — for example, when you send us your CV or ask us to keep it for future roles;
• Contract — to take steps at your request before entering into, or to perform, an agreement with you;
• Legitimate interests — to run and protect our business and website, where those interests are not overridden by your rights;
• Legal obligation — where the law requires us to keep or disclose information.

This website does not use advertising or analytics cookies, and we do not track you across other websites. We may use strictly necessary technologies required for the site to function securely. If we introduce optional cookies in the future, we will update this policy and ask for your consent where required.

We share personal data only when necessary, with:

• Service providers who host our website, email, and IT systems, bound by contracts that require them to protect your data and use it only on our instructions;
• Professional advisers such as lawyers, auditors, and accountants, under duties of confidentiality;
• Authorities when required by law, court order, or to protect the rights, property, or safety of Zero Technology, our clients, or others;
• A successor business in connection with a merger, acquisition, or sale of assets, subject to this policy.

Some of our service providers may store or process data outside Mongolia. When this happens, we take reasonable steps — including contractual safeguards — to ensure your data receives a level of protection consistent with this policy and applicable law.

We keep personal data only as long as needed for the purpose it was collected:

• enquiry correspondence — up to 2 years after our last contact;
• job applications — up to 12 months after the hiring decision, unless you ask us to delete it sooner or consent to a longer period;
• client and contract records — for the period required by tax and accounting law;
• server logs — typically no longer than 90 days.

After that, we delete or anonymise the data securely.

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls based on least privilege, regular updates, and staff confidentiality obligations. No system is completely secure, but we work continuously to protect your data and will notify you and the relevant authorities of a personal data breach where the law requires.

Subject to applicable law, you have the right to:

• access the personal data we hold about you and receive a copy;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data or restrict how we use it;
• object to processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with a data protection authority.

To exercise these rights, email developer@zerotech.mn. We may need to verify your identity before acting on a request, and we aim to respond within 30 days.

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time to reflect changes in our practices or the law. The latest version will always be published on this page with its effective date. If we make significant changes, we will provide a more prominent notice.

For any questions about this policy or how we handle your data, contact: