Privacy Policy
Effective May 2026
This privacy policy describes how ZevWorkspace ("we," "us," or "the service") collects, uses, and protects information about you when you use our product or visit this website. ZevWorkspace is part of the Zev product family.
Information we collect
We collect the following categories of information:
- Account information. When you sign up, we receive your name and email address from ZevID, our single sign-on identity provider.
- Workspace content. Records, contacts, companies, projects, sprints, activities, comments, and other content you and your teammates create inside the service.
- Usage data. Standard server logs (timestamps, IP address, user-agent, requested URL) and anonymous product analytics so we can diagnose problems and improve the service.
How we use information
We use the information we collect to:
- Operate, maintain, and improve the service.
- Authenticate you and protect your account, including detecting and preventing abuse.
- Send operational emails — invitations, password-recovery flows, notifications you opt into, and security alerts.
- Respond to your support requests.
- Comply with legal obligations.
We do not sell personal information, and we do not use your workspace content to train machine-learning models.
How information is shared
We share information only in these circumstances:
- With members of your workspace. Content you create in a workspace is visible to other authorised members of that workspace.
- With service providers. Hosting, email delivery, error tracking, and analytics providers who process data on our behalf under written agreements.
- Within the Zev product family. Identity (ZevID), payments (ZevPay), and other Zev products receive only the data necessary to operate the integration you've enabled.
- To comply with law. When we receive a valid legal process; we notify affected users where lawful.
Security
We protect data in transit with TLS and at rest with industry-standard encryption. Sensitive fields (emails, phone numbers) are additionally encrypted at the application layer with AES-256-GCM. Access to production systems is restricted to authorised engineering staff and logged.
To report a security vulnerability, please contact security@zevworkspace.com. We also publish a security.txt file with our disclosure policy.
Data retention
We retain workspace content for as long as your workspace is active. When a workspace is deleted, content is removed within 30 days unless we are required to retain it for legal reasons.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data we hold about you. To exercise any of these rights, contact hello@zevworkspace.com. We respond within 30 days.
Cookies
This marketing site uses minimal cookies, primarily for analytics. The authenticated product uses session cookies necessary to keep you signed in. We do not use third-party advertising cookies.
Children
ZevWorkspace is not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. Material changes will be announced via the in-product feed or via email at least 30 days before they take effect.
Contact
Questions about this policy? Email hello@zevworkspace.com.