'Like secret rebels and secret lovers': On privacy, Sridhar Vembu says Zoho won't sell your private data but have to comply with laws

Zoho co-founder and CEO Sridhar Vembu shared an intriguing post on X (formerly Twitter) on Tuesday, outlining his perspective on privacy and how his company approaches it. Dividing the issue into three distinct scenarios — the “secret lover case,” “data misuse for ads,” and “secret rebel case” — Vembu explained how Zoho’s technology and philosophy are shaped around user privacy.

Vembu began by introducing the “secret lover case,” a metaphor he said also applies to organizational trade secrets and confidential data. “We work hard to ensure your privacy in case 1. Our tech stack and product are designed with this as a major goal,” he wrote, emphasizing Zoho’s commitment to safeguarding personal and business data.

Addressing the second case, he took aim at tech companies that use personal data for advertising. “By taking a vow to not use your data to try to sell you stuff, we protect you from that sense of distaste or violation,” Vembu stated, adding that Zoho’s strict no-ad policy helps prevent corporate data from being mined or leaked to advertising systems.



On the third issue — the “secret rebel case” — Vembu drew a line between privacy and legal boundaries. He argued that no company can promise absolute protection to individuals acting against their government. “Any company operating in a jurisdiction promising to protect a secret rebel against their own government is making a false promise. Sovereign power always prevails over mere companies,” he wrote.

Vembu further noted that Zoho, like other global firms, must comply with the laws of the countries in which it operates. “Whether it is Google or Apple, when they operate in India, they have to comply with Indian law, and likewise Zoho has to comply with US law when operating in America,” he added.

Reaffirming Zoho’s long-standing stance, Vembu concluded that he has consistently voiced these views at Zoholics events around the world for over a decade — underscoring his belief that true privacy requires both technical integrity and respect for legal sovereignty.