Privacy Policy

1. What we collect

• Account information: your email address and sign-in records.
• Business information you provide: business name, website, address, questionnaire answers (states, headcount, operations), poster-gallery settings, and details you enter for document generation (e.g., insurance carrier and policy number). Documents you upload are stored so we can display them in your gallery — which is public by design at your gallery link.
• Automatically collected data: device/browser information, IP address (including approximate location used, for example, to preselect your state in a poster gallery), pages viewed, and interactions — via cookies and similar technologies, including the advertising tools below.
• Payment information: when paid billing launches, payments will be processed by a payment processor; we will not store full card numbers.

What we deliberately do not collect:poster galleries are built for staff to view without accounts. We keep no individual records of which worker viewed which notice — only anonymous daily view counts per gallery. We do not collect workers' names, emails, or identities through galleries, and we will not build features that let employers track individual workers' access.

2. How we use information

• To provide the Service: assessments, galleries, monitoring, readiness plans, and pricing (your answers determine your quoted price).
• To research your business from public sources when you ask us to (name, website, address you provide), including processing by AI services (see Section 4).
• To communicate with you about your account and, with your consent where required, to send marketing about Comply-Wiz.
• To advertise and measure our own marketing (Section 3).
• To secure, debug, and improve the Service, and to comply with law.

3. Advertising and marketing

We market Comply-Wiz using Meta Ads, Google Ads, and email. That means:

• Ad pixels and tags:our marketing pages may use the Meta Pixel, Google tags, and similar technologies that share limited data (such as page visits, hashed identifiers, and conversion events) with those platforms to measure ads and build audiences. Under some U.S. state privacy laws this counts as "sharing" or "targeted advertising."
• Your opt-outs: we honor the Global Privacy Control (GPC) browser signal as an opt-out of targeted-advertising sharing, and you can opt out anytime by emailing support@zivx.comwith "Ad opt-out." You can also use Meta's and Google's own ad-preference controls.
• Email marketing: our marketing emails promote Comply-Wiz only — we do not share your email with third parties for their marketing, and we do not send third-party offers. Every marketing email includes a working unsubscribe link, honored promptly, and unsubscribing never affects service emails (like poster-update notices you asked for).
• We do not sell personal information for money, and we do not use questionnaire answers, uploaded documents, or assessment results to target advertising.

4. Service providers

We use vetted providers to run the Service, each bound to use data only to provide their service to us: Supabase (database, authentication, file storage), Cloudflare (hosting, networking, IP-based geolocation), and Anthropic (AI processing — for example, classifying your business from your public website when you request research, and summarizing changes to official documents). We may add or change providers; this policy will be updated for material changes.

5. Retention and security

We keep account and business data while your account is active and as needed for legal, accounting, and audit purposes (including reproducing prices we quoted you). You can delete uploaded documents anytime; deleting your account removes personal data not required for legal retention. We use industry-standard safeguards (encryption in transit, access controls, row-level security); no system is perfectly secure.

6. Your rights

Depending on your state (including under the Texas Data Privacy and Security Act, California CCPA/CPRA, and similar laws), you may have rights to access, correct, delete, or receive a copy of your personal data, and to opt out of targeted advertising. Exercise any of these by emailing support@zivx.com — we respond within the time your state requires, we will verify your identity, we honor authorized agents where required, and we never discriminate against you for exercising rights. If we decline a request, you may appeal by replying to our decision.

7. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

8. Changes and contact

We will post changes here and update the effective date; material changes will be announced via the Service or email. Contact: ZIVX LLC, Texas, USA · support@zivx.com.