Privacy policy

Who is responsible

Your organization decides what it brings into ZEEFAR and is the controller of that data; we process it on its behalf to run the service. For the accounts of the people who sign in, we are responsible together with your organization.

What we process

Account details: name, email address, and sign-in records, through our sign-in provider.

Desk data: the mail forwarded to your workspace's private address and its attachments, the parts, prices, quotes, orders and contacts made from it, and the records your people enter.

Usage: which features are used and how many AI reads a month, to run the plan and keep the service healthy.

How the AI reads your mail

An email forwarded to your address is read to find the parts, quantities and prices in it. Only what is needed for that read is sent to the AI provider, under terms that forbid using it to train their models. The original is kept so it can be read again.

Where it is kept

On Cloudflare's platform, encrypted at rest and in transit. Each organization's data is kept apart from every other's, and every request is checked against the workspace it belongs to.

Who else sees it

Nobody outside your organization, except the processors that run the service (hosting, sign-in, AI reading, email) and our support staff when you ask for help — read-only, for a limited time, and recorded.

How long

For as long as your organization uses ZEEFAR. When it leaves, its data is deleted after the export period agreed, except where the law requires us to keep records.

Your rights

You can see, correct, export and ask to delete your personal data. Ask your organization's admin, or us through Support in the app.