Privacy Policy
Last updated: February 8, 2026
1. Introduction
Zerva ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our enterprise data intelligence platform and related services (the "Service"). By using the Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly when you:
- Create an account (name, email address, password, organization name)
- Configure integrations and connectors (authentication credentials, API keys)
- Upload or connect data sources (documents, files, databases, project data)
- Use the Service (dashboards, reports, alerts, comments, settings)
- Contact our support team (support tickets, email correspondence)
- Subscribe to our newsletter or marketing communications
2.2 Customer Data
When you connect data sources to Zerva, we process the data from those sources ("Customer Data") on your behalf. Customer Data may include project files, documents, emails, images, structured data from enterprise systems, and any other information you choose to integrate with the Service. You retain all rights to your Customer Data.
2.3 Automatically Collected Information
We automatically collect certain information when you use the Service:
- Usage data (features accessed, actions performed, time spent, search queries)
- Device information (IP address, browser type, operating system, device identifiers)
- Log data (access times, pages viewed, errors encountered)
- Cookies and similar tracking technologies (see Section 8)
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your Customer Data to deliver insights, reports, and alerts
- Improve and personalize your experience with the Service
- Train and improve our AI models and machine learning algorithms
- Communicate with you about your account, updates, and support requests
- Send you marketing communications (with your consent, where required)
- Detect, prevent, and address technical issues, fraud, and security threats
- Comply with legal obligations and enforce our Terms of Service
- Analyze usage patterns and generate aggregate statistics (anonymized)
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: We share data with third-party vendors who help us operate the Service (cloud infrastructure providers, payment processors, analytics tools, customer support platforms). These providers are contractually obligated to protect your data and use it only to provide services to us.
- Business Transfers: If Zerva is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
- Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- With Your Consent: We may share information with third parties when you explicitly authorize us to do so.
5. Data Security
We implement industry-standard security measures to protect your information:
- Data encryption in transit using TLS 1.3
- Data encryption at rest using AES-256
- Regular security audits and penetration testing
- Access controls and role-based permissions
- Multi-factor authentication for administrative access
- SOC 2 Type II certification and compliance with industry standards
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:
- Account information is retained until you delete your account
- Customer Data is retained according to your subscription plan and settings
- Usage logs and analytics data are retained for up to 24 months
- Financial records are retained for at least 7 years to comply with legal requirements
After you terminate your account, we will delete or anonymize your information within 90 days, unless we are required to retain it for legal, regulatory, or security purposes.
7. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal obligations)
- Portability: Request a copy of your data in a structured, machine-readable format
- Objection: Object to our processing of your information for certain purposes
- Restriction: Request restriction of processing under certain circumstances
- Withdraw Consent: Withdraw consent for processing based on consent (does not affect prior processing)
To exercise these rights, please contact us at privacy@zerva.app. We will respond to your request within 30 days.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect usage information and improve the Service. Cookies are small text files stored on your device. You can control cookie preferences through your browser settings, but disabling cookies may limit your ability to use certain features of the Service.
We use the following types of cookies:
- Essential Cookies: Required for the Service to function (authentication, security)
- Analytics Cookies: Help us understand how users interact with the Service
- Preference Cookies: Remember your settings and preferences
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws by using Standard Contractual Clauses, data processing agreements, and other lawful transfer mechanisms. We offer data residency options (US, EU, UK) for enterprise customers.
10. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete that information.
11. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.
12. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), the UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to be informed about how your data is used
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making and profiling
You also have the right to lodge a complaint with your local data protection authority.
13. CCPA Compliance (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect, use, and disclose
- Right to request deletion of your personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your CCPA rights
To exercise these rights, contact us at privacy@zerva.app.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we will provide additional notice (such as an email notification). Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
15. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Zerva
Email: privacy@zerva.app
Website: https://zerva.app
For data protection inquiries specific to GDPR, you may also contact our Data Protection Officer at dpo@zerva.app.
By using Zerva, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.