How we protect your data.

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, phone number, business name, business type, and password when you register.
• Profile and business information: For Vendors, this includes business details, service categories, pricing, portfolio images, service area, bio, and social media links.
• Communications: Messages sent through the Platform between Vendors and Customers, support inquiries, and email correspondence with Viceroy NM.
• Financial information: Billing details processed via Stripe (we do not store raw card numbers); bank account information for Stripe Connect payouts.
• User content: Portfolio images, gallery photos, proposals, contracts, client records, event data, and any other content you upload to the Platform.
• AI training data: Communications you upload to create Brand Voice Profiles.

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, clicks, search queries, time spent on pages, and interaction patterns.
• Device and technical data: IP address, browser type, operating system, device identifiers, and referral URLs.
• Cookies and tracking technologies: As described in our Cookie Policy.
• Log data: Server logs including timestamps, request types, response codes, and error messages.

1.3 Information from Third Parties

• Payment processors: Transaction confirmations and payout status from Stripe.
• AI providers: Processed outputs from Anthropic, OpenAI, and Google Gemini in connection with AI features. We do not receive your raw prompts back from providers.
• Analytics providers: Aggregated usage analytics.

2. How We Use Your Information

We use your information to provide and operate the Platform, process payments and manage subscriptions, generate AI-powered features (lead scoring, proposals, forecasts, matching), send transactional communications (invoices, contracts, notifications), provide customer support, improve Platform functionality and fix bugs, enforce our Terms and policies, comply with legal obligations, and send marketing communications (with your consent, where required).

3. How We Share Your Information

3.1 Marketplace Visibility

Vendor profile information (name, bio, portfolio, service category, starting price, service areas, and reviews) is displayed publicly on the Zennvue marketplace to enable discovery by Customers.

3.2 Service Providers

We share data with service providers who help us operate the Platform: Stripe (payments), Pusher (real-time communication), Resend (email), Twilio (SMS), Anthropic / OpenAI / Google (AI processing), and cloud hosting providers. These parties are contractually bound to protect your data and may only use it to provide services to us.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.

3.4 Legal Compliance

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Viceroy NM, our users, or the public.

3.5 We Do Not Sell Your Data

Viceroy NM does not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Retention

We retain your account data for as long as your account is active. After account termination, we retain data for up to 30 days before permanent deletion, unless a longer retention period is required by law. AI training data (Brand Voice samples) is deleted upon account termination. Backup data may persist for up to 90 days in encrypted backups before overwrite.

5. Your Rights

Depending on your location, you may have the right to: access a copy of your personal data; correct inaccurate data; request deletion of your data; object to or restrict certain processing; and data portability. To exercise these rights, contact hello@zennvue.com. We will respond within 30 days. We may need to verify your identity before processing requests.

6. Security

We implement industry-standard security measures including: TLS encryption for data in transit; AES-256 encryption for data at rest; JWT session tokens validated at edge middleware; organization-scoped database queries preventing cross-tenant data access; role-based access controls; and regular security audits. Despite these measures, no system is perfectly secure. We cannot guarantee absolute security.

7. Children's Privacy

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from minors. If we learn we have collected data from a minor, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or Platform notice at least 14 days before the effective date. Your continued use constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or requests: hello@zennvue.com · Viceroy NM LLC