Privacy Policy

1. Information we collect

Account information

Contact, account, business and preference information you provide when creating an account, requesting support or otherwise interacting with Zenney.

Customer data

Information uploaded, submitted, synchronised, connected or otherwise made available through the services, including information obtained from customer-authorised systems and integrations.

Usage information

User interactions, queries, prompts, feature and dashboard activity, workflow activity, authentication records, access logs and other information relating to use of the services.

Technical information

Device, system, network and application information such as IP address, device and operating-system information, diagnostic information, performance data and related technical metadata.

Integration data

Information from customer-authorised systems such as accounting, ERP, CRM, inventory, ecommerce, payment, database and cloud-storage services.

2. How we use information

• Provide, operate and maintain the services.
• Authenticate users and manage accounts.
• Process queries, requests and transactions.
• Generate outputs, insights, reports, dashboards and other functionality.
• Support AI, automation, analytics and workflow capabilities.
• Manage integrations and connected systems.
• Maintain security and detect fraud, misuse and unauthorised activity.
• Monitor performance, reliability and system health.
• Provide customer support and respond to enquiries.
• Improve, develop and enhance the services using aggregated and anonymised information.
• Comply with legal, regulatory and contractual obligations.
• Protect the rights, property and security of Zenney, its customers, users and third parties.

3. AI processing

Certain features use artificial intelligence, machine learning, semantic modelling, large language models, automation technologies and software agents. Zenney processes customer data with these technologies only to provide, maintain, secure, support and improve the services.

Zenney-managed AI uses Anthropic. If a workspace administrator connects a customer-provided AI service, the configured recipient may instead be OpenAI, Google (Gemini or Vertex AI), Microsoft Azure AI, or Anthropic. Using a customer's own API credentials does not mean that processing is local or that information is not shared with that provider. Existing conversations may retain their original AI provider.

To fulfil an AI request, Zenney may send your message, relevant conversation history, relevant content from files used for the request, workspace context, database structure and query results to the actual AI provider. This material may include personal information and confidential business, financial or product information contained in your workspace. Processing is used to answer questions, analyse data and generate requested reports or refreshed AI dashboard commentary.

The mobile application identifies the actual recipient and the information categories before asking for explicit permission. It does not send the request for AI processing if you decline. Permission is scoped to your signed-in session, workspace and AI configuration; a changed provider or disclosure requires renewed permission. You can withdraw permission for future AI requests from the application under Account > AI data sharing. Withdrawal does not erase information already processed, and you can continue viewing existing conversations and dashboards.

Provider privacy information is available from Anthropic, OpenAI, Google and Microsoft. Processing and retention also depend on the applicable business-service agreement and the customer's configured provider account. Selecting a deployment storage location does not by itself determine where an external AI provider processes information.

4. Customer data ownership

Customers retain ownership of customer data. Zenney does not acquire ownership through a customer's use of the services and processes that data only as necessary to provide, secure, maintain, support and improve the services and fulfil its obligations to the customer.

5. AI training and product improvement

Zenney may develop and improve generalised capabilities, methodologies, workflows, query structures, semantic models, schemas, skill templates and automation logic that do not contain or expose identifiable customer data, personal information or confidential business information.

Zenney may use aggregated, anonymised and de-identified information to improve services, develop features, enhance performance, conduct analytics and improve AI and automation. This information will not identify, and cannot reasonably be used to identify, a customer or individual.

6. Information sharing

Zenney may disclose information to cloud and infrastructure providers, payment and analytics providers, professional advisers, regulators, law-enforcement agencies where required by law, and service providers engaged to support the services.

Service providers processing information for Zenney must maintain confidentiality, security and privacy protections that provide the same or equal protection of personal information as required by this policy. Zenney does not sell personal information.

7. Data storage location

Data may be stored in the United States, New Zealand, Australia or a customer-specified database. Customers choose the storage location available for their deployment. Where information is transferred internationally, Zenney takes reasonable steps to apply appropriate safeguards and lawful transfer mechanisms.

8. Security

Zenney maintains commercially reasonable administrative, technical and organisational safeguards designed to protect information against unauthorised access, disclosure, alteration, loss or destruction. Measures include encryption in transit, encryption at rest where appropriate, access controls, role-based access, authentication, monitoring, logging, security reviews and testing.

No method of transmission or storage is completely secure, and Zenney cannot guarantee absolute security.

9. Data retention

Zenney retains information only as long as reasonably necessary to provide the services, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and business continuity.

Customer data is retained during the service term. Following termination, a customer may request export for up to 30 days. After that period, Zenney may delete or irreversibly anonymise customer data. Backups, logs and related records may be retained longer where reasonably required for recovery, security, legal compliance, dispute resolution, enforcement or audit.

10. Cookies and analytics

Zenney may use cookies, analytics technologies and similar tools to authenticate users, maintain sessions, analyse usage, improve performance and enhance user experience.

11. Your privacy rights

Subject to applicable law, individuals may have rights to access or correct personal information, request deletion, object to certain processing, or withdraw consent where processing relies on consent.

12. Children's privacy

Zenney services are intended for business use and are not directed to children. Zenney does not knowingly collect personal information from children.

13. Changes to this policy

Zenney may update this policy from time to time. Updated versions will be published on this page with a revised effective date.

14. Contact us

For questions, concerns or privacy requests, contact Zenney Limited at privacy@zenney.com.

The previously signed policy dated 11 July 2026 is available as a historical PDF copy. This page contains the current policy, including the updated AI-processing disclosure.