Privacy Policy

What we collect

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

A. Personal Data

Personally identifiable information, such as your name, email address, and telephone number, that you voluntarily give to us when you register with the Service or when you choose to participate in various activities related to the Service.

B. Business Data

Information related to your business that you provide or generate, including but not limited to:

• Product details (names, SKUs, prices, stock levels, images)
• Sales transaction records (receipts, items sold, totals)
• Customer information (names, emails, phone numbers, purchase history)
• Business settings and configurations

This Business Data is considered your confidential property. We will not use it for any purpose other than providing and improving the Service.

C. Derivative Data

Information our servers automatically collect when you access the Service, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Service.

D. Device Permissions (Camera)

We may request access or permission to certain features from your mobile device, including your device's camera. The camera is used solely to scan barcodes and product QR codes during checkout and inventory actions. Image frames processed by the camera are analyzed locally on your device in real-time and are never uploaded, stored, or shared on our servers.

How we use it

Having accurate information permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your account.
• Process your transactions and subscriptions.
• Provide you with the core functionality of inventory management, POS, and CRM.
• Email you regarding your account or order.
• Monitor and analyze usage and trends to improve your experience with the Service.
• Notify you of updates to the Service.
• Provide customer support and respond to your requests.

Disclosure

We do not share, sell, rent, or trade your Personal Data or Business Data with third parties for their commercial purposes. We may share information we have collected about you in certain situations:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.
• Third-Party Service Providers: We may share your information with third parties that perform services for us, including local and international payment processing (Paystack), data analysis, email delivery, and hosting services.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Data Security

We use administrative, technical, and physical security measures to protect your personal information and Business Data. This includes:

• Enterprise-Grade Cloud Infrastructure: Zeneva is securely hosted on Google Cloud and Firebase. Our infrastructure complies with rigorous international security standards, including ISO/IEC 27001, 27017, and 27018 certifications, and undergoes regular AICPA SOC 2 and SOC 3 audits.
• GDPR & HIPAA Readiness: Our backend architecture provides the data controls necessary to help your business meet stringent privacy regulations like GDPR (General Data Protection Regulation) and HIPAA (Health Insurance Portability and Accountability Act), including comprehensive data export and erasure capabilities.
• Encryption at Rest: Sensitive business and transaction data is protected using 256-bit AES bank-grade encryption to ensure information remains confidential even when stored locally.
• Secure Transmission: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Multi-Tenant Isolation: We use strict logical boundaries to ensure your data is accessible only by you and your authorized staff.

Your Rights

You have the right to:

• Review or change the information in your account by logging into your account settings and updating your account.
• Terminate your account, which will result in the deletion of your Personal Data and the archiving or deletion of your Business Data according to our data retention policies.
• Request Data Deletion: You can request the complete deletion of your account and all associated personal and business data at any time by emailing us at zenevapos@gmail.com. Upon receiving your request, we will verify your identity and delete all your hosted data from our active databases within 30 days.

Contact Us

If you have questions or comments about this Privacy Policy, or if you need to request data deletion, please contact us at: