Your Privacy Matters

Privacy Policy

Learn how we collect, use, and protect your personal information on the Zinifly platform.

Last Updated: May 21, 2026

This Privacy Policy describes how Zinifly ("Company," "we," "our," or "us") collects, uses, and shares information about you when you use the Zinifly Platform ("Platform"), our website, and related services. By using our services, you agree to the collection and use of information in accordance with this policy.

1

Information We Collect

1.1 Personal Information

When you create an account or use our Platform, we may collect:

  • Name, email address, and phone number
  • Business name and address
  • Payment and billing information
  • Account credentials and profile information

1.2 Usage Information

We automatically collect information about how you use the Platform:

  • Pages visited and features used
  • Time spent on the Platform
  • Referring URLs and search terms
  • Error logs and performance data

1.3 Device Information

We collect information about the devices you use to access our Platform:

  • Device type, operating system, and browser
  • IP address and general location
  • Device identifiers
2

How We Use Your Information

We use the information we collect to:

Provide Services

Operate and maintain the Platform, process transactions, and deliver features

Customer Support

Respond to your inquiries and provide technical assistance

Improve Platform

Analyze usage patterns and enhance user experience

Communications

Send important updates, newsletters, and marketing (with consent)

Security

Protect against fraud, unauthorized access, and illegal activity

Legal Compliance

Comply with legal obligations and enforce our terms

Legal Basis for Processing (EEA & UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal information only where we have a lawful basis to do so under the GDPR. Depending on the activity, our legal bases are:

  • Performance of a contract — to provide the Platform and the services you have requested.
  • Legitimate interests — to operate, secure, and improve the Platform, prevent fraud, and communicate with you, provided these interests are not overridden by your rights.
  • Consent — for non-essential cookies and certain marketing communications. You may withdraw your consent at any time.
  • Legal obligation — to comply with applicable laws, tax and accounting requirements, and lawful requests from authorities.
3

Sharing Your Information

We may share your information in the following circumstances:

  • Service Providers:

    Third parties who help us operate the Platform (payment processors, hosting providers, analytics services)

  • Market Owners & Vendors:

    Information necessary to facilitate marketplace transactions and communications

  • Legal Requirements:

    When required by law, subpoena, or to protect our rights and safety

  • Business Transfers:

    In connection with a merger, acquisition, or sale of assets

  • With Your Consent:

    When you have given us explicit permission to share your information

4

Data Security

We implement industry-standard security measures to protect your information:

SSL/TLS Encryption

All data transmitted is encrypted using 256-bit SSL

Secure Storage

Data stored in secure, access-controlled environments

Access Controls

Limited employee access on a need-to-know basis

Regular Audits

Continuous security monitoring and assessments

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

  • Account Data: Retained while your account is active and for a reasonable period after closure
  • Transaction Records: Retained for 7 years for tax and legal compliance
  • Usage Data: Generally retained for 2 years for analytics purposes
  • Legal Holds: Data may be retained longer if required for legal proceedings
6

Your Privacy Rights

Depending on your location, you may have the following rights:

Right to Access

Request a copy of your personal data we hold

Right to Rectification

Correct inaccurate or incomplete information

Right to Erasure

Request deletion of your personal data (subject to legal requirements)

Right to Data Portability

Receive your data in a portable format

Right to Opt-Out

Opt out of marketing communications and certain data processing

Right to Object

Object to processing based on our legitimate interests, and to direct marketing at any time

Right to Restrict Processing

Ask us to limit how we use your personal data in certain circumstances

Right to Withdraw Consent

Where we rely on consent, withdraw it at any time without affecting prior lawful processing

How to Exercise Your Rights

Email us at privacy@zinifly.com or use our data deletion request page. We will respond within 30 days (and within 45 days for requests made under the CCPA), and will tell you if we need a permitted extension. We will not charge a fee for a reasonable request, and we will never discriminate against you for exercising your rights.

Right to Lodge a Complaint

If you are in the EEA or UK and believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your local data protection supervisory authority. We would, however, appreciate the opportunity to address your concerns first.

Automated Decision-Making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

7

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Platform. These technologies help us remember your preferences, understand usage patterns, and improve our services.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

8

Third-Party Services

Our Platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Third-party services we use include payment processors (Stripe), analytics providers (Google Analytics), mapping services (Mapbox), and communication tools.

9

Children's Privacy

Our Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child under 18, we will promptly delete that information. If you believe we may have collected information from a child, please contact us immediately.

10

International Data Transfers

We are based in the United States, and your information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country.

Where we transfer personal information of individuals in the EEA or UK to a country that has not received an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) to protect your information. You may contact us at privacy@zinifly.com to request more information about these safeguards.

11

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending you an email notification for significant changes
  • Displaying a notice within the Platform
12

California Privacy Rights (CCPA/CPRA)

This section provides additional information for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").

Do Not Sell or Share My Personal Information

Zinifly does not sell your personal information for money, and we do not "share" your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. Because we do not sell or share personal information, no separate opt-out is required; you may still exercise the rights described below. If our practices ever change, we will update this policy and provide a clearly labeled "Do Not Sell or Share My Personal Information" link.

Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information:

  • Identifiers — name, email address, phone number, account credentials, and IP address.
  • Commercial information — billing details and records of products or services purchased.
  • Internet or network activity — pages visited, features used, and interactions with the Platform.
  • Geolocation data — general location derived from your IP address.
  • Professional or business information — business name and address.

We collect this information directly from you, automatically through your use of the Platform, and from service providers. We use it for the business purposes described in "How We Use Your Information," and we may disclose it to service providers for those purposes. We do not use or disclose sensitive personal information for purposes that would require offering a "Limit the Use of My Sensitive Personal Information" option.

Your California Rights

  • Right to Know the categories and specific pieces of personal information we have collected about you.
  • Right to Delete personal information we have collected, subject to legal exceptions.
  • Right to Correct inaccurate personal information.
  • Right to Opt Out of the sale or sharing of personal information (note: we do not sell or share it).
  • Right to Limit the use of sensitive personal information.
  • Right to Non-Discrimination — we will not deny you services, charge a different price, or provide a different level of service because you exercised your rights.

How to Submit a Request

To exercise your California rights, email privacy@zinifly.com or use our data deletion request page. We will verify your identity using information associated with your account before fulfilling a request. You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may still verify your identity directly.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Zinifly, Inc.
Wilson County, Tennessee, USA