Privacy Policy
This explains what data Zenvanta collects, how it's used, and what you can do about it.
1. What we collect
When you request a trial, we collect your name, work email, and the details you share about your compliance needs.
Once you connect an integration, we collect the configuration data required to evaluate the relevant controls — never the underlying customer or production data behind that configuration.
Like most web services, our site logs IP addresses and request metadata for security and abuse prevention.
2. How we use it
Information is used to operate the platform, generate compliance evidence, and respond to support requests.
We do not sell customer data, and we do not use connected integration data for anything outside the account that authorized it.
3. Who we share it with
Only infrastructure sub-processors required to run the platform, and an auditor you explicitly invite into your portal. We may also share information when legally required to by a regulator or court order.
4. Data retention
Evidence and account data are retained for the duration of your subscription plus the audit window you select, after which they are securely deleted on request.
5. Your rights
You can request a copy of the data we hold, ask us to correct it, or request deletion once it's no longer subject to a retention requirement you've selected. Reach out through the contact details below.
6. Changes to this policy
If this policy changes in a way that materially affects how we handle your data, we'll notify active customers directly before the change takes effect.
7. Contact
Questions about this policy can be sent to hello@zenvanta.cloud, or by post to Pulchowk, Lalitpur 44700, Nepal.