Privacy Policy
Last updated: 17 June 2026
Zolvd ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, why we collect it, and how we use it when you use our platform at zolvd.app and workspace.zolvd.app.
Zolvd is operated as a sole proprietorship. By using our services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.
This policy is drafted in compliance with the Protection of Personal Information Act (POPIA) of South Africa, and is also designed to be consistent with principles of the General Data Protection Regulation (GDPR) for users in the European Union.
1. Who this policy applies to
This policy applies to:
- Service Providers — individuals or small businesses who subscribe to Zolvd to manage client projects.
- Project Clients — the end customers of Service Providers who access the Zolvd client portal via magic link.
- Website visitors — anyone who visits zolvd.app.
2. Information we collect
Information you provide directly
- Account details: name, email address, company name, phone number, website
- Business banking details (Service Providers only) — stored encrypted at rest
- Project and client information you create within the platform
- Messages submitted via our contact form
Information collected automatically
- Log data: IP address, browser type, pages visited, time and date of access
- Usage data: feature usage patterns to improve the product
- Authentication tokens and session identifiers
3. How we use your information
- To provide, operate, and maintain the Zolvd platform
- To authenticate users and secure access to accounts and client portals
- To send transactional emails (quote notifications, payment confirmations, project updates)
- To process subscription billing through our payment provider, Paddle
- To respond to support requests and enquiries
- To improve the product based on usage patterns
- To comply with legal obligations
We do not sell your personal information. We do not use your data for advertising purposes.
4. Third-party service providers
We share data with the following trusted third-party services, solely to operate the platform:
Supabase
Database, authentication, and file storage. Data is stored on servers in your selected region with row-level security.
Paddle
Subscription billing and payment processing. Paddle acts as Merchant of Record and processes payment card data — Zolvd never handles card information directly.
Resend
Transactional email delivery (quote notifications, invoices, magic link emails).
Vercel
Web application hosting and content delivery.
Each of these providers has their own privacy policy governing how they handle data. We encourage you to review them.
5. Banking details
Service Providers may optionally store their banking details (account number, branch code, etc.) in Zolvd to generate payment instruction pages for their clients. Banking details are encrypted at rest and are never returned in any API response to a browser. They are rendered server-side only on the secure payment page within the client portal. Project Clients never have access to a Service Provider's full banking details via any downloadable or inspectable resource.
6. Data retention
We retain your personal information for as long as your account is active or as needed to provide you with the services. If you close your account, we will delete or anonymise your personal data within 90 days, unless we are required by law to retain it longer.
Project Client data (created by Service Providers) is retained as part of the Service Provider's account. The Service Provider is responsible for managing this data in compliance with applicable privacy laws in their jurisdiction.
7. Your rights
Under POPIA (and GDPR where applicable), you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information (right to erasure), subject to legal obligations
- Object to certain processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Cookies
Zolvd uses only functional cookies necessary for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. By using the platform, you consent to the use of these necessary cookies.
9. Security
We implement industry-standard security measures including HTTPS encryption in transit, row-level security at the database layer, encrypted storage of sensitive fields, and access controls that prevent any user from accessing another user's data. No system is perfectly secure, and we cannot guarantee absolute security, but we take the protection of your data seriously.
10. Children
Zolvd is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are material, notify you by email or via an in-app notice.
12. Contact
For any privacy-related questions or to exercise your rights under this policy, contact us at:
Zolvd
Email: [email protected]