Last updated: August 12, 2026
This Privacy Policy explains how ZYA Products (referred to as "ZYA", "We", "Us" or "Our") collects, uses, stores, shares and protects Personal Data in connection with the ZYA website and ZYA Talent, Our workforce and human-resources management platform.
ZYA Talent may be accessed through mobile applications, web interfaces and related services. ZYA Talent is primarily a business-to-business service used by employers and other organizations ("Customer Organizations"). A Customer Organization may provide, control or require processing of employee and workforce information through ZYA Talent.
Depending on the circumstances and applicable law, the Customer Organization may act as the controller or other responsible party for workforce Personal Data, while ZYA acts as a service provider or processor on its behalf. ZYA may also process limited Personal Data for its own purposes, including account security, service operation, fraud prevention, support and legal compliance.
This Privacy Policy should be read together with any privacy notices, employment policies, consents or instructions provided by the relevant Customer Organization.
This Privacy Policy applies to the ZYA website, ZYA Talent mobile and web applications, and related authentication, notification, support, hosting and application services that link to this Privacy Policy.
It does not govern independent websites, applications or services operated by third parties.
Account means a user identity used to authenticate to and access ZYA Talent or another ZYA Service.
Customer Organization means an employer, company or other organization that subscribes to, administers or uses ZYA Talent.
Country refers to Saudi Arabia.
Device means a computer, mobile phone, tablet or other device used to access the Service.
Personal Data means information relating to an identified or identifiable individual.
Service means the ZYA website, ZYA Talent mobile and web applications, and related services covered by this Privacy Policy.
Service Provider means a third party that processes data or provides infrastructure or technology services in connection with the Service.
Usage Data means technical, diagnostic, security and interaction information generated through use of the Service.
User or You means an employee, manager, administrator, authorized representative, website visitor or other person accessing or using the Service.
Website refers to ZYA, accessible from https://www.zyaa.ai.
ZYA Talent is designed to help Customer Organizations manage employment and workforce processes. Customer Organizations generally determine which employee records are entered into ZYA Talent, why those records are processed, who may access them, how long they must be retained and which employment or legal obligations apply.
Users should direct questions, correction requests, objections and requests concerning employment records controlled by their employer to the relevant Customer Organization in the first instance. ZYA will support Customer Organizations with valid requests where required by contract or applicable law.
This may include name, work email address, user identifier, login and authentication information, account status, company or tenant association, role and access permissions.
This may include employee number or identifier, job title, position, department, division, business unit, branch or work location, manager, employment status, employment dates and other workforce profile information supplied by the Customer Organization.
This may include work contact details and other profile information made available by the Customer Organization or User.
This may include clock-in and clock-out events, break events, schedules, shifts, attendance status, lateness or variance information, attendance correction requests, approvals and related audit records.
ZYA Talent may process approximate or precise Device location, including latitude, longitude, location accuracy and related information, when required for attendance functions such as clock-in, clock-out and work-location or geofence verification.
The current Android version of ZYA Talent is designed to use location in connection with active attendance functions and does not require continuous background location tracking.
This may include leave types, leave requests, dates, balances, entitlements, adjustments, approvals, supporting information and absence records.
This may include work schedules, assigned shifts, schedule changes, requests and approvals.
This may include KPIs, objectives, ratings, review information, manager feedback, development activities, review-cycle information and related performance records.
This may include requests submitted through ZYA Talent, request status, comments, approver actions, timestamps and audit information.
Users or Customer Organizations may choose to upload files, photographs or other attachments in connection with supported workflows. The content of those files may contain Personal Data depending on what is uploaded.
This may include Device type, operating system, application version, IP address, network information, Device or application identifiers, diagnostic events, security events, timestamps and similar technical information needed to operate and secure the Service.
ZYA Talent may process push-notification registration tokens and related technical identifiers used to deliver notifications to a User's Device.
We may process information supplied when You contact ZYA for technical support, privacy inquiries or other Service-related communications.
Where applicable, We may process browser information, IP address, pages visited, session information, preferences and cookie or similar technology data used to operate and improve the Website.
ZYA Talent may support biometric authentication through Device and operating-system security features, such as fingerprint or facial authentication.
When the Device's native biometric authentication mechanism is used, ZYA Talent does not need to receive or store the underlying fingerprint image, facial image or biometric template. The Device or operating system performs the biometric comparison and returns an authentication result to the application.
ZYA may process limited security information necessary to enable or record the authentication workflow.
We may use Personal Data for purposes including:
The legal basis for processing depends on the context, the relationship between the User and Customer Organization, and applicable law. Processing may be necessary to perform a contract, provide requested services, comply with legal or employment obligations, pursue legitimate operational or security interests, or act on valid consent where consent is the appropriate legal basis.
Customer Organizations are responsible for ensuring they have an appropriate legal basis and authority for workforce Personal Data they instruct ZYA to process.
ZYA Talent may request foreground location permission when location is necessary for an attendance feature. For example, the Service may compare a User's Device location with the coordinates or permitted radius of an assigned work location.
Location records associated with attendance may be retained as part of the Customer Organization's attendance and audit records.
Users may deny or revoke Device permissions through Android settings. If location permission is denied, location-dependent attendance functions may be unavailable or may require an alternative process determined by the Customer Organization.
The current Android release does not require continuous background location permission.
ZYA Talent may use push notifications for operational messages such as workflow updates, reminders, approvals or other Service communications. Technical registration tokens may be processed to route notifications to the appropriate Device.
Users can manage notification permissions through Device settings, although disabling notifications may prevent timely receipt of Service messages.
ZYA does not sell employee Personal Data.
Personal Data may be made available to the relevant Customer Organization and its authorized Users according to configured permissions. ZYA may also use Service Providers and infrastructure providers to operate the Service.
These may include:
Personal Data may also be disclosed where required by law, court order or lawful governmental request; to investigate fraud, abuse or security incidents; in connection with a corporate transaction; or with the relevant person's authorization.
Service Providers are expected to process data only for authorized purposes and subject to appropriate contractual and security controls.
ZYA operates from Saudi Arabia, but some technology providers or infrastructure used to deliver the Service may process or store data in other jurisdictions.
Where Personal Data is transferred across borders, ZYA and/or the relevant Customer Organization will apply appropriate contractual, organizational and legal safeguards as required by applicable law, including requirements applicable to international transfers of Personal Data.
ZYA uses technical and organizational safeguards designed to protect Personal Data against unauthorized access, loss, misuse, alteration or disclosure.
Measures may include authenticated access, role-based permissions, tenant isolation, encrypted network communications, private storage controls, access logging, secure credential handling and security monitoring.
No electronic system can be guaranteed to be completely secure, and Users and Customer Organizations must also protect their credentials and Devices.
ZYA Talent is a business-to-business workforce management platform provided to employers and other Customer Organizations. User accounts are created, provisioned and managed by the relevant Customer Organization. ZYA Talent does not provide individual employees with a direct public account-registration process.
Personal Data processed through ZYA Talent is retained for the duration of the Customer Organization's use of the Service and for one year following termination of the Customer Organization's contract with ZYA, unless a longer retention period is required by applicable law, contractual obligations, regulatory requirements, legal proceedings, security requirements, or the lawful instructions of the Customer Organization.
Because employee accounts and employment records are created and managed by the Customer Organization, individual Users cannot independently delete their ZYA Talent account or require ZYA to delete employment records controlled by their employer.
Users who have questions or concerns regarding their Personal Data, or who wish to request access, correction or deletion where applicable, should contact their employer or Customer Organization in the first instance. Users may also contact ZYA at admin@zyaa.ai.
Where ZYA receives a request concerning Personal Data controlled by a Customer Organization, ZYA may refer the request to that organization and will assist with valid requests in accordance with applicable law and ZYA's contractual obligations.
Uninstalling the ZYA Talent application from a Device does not delete the User's account or employment records.
Subject to applicable law and any limitations applicable to employment records, individuals may have rights concerning their Personal Data. These may include rights to:
Because ZYA Talent is used by employers, a request concerning an employment record may need to be handled by the relevant Customer Organization. ZYA will reasonably cooperate with verified requests and Customer Organization instructions as required.
ZYA operates from Saudi Arabia and seeks to handle Personal Data in accordance with applicable Saudi data-protection requirements, including the Personal Data Protection Law and its implementing framework where applicable.
Customer Organizations remain responsible for their own compliance obligations as controllers or responsible parties for employee and workforce information.
The ZYA Website may use necessary session technologies and, where implemented, cookies or similar technologies for authentication, security, preferences, analytics or Service operation.
Users can control browser cookies through their browser settings, although blocking necessary cookies may affect functionality. Mobile application authentication or secure-storage mechanisms may differ from traditional browser cookies.
ZYA Talent is a workforce-management Service and is not directed to children for personal or consumer use.
Customer Organizations are responsible for ensuring that any use involving younger workers is lawful and subject to appropriate employment, consent and privacy requirements.
The Service may contain links to or integrate with third-party services. Third parties may have their own privacy notices and terms. ZYA is not responsible for independent third-party processing that is outside ZYA's control.
Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, subject to appropriate confidentiality and legal protections.
ZYA may also disclose information when reasonably necessary to comply with law, respond to lawful requests, enforce agreements, investigate wrongdoing, protect security or defend legal rights.
We may update this Privacy Policy to reflect changes in ZYA Talent, Our business practices, Service Providers, legal requirements or security practices.
The revised Privacy Policy will state its effective or last-updated date. Where required, We will provide additional notice of material changes.
For privacy questions, requests or concerns relating to ZYA or ZYA Talent, You can contact Us:
Service: ZYA Products / ZYA Talent
Website: https://www.zyaa.ai
Email: admin@zyaa.ai
Country: Saudi Arabia