Zero | Privacy policy

Privacy policy

Introduction

Zero Technologies Oy ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and disclose information about you when you:

Visit our website, https://www.zero.inc ("Site")
Use our customer relationship management platform, https://app.zero.inc ("Zero" or "Service")
Interact with us through other channels

By accessing or using our Site or Service, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our Site or Service.

Information We Collect

Through Our Website

Personal Information

We may collect and process the following personal information about you:

Contact details: name and email address
Professional information: job title, company name

Non-Personal Information

We may also collect non-personal information, which does not directly identify you:

Technical information: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform
Usage information: information about how you use our Site, including the pages you visit, the links you click, and other actions you take on the Site

Through Service

Customer Account Data

When you register for and use our Service, we collect:

Account credentials: email address and password
Profile information: name, job title, profile picture
Billing information: company details, billing address
Usage preferences and settings

Customer Content

We process data you input or import into the Service:

Contact and lead information
Communication records
Documents and files
Custom fields and tags
Integration data from connected services

This data is processed according to our Data Processing Agreement (DPA), where you act as the data controller and we act as the data processor.

Data Enrichment

To better understand our potential users, we may enhance the information you provide through automated data enrichment processes using publicly available professional information and business databases. This additional data may include:

Full name
Current position
Employer

Website Analytics

We use Pirsch Analytics (https://pirsch.io/), a privacy-focused, cookie-free analytics service, to understand how our Site is used. This service processes:

Page views
Visit duration
Entry and exit pages
Referrer information
Browser information
Operating system information
Screen resolution
Geographic location (country/city level only)

This analysis is performed without cookies and in a privacy-preserving way that doesn't track individual users across sessions or websites. The data is processed within the EU in compliance with GDPR requirements.

How We Use Your Information

Website Visitors

To provide and maintain our Site
To notify you about changes to our Site or Service
To allow you to participate in interactive features
To provide customer support
To gather analysis or valuable information to improve our Site
To monitor the usage of our Site
To detect, prevent and address technical issues
To provide you with news, special offers and general information about our products and services

Service Users

To provide and maintain our Service
To process and complete transactions
To provide customer support and respond to inquiries
To send administrative information, such as updates, security alerts, and support messages
To personalize user experience and improve our Service
To manage user accounts and provide account-related services
To detect, prevent, and address fraud or security issues
To comply with legal obligations
To enforce our Terms of Service

Legal Basis for Processing

We process personal data under the following legal bases:

Performance of contract: Processing necessary for the performance of our agreement with you
Legitimate interests: Processing necessary for our legitimate interests, provided these interests don't override your fundamental rights
Legal compliance: Processing necessary to comply with our legal obligations
Consent: Processing based on your specific consent

Data Sharing and Disclosure

Service Providers

We share information with trusted third-party service providers as outlined in our DPA's sub-processors list. These providers are bound by data processing agreements and are only authorized to use your information as necessary to provide services to us.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your information.

Legal Requirements

We may disclose your information if required by law or if we believe disclosure is necessary to protect our rights or comply with a legal process.

International Data Transfers

We will not transfer your personal data to recipients outside EU or EEA unless we have ensured compliance with GDPR Chapter V.

Some of our third-party service providers are established outside the EEA, including in the US, so their processing of your personal data will involve a transfer of data outside the EEA. However, to ensure that your personal information receives an adequate level of protection we have ascertained that sufficient safety measures have been implemented to allow for the transfer, including:

Where the European Commission have deemed the country to provide an adequate level of protection for personal data
By use of specific contracts approved by the European Commission (Standard Contractual Clauses) which give personal data essentially equivalent protection as it has in Europe

Data Retention

We retain different types of data for different periods:

Website Data

We retain website analytics data for 12 months from its collection date.

Service Data

Account data: Retained for the duration of your use of the Service plus 30 days after account closure
Customer Content: Retained according to your instructions and our Data Processing Agreement
Backups: Retained for 30 days

If the purposes specified in the "How We Use Your Information" section no longer exist, your data will be deleted or anonymized without delay.

Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures are detailed at www.zero.inc/security.

However, no internet transmission is ever completely secure or error-free. While we strive to protect your personal information, we cannot guarantee its absolute security.

Your Rights

You have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete personal information
Deletion: Request deletion of your personal information, subject to legal requirements
Objection: Object to processing of your personal information
Restriction: Request restriction of processing under certain circumstances
Data portability: Request transfer of your information in a structured, commonly used format

To exercise any of these rights, please contact us at privacy@zero.inc.

Service-Specific Privacy Features

Data Isolation

Each customer's data within Service is logically separated and accessible only to authorized users within your organization.

Data Export

You can export your data from Service at any time in standard formats.

Third-Party Integrations

When you connect third-party services to Service, we only access and store information necessary for the integration's functionality.

Supervisory Authority

You have the right to complain to your local data protection authority if you are unhappy with our data protection practices. In Finland, you can lodge a complaint with the Office of the Data Protection Ombudsman at tietosuoja.fi/en/notification-to-the-data-protection-ombudsman.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be notified to you via email or through a notice on our Site at least 30 days before the change becomes effective.