Privacy Policy

We collect the following categories of information:

• Account information. Name, work email, company name, role, password credentials, team membership, and workspace configuration you provide when creating or administering an account.
• Billing information. Subscription plan, billing contact, and transaction history. Card payments are processed by Stripe; we do not store full card numbers on our systems and only retain the limited billing metadata Stripe returns to us (such as the card brand, last four digits, and billing country).
• Connected third-party platform data. When you authorize an integration, we receive data from that platform on your behalf — for example, lead and message data from WhatsApp and Meta (including Meta Lead Ads), contact records, and the tokens required to keep the connection active. We process this data solely to operate the features you enabled.
• Customer content. Records, notes, pipelines, automation rules, and other content you and your users create or upload while using the Services.
• Usage and device data. Log data, IP address, browser and device type, and product events, used for security, debugging, and improving the Services.

We use the information above to:

• Provide the core Services — including CRM lead routing, assignment, and the automation flows that move work between your users and connected platforms.
• Authenticate users, enforce roles and permissions, and keep integrations synchronized.
• Process subscriptions and payments through Stripe, and send billing and service notices.
• Monitor, secure, troubleshoot, and improve the Services, and develop new features.
• Provide customer support and respond to your requests.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use your customer content or connected platform data to train general-purpose models.

We share information only with service providers that help us operate the Services (such as cloud hosting, Stripe for payments, and the platforms you choose to connect), when required by law or valid legal process, or in connection with a merger or acquisition. Every provider is bound by contractual confidentiality and data-protection obligations.

We apply enterprise-grade security controls to protect your data:

• Encryption of data in transit (TLS) and at rest using industry-standard algorithms.
• Row-level security (RLS) enforced at the database layer, so each tenant’s data is logically isolated and a request can only ever reach the records belonging to that workspace.
• Scoped access tokens for third-party integrations, encrypted at rest and never exposed to other tenants.
• Least-privilege internal access, audit logging, and regular review of access rights.

No method of transmission or storage is perfectly secure, but we continually review and strengthen our safeguards.

We retain account and customer content for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution needs. On request, we will delete or return customer content following termination, subject to backups that expire on a rolling schedule.

Depending on your location, you may have rights to access, correct, export, or delete personal information, or to object to or restrict certain processing. Because much of the data we hold is controlled by your organization, we will route individual requests to the relevant account administrator where appropriate. To exercise a right, contact us using the details below.

We may process and store information in countries other than where you are located. Where we transfer personal data across borders, we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy from time to time. If we make material changes, we will notify account administrators by email or through the Services before the changes take effect.

Questions about this policy or our privacy practices? Email us at hello@zynctex.com.