Privacy Policy

1. What Data We Collect

We collect the following categories of information:

• Account Information: Your name, email address, and company information provided at registration.
• Onboarding Data: Business information, ideal client profile (ICP), offer details, and tone/voice data you provide during the onboarding process. This data is used to personalize your outreach campaigns.
• Third-Party API Credentials: API keys you connect to the platform, including your Apollo.io API key. These are stored encrypted and used solely to pull prospect data on your behalf.
• Google / Gmail Data: When you authorize Zolvira via Google OAuth, we access your Gmail account to send emails, read incoming replies, and manage threads. This access is used exclusively to provide Zolvira's core outreach features.
• Payment Information: Billing details processed securely through Stripe. We do not store your full payment card details.
• Usage Analytics: Platform usage data (pages visited, features used, session activity) collected to improve the service.

2. How We Use Data

Your data is used to provide, maintain, and improve Zolvira's services. Specifically, we use your information to: send outreach emails on your behalf; read and classify prospect replies; draft follow-up messages; personalize email content based on your onboarding responses; pull prospect lists via your connected Apollo.io account; process payments; and communicate with you about your account and the platform. We never sell your personal information to third parties.

3. Google User Data

When you authorize Zolvira via Google OAuth, we request access to send emails, read incoming messages, and manage threads within your connected Gmail account. This access is used exclusively to provide Zolvira's core outreach automation features — sending personalized emails, reading replies, and drafting follow-ups based on your instructions. We do not use Google user data for advertising purposes, and we do not share Google user data with third parties except as strictly necessary to provide the service (e.g., our email sending infrastructure). Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with the following trusted service providers solely to the extent necessary to operate the platform:

• Supabase — cloud database and storage
• SendGrid — email sending infrastructure
• Apollo.io — prospect data sourcing (via your API key)
• Stripe — payment processing

All service providers are bound by confidentiality obligations. We may also disclose data if required by law or to protect our legal rights.

5. Data Retention

We retain your account data for as long as your account is active. Upon account cancellation, your data is retained for 90 days to allow for account recovery, after which it is permanently deleted from our systems. You may request immediate deletion at any time by contacting us at support@zolvira.app. Anonymized or aggregated usage data may be retained indefinitely for platform improvement purposes.

6. Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, regular security reviews, and strict access controls. OAuth tokens, API keys, and email credentials are encrypted and stored securely. Access to user data is limited to authorized personnel on a need-to-know basis. While we take security seriously, no system is 100% secure — in the event of a data breach, we will notify affected users as required by law.

7. Your Rights — GDPR (EU Users)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Erasure: Request deletion of your personal data.
• Right to Portability: Request your data in a portable format.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Object: Object to our processing of your data in certain circumstances.

To exercise any of these rights, contact us at support@zolvira.app.

8. California Privacy Rights — CCPA

If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; and opt out of the sale of your personal information. Zolvira does not sell personal information. To exercise your rights, contact us at support@zolvira.app. We will not discriminate against you for exercising your privacy rights.

9. How to Delete Data / Revoke Access

You can disconnect your Gmail account and revoke Zolvira's access at any time from your account settings. You can also revoke access directly from your Google Account permissions page. To request deletion of all your data, email us at support@zolvira.app and we will process your request within 30 days.

10. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at support@zolvira.app.