Privacy Policy

This Privacy Policy applies to the use of Zelo, Inc.'s website and employee communication platform ("Platform"), which enables a company ("Customer") to communicate more effectively with you, other employees, or authorized individuals ("Recipients") through your preferred channel of communication.

Information We Collect

We collect different types of personal data through our Platform and website. Recipients and Customers may share personal data during registration and communications or by uploading content to our Platform.

Account registration

Basic account information you or Customer provide to initiate an account: name, email address, browser type, and IP address. Other information may include language, subscription or notification preferences, assigned privileges, role or job title, and dates such as work anniversary or birthday. Some of this information may be optional or not collected at all.

Platform content

You can post, upload and share content through the Platform. The Customer can create communications campaigns and share content with you through the Platform.

Metrics, maintenance and analytics

We collect IP addresses, browser types, log files, and information about how you access and use the Platform. We collect metrics related to comments, posts viewed, shared, and submitted. This information is collected automatically using cookies and web beacons.

Our Platform, by default, does not process sensitive data - you should not provide information regarding financial, medical or health condition, race or ethnic origin, political opinions, religious or philosophical beliefs, or other legally protected categories.

If a User uploads files, they are stored on servers handled by AWS in Frankfurt and are encrypted with SSL/TLS during transfer.

Use of Information

We use your personal data to provide and improve the Service, and to develop new products and services:

• Manage the Platform, system administration, and account management
• Process and complete transactions, including billing
• Handle inquiries and support requests
• Compile aggregated data about Platform operation and use
• Conduct quality assurance, research and development
• Send technical alerts, reports, updates, security notifications
• Send marketing messages to administrators (you can opt out at any time)
• Investigate and prevent fraud and unauthorized access
• Enforce our agreements and as required by applicable law

Information We Share

We will only share and disclose your information according to the Customer's instructions or in furtherance of your request:

• With Customer (e.g. your employer) according to their instructions and the customer agreement signed with us.
• With other Recipients within and outside the Platform if you submit comments, post or upload content.
• Within the Zelo group - Zelo is based in California, USA with a wholly-owned subsidiary in Norway.
• To vendors and third-party service providers for cloud storage, mobile push, email provisioning and analytics.
• To law enforcement, government agencies, or judicial courts as required by law.
• With your consent for any other purpose.

Data Retention

Upon termination of our contractual relationship with Customer, we will delete all personal data stored in our servers and backups within 90 days. If you stop working for the Customer, the Customer may suspend your User account in accordance with their data retention policy.

California Privacy Rights

The CCPA gives California residents certain data rights. We do not sell personal data to third parties as contemplated by the CCPA. We do not distinguish levels of service based on an individual's exercise of their right to opt-out or delete data. We provide access to and the right to delete your personal information.

Third Party Websites

Zelo contains links to other websites. We are not responsible for the privacy practices of other websites. This Privacy Policy applies only to information collected by Zelo.

Our Security

Zelo operates according to industry standards with strict security measures to protect against loss, misuse, and alteration. Email and instant messaging are not considered secure communications - please do not send sensitive personal information via email. Contact us at notice@zeloapp.com with concerns or potential breaches.

International Data Transfers

Our primary production data center is located in the European Economic Area. For personal data we receive from the EEA, UK and/or Switzerland, Zelo stores the personal data within the European Economic Area and does not transfer the data out from that area. We are certified under the Privacy Shield framework.

Your Rights Over Your Personal Data

If you are located in the EEA, UK, or EU you have certain privacy rights under the GDPR - including the right to demand access, rectification, deletion, limited processing, objection, and data portability. You can read more on the Norwegian Data Protection Authority's website at datatilsynet.no/en.

Right to access and correct

You and Customer may access or correct information using the tools within the Platform.

Account closure and right of erasure

If you stop using the Platform, contact Customer. The Customer may suspend your User account. Information viewable by Recipients within the Platform will be deleted within 30 days; complete removal from backup systems happens within approximately 90 days.

Legal Basis for Processing

• Consent - for marketing purposes; you can withdraw at any time.
• Legitimate Interest - to provide support, send marketing, prevent fraud, maintain the Platform.
• Performance of a Contract - to fulfill our obligations under an agreement with you.
• Other Legal Bases - court orders, vital interests, legal claims.

Dispute Resolution

Submit complaints in writing to notice@zeloapp.com or to Zelo, Inc., Attn: Privacy Office, 470 Ramona St, Palo Alto CA 94301, U.S.A. We will respond within 45 days. EU and Norwegian individuals may also contact the Norwegian Data Protection Authority at datatilsynet.no/en.

Children

Zelo does not knowingly solicit or collect personal data from children under the age of 13.

Cookies

We use persistent cookies to create site usage statistics. This information is not personally identifiable.

Updates to this Policy

We may update this Privacy Policy from time to time. We will revise the Effective Date and post the new policy. Your continued use of the Service implies acceptance.

How to Contact Us

To communicate with our Data Protection Officer, please email notice@zeloapp.com.