Privacy Policy

1. Scope

This Privacy Policy applies to the Services and to our website at https://zefty.ca

It does not apply to third-party products or services (for example, Zoho Books) that you may connect to the Services. Those third parties have their own privacy policies.

If there is a conflict between this Privacy Policy and any product-specific notice we provide, the product-specific notice will control for that situation.

2. Our Privacy Commitment

We collect only the information we need to operate, secure, and improve the Services.

We do not sell your personal information and we do not use your data to run third-party advertising networks.

We limit access to personal information to authorized people who need it to perform their job responsibilities.

3. Information We Collect

We may collect information you provide directly, information collected automatically when you use the Services, and information received from third parties you choose to connect.

Information you provide may include your name, email address, company name, billing details, and support communications.

Information collected automatically may include device and browser information, IP address, approximate location derived from IP, log data, usage activity, and settings you use within the Services.

4. Information From Integrations (e.g., Zoho Books)

If you connect a third-party service (such as Zoho Books) to Zefty, we may receive data from that service to provide the integration you requested.

Depending on what you enable, this data may include accounting-related records (for example, contacts, invoices, payments, items, taxes, and related metadata).

We access and process integration data only to perform the actions you request and to maintain the integration (for example, syncing, error handling, and audit logging).

5. How We Use Information

We use information to provide, maintain, and improve the Services and to operate our business.

Common purposes include:

• to create and manage accounts and authenticate users,
• to provide integrations and requested features,
• to process payments and manage subscriptions (if applicable),
• to communicate with you about service updates, security notices, and support,
• to monitor, prevent, and investigate fraud, abuse, and security incidents,
• to analyze usage to improve performance and user experience.

6. Legal Bases (Where Applicable)

Where data protection laws require a legal basis, we generally process personal information based on one or more of the following:

• performance of a contract (to provide the Services you requested),
• legitimate interests (such as securing and improving the Services),
• compliance with legal obligations,
• your consent (where required, and you may withdraw it).

7. Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies to operate the Services, remember preferences, and help with security and performance.

Where required, we will provide cookie choices. You can also control cookies through your browser settings.

If you disable certain cookies, some features may not function properly.

8. How We Share Information

We share information only as needed to operate the Services and as described in this Privacy Policy.

We may share information with:

• service providers who help us operate the Services (for example, hosting, analytics, customer support tools, and payment processors),
• third-party services you choose to connect (for example, when you enable an integration and request data sync),
• law enforcement or regulators when we believe disclosure is required by law or necessary to protect rights, safety, and security,
• a successor entity in connection with a merger, acquisition, or business transfer (subject to continued privacy protections).

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for any actions taken through your account.

10. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of information, how it is used, and applicable legal requirements.

When information is no longer needed, we take steps to delete, anonymize, or de-identify it where appropriate.

11. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information.

These may include the right to access, correct, delete, or object to certain processing, and the right to data portability.

You can submit requests by contacting us at [email protected]. We may need to verify your identity before fulfilling certain requests.

12. Service Data and Roles (Controller / Processor)

If you use the Services to process information about other people (for example, your customers or employees), you are generally the “controller” of that data and Zefty acts as a “processor” on your behalf.

In that case, we process service data only according to your instructions, including through integrations you enable.

If you need a data processing addendum (DPA) for compliance purposes, contact us at [email protected].

13. International Transfers

Your information may be processed and stored in countries other than where you live, depending on our service providers and infrastructure.

Where required, we use appropriate safeguards for international data transfers.

You can contact us for more information about our transfer safeguards at [email protected].

14. Children’s Privacy

The Services are not directed to children and are intended for business use.

We do not knowingly collect personal information from children under the age required by applicable law.

If you believe we have collected such information, please contact us at [email protected] and we will take appropriate steps.

15. External Links and Third Parties

Our Services and website may include links to third-party websites or services.

Their privacy practices are governed by their own policies, not this Privacy Policy.

We encourage you to review third-party privacy policies before providing information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide notice through the Services or by other appropriate means.

Your continued use of the Services after changes take effect means you accept the updated Privacy Policy.

17. Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, contact us at [email protected].

Website: https://zefty.ca

Company: Zefty