Legal · draft

Privacy Policy

Last updated 19 October 2026. The legal entity is a placeholder. A human should review this before you treat it as final.

The controller is [LEGAL ENTITY NAME], [LEGAL ENTITY ADDRESS]. Contact: support@zenvylo.app. The product runs at zenvylo.app.

Account data

When you sign up we store your email, name, country, the service you picked, and plan information. Sign-in uses a magic link from our authentication provider (Supabase). We do not ask for a password.

What you save in the app

Leads, notes, follow-up dates, pipeline stage, imported CSV rows, and client records are stored so you can come back to them. That is the point of the product. You can delete leads from the app.

Businesses and websites

Scans ask OpenStreetMap for public place data: names, categories, coordinates, phone numbers and website fields that people have contributed to the map. We then fetch the website URL, the same way a browser would, and store the checks (HTTPS, response time, and so on). We do not log into anyone’s site and we do not collect private customer lists from those businesses.

A proof link you copy contains those checks. Anyone you send it to can read them. Do not put a person’s private note into a proof page — the proof builder only includes measurements and the issues derived from them.

AI drafts

On plans that include writing tools, the measurements and the business name are sent to an AI provider (Anthropic) to draft text. Do not put secrets into notes you then send to those tools. The draft is stored in your browser until you leave the card, and the request is logged on our side for rate limits (time and token counts, not the full letter).

Payments

Subscriptions are processed by Stripe. We store the plan, the customer id, and the subscription status. We do not store full card numbers.

Analytics

The hosted app may use Vercel Web Analytics, which is designed to count visits without cookies. Google Analytics loads only if you click Accept on the cookie notice and a measurement ID has been configured. Until then, that script is not added. Your choice is stored in local storage on your device.

How long and who else sees it

We keep account and lead data while the account exists, and for a short period after deletion so backups can expire. Processors include Supabase (database and sign-in), Stripe (payments), Anthropic (optional drafting), Vercel (hosting and optional analytics), and OpenStreetMap / Overpass (place search, which receives the place you typed). We do not sell your account data.

Your rights

Depending on where you live, you can ask for a copy of your data, a correction, or deletion. Email support@zenvylo.app. If you are in the UK or EEA you can also complain to your data protection authority. We do not knowingly sign up children. The product is for people who can enter a contract for freelance work.