Privacy and data

Zonvio Privacy Policy

Learn what data we use, why we need it and how we protect information across the Zonvio ecosystem.

Last updated: October 2, 2026

Clear roles

Zonvio and your organization process data in defined roles

Controlled access

Roles, permissions and logical data isolation for each organization

Purpose-specific data

The scope of processing depends on the features and modules used

Zonvio protects the infrastructure and processes organization data according to its instructions. The organization decides which customer data is used in its modules and processes.

1

Data controller and contact

  1. This Policy explains how personal data is processed when using the Zonvio platform, hereinafter referred to as the “Platform”.
  2. The controller of data related to User Accounts, Platform billing, security and communication with Zonvio is:
    • Łukasz Męderak
    • Tax ID: 7352908601
    • Business registry number: 523277403
    • Registered address: Orawka 202b, 34-480 Jabłonka, Małopolskie, Poland
    • Contact: app@zonv.io
  3. For privacy matters, contact us at app@zonv.io.
2

Roles of Zonvio and the organization

  1. An organization using the Platform is generally the controller of data relating to its customers, clients, recipients, team members and other people whose data it enters into the Platform.
  2. In this scope, Zonvio acts as a processor on behalf of the organization, in accordance with its documented instructions and the applicable data processing agreement.
  3. Questions about data processed by a specific organization should first be directed to that organization. Zonvio supports the organization in fulfilling its data protection obligations.
3

Categories of processed data

  1. We may process identification and contact details, Account data, organization information, roles and permissions, and brand settings.
  2. We process information required for payments, subscriptions, settlements, invoices, support requests and communication with the User.
  3. Depending on the modules used, the Platform may store an organization’s customer data, content, files, forms, activity history, progress, bookings, products and service delivery information.
  4. Technical data may be collected automatically, including IP address, device and browser type, timestamps, event logs and information required to protect and diagnose the Platform.
4

Purposes and legal bases

  1. Data is processed to create and operate an Account, perform a contract, provide modules, deliver support and settle services.
  2. Processing may be necessary to perform a contract, comply with legal obligations or pursue legitimate interests, particularly security, fraud prevention, legal claims and service development.
  3. Where required by law, data is processed on the basis of consent. Consent may be withdrawn without affecting the lawfulness of earlier processing.
  4. Each organization independently determines the purposes and legal bases for processing its customers’ data within the modules and processes launched on the Platform.
5

AI, workflows and custom features

  1. Data is provided to AI features only to the extent required by the requested task, module configuration and the organization’s permissions.
  2. The organization is responsible for selecting input data, establishing a lawful basis for its processing and reviewing output before taking action.
  3. Workflows and custom features may perform operations on data in accordance with rules configured or approved by the organization.
  4. Zonvio does not make decisions about the Account owner that produce legal effects solely by automated means unless the person is separately informed and an appropriate legal basis exists.
6

Data recipients and integrations

  1. Data may be entrusted to hosting, technical infrastructure, email, analytics, customer support and security providers only to the extent required to deliver the services.
  2. Payments may be handled by Stripe, while invoicing, marketing or other processes may be handled by integration providers selected by the organization.
  3. Connecting an external integration may result in data being shared with it according to the User’s configuration and the provider’s privacy policy.
  4. Data may be disclosed to authorized public bodies when required by law.
7

Transfers outside the EEA

  1. Some infrastructure or integration providers may process data outside the European Economic Area.
  2. In such cases, mechanisms required by law are used, including adequacy decisions or standard contractual clauses together with appropriate safeguards.
8

Data retention

  1. Account data is retained while the service is provided and afterward for the period needed for settlements, legal claims and compliance with legal obligations.
  2. Data processed on the basis of consent is retained until consent is withdrawn or the purpose of processing no longer applies.
  3. The retention period for an organization’s customer data depends on that organization’s instructions, the duration of the agreement and the agreed data deletion or return rules.
  4. Backups may be retained for a limited period under the security schedule and then overwritten.
9

Your rights

  1. A data subject may have the right to access and receive a copy of their data, rectify or erase it, restrict its processing, transfer it and object to its processing.
  2. Where processing is based on consent, consent may be withdrawn at any time.
  3. A request may be sent to Zonvio’s contact address. If it concerns data managed by an organization, it may be forwarded to that organization or require contacting it directly.
  4. A person has the right to lodge a complaint with the President of Poland’s Personal Data Protection Office or another competent supervisory authority.
10

Cookies and analytics

  1. The Platform uses essential cookies for authentication, security, remembering settings and proper service operation.
  2. Analytics or marketing cookies are used according to selected settings and, where required, after consent has been obtained.
  3. Cookie settings can be changed in the browser or an available consent panel. Restricting essential cookies may affect Platform functionality.
11

Data security

  1. We apply technical and organizational measures appropriate to the risk, including access controls, roles and permissions, event logging, transmission protection and backups.
  2. Organization data is logically separated, while access by users, teams, modules and agents is limited by organization and assigned permissions.
  3. The User is responsible for protecting login credentials, assigning appropriate team roles and securely configuring integrations.
12

Changes to this Policy

  1. This Policy may be updated as the Platform develops, the services it uses change or applicable laws are amended.
  2. The current version is published on this page. Active Users may also receive additional notice of material changes.

Have a question about your data?

Contact us. We will help determine the right way to handle your request.

Contact us