Privacy Policy

This Privacy Policy explains how Zevox (“Zevox,” “we,” “us”) collects, uses, and protects information when you use the Zevox application and website at zevox.org. By using Zevox you agree to this Policy and to our Terms of Service.

1. Information we collect

Information you provide

• Account information: the email address and password you use to register. Passwords are stored only as a salted hash by our authentication provider — we never see your plaintext password.
• Billing information: when you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not store your full card number; we receive limited information such as a customer ID and your subscription status.
• Deal and property data: the property details, values, repair estimates, scores, notes, and outcomes you enter to analyze and track deals.
• Contact data you enter: information you choose to store about third parties, such as seller and cash-buyer names, phone numbers, addresses, and buy-box preferences. See Section 6.
• Support communications: messages you send us.

Information collected automatically

• Essential cookies / session data: we use a small number of strictly necessary cookies to keep you logged in and to keep the service secure. These are required for the app to work.
• Basic server logs: our hosting and infrastructure providers process standard technical data (such as IP address and request information) to operate, secure, and debug the service.

We do not currently use third-party advertising pixels, cross-site trackers, or marketing analytics tools. If that changes, we will update this Policy and, where required, ask for your consent first.

2. How we use information

• To create and operate your account and provide the service;
• To process your subscription and payments;
• To compute deal analyses from the inputs you provide and save your deals, contacts, and reminders;
• To respond to support requests and send essential service emails;
• To secure the service, prevent abuse, and comply with law.

Your deal calculations are performed by Zevox’s own formulas. We do not send Your Content to any third-party AI service.

3. How information is shared

We do not sell your personal information and we do not share it for advertising. We share information only with service providers (“subprocessors”) that help us run Zevox, under agreements that limit their use of it:

• Supabase — database hosting and authentication;
• Stripe — subscription billing and payment processing;
• Vercel — application hosting and delivery;
• Our email-delivery provider — sending transactional emails (such as account, confirmation, and password-reset emails).

We may also disclose information if required by law, to enforce our Terms, or in connection with a business transfer (such as a merger or acquisition), in which case we will notify you.

4. Data retention

We keep your account and content for as long as your account is active. If you cancel and ask us to delete your account, we will delete or de-identify your personal information within a reasonable period, except where we must retain certain records (for example, billing records) to comply with legal, tax, or accounting obligations.

5. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise any of these rights, email support@zevox.org from your account email and we will respond as required by applicable law. We will not discriminate against you for exercising these rights.

California residents (CCPA/CPRA):you have the right to know what personal information we collect, to request deletion, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under California law.

EU/UK residents (GDPR): where applicable, our legal bases for processing are performance of our contract with you (providing the service), our legitimate interests (securing and improving the service), consent (where we ask for it), and compliance with legal obligations.

6. Information about other people that you store

Zevox lets you store information about third parties (for example, sellers and cash buyers) in your contacts. With respect to that information, you are the controller and Zevox is a processor acting on your behalf. You are responsible for having a lawful basis to store and use it. If someone whose information is stored in Zevox asks to access or delete it, they should contact the user who stored it; we will also assist that user, or the individual, as required by law — email support@zevox.org.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, encryption at rest by our infrastructure providers, hashed passwords, and database row-level security that scopes each account’s data to that account. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and regulators as required by law.

8. Children’s privacy

Zevox is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact support@zevox.org and we will delete it.

9. Where your data is processed

Zevox is operated from the United States and your information is processed and stored in the United States and by the providers listed above. If you access Zevox from outside the United States, you understand your information will be processed in the United States.

10. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice where appropriate.

11. Contact

For privacy questions or to exercise your rights, contact Zevox at support@zevox.org.