Privacy Policy

This policy applies to zepfolio.com, any company sign-in address we host (for example a customer's own subdomain), and the Zepfolio web and installable app.

When your employer invites you into a company workspace, that company controls the business records inside it. We process those records on their behalf. Requests to correct or delete company records should go to the company's owner or administrator first.

• Account details: name, work email, phone number, password (stored only as a hash), and profile photo.
• Company details: company name, addresses, logo, tax identifiers, and the people you invite.
• Business records you enter: customers, vendors, projects, estimates, invoices, payments, bills, time punches, expenses, receipts, files and messages.
• Time and location data when you use the time clock or a location-based feature, captured at the moment you punch or when a work order is updated.
• Payment and banking connections you authorize, handled through our payment and bank-data providers. We never store full card numbers or bank credentials.
• Technical data: IP address, device and browser type, pages used, and error diagnostics.

• Run the features you asked for and keep your data separated from every other company.
• Authenticate you, protect accounts, detect abuse and investigate security incidents.
• Bill your subscription and collect the payments you process through the platform.
• Send service messages: invitations, approvals, alerts, receipts and notices about changes to the service.
• Improve reliability and performance using aggregated, de-identified usage data.
• Meet legal, tax and accounting obligations.

We do not sell your information, and we do not use your business records to train third-party artificial intelligence models.

We share information only with service providers that make the platform work, and only as much as they need: cloud hosting and database, email and text delivery, payment processing, bank data aggregation, mapping, file storage, and error monitoring. Each is bound by contract to protect the data.

We may also disclose information when required by law, to protect someone's safety, or as part of a merger or sale of our business, in which case this policy continues to apply to the transferred data.

Our team cannot see inside your company workspace by default. Access is granted only when an owner or administrator sends a support request from within the admin area, is limited to what is needed to resolve the issue, and is logged.

Data is encrypted in transit and at rest. Access to each company's records is enforced at the database level, not just in the interface. Passwords are hashed, sessions expire, and administrative access is restricted and logged. No system is perfect, so please report anything suspicious to us right away.

We keep company records for as long as the workspace is active. If a subscription ends, records are retained for a limited wind-down period so the owner can export them, then deleted or de-identified, except where we must keep them for legal, tax or audit reasons. Financial history such as time punches, invoices and journals is preserved rather than overwritten while a workspace is live, because accurate history is the point of the system.

• Update your own profile at any time from inside the app.
• Turn off push and email notifications from your notification settings; service and billing notices remain.
• Ask your company owner to correct, export or remove your records.
• Contact us to exercise rights available to you under your local privacy laws, including access, correction and deletion.

To delete your account and the personal data tied to it, use our account deletion request page. We confirm every request by email and finish deletion within 30 days.

Zepfolio is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children.

We will post any change to this policy on this page and update the date above. Material changes will also be announced inside the app.

Questions: privacy@zepfolio.com — Zepfolio LLC, Zepfolio.