Privacy, plainly.

Zepnix is a software company that makes business tools for small companies. This Privacy Policy explains what information we collect when you use our website (zepnix.app) or our product, ZepnixTravel — and what we do with it.

If you have questions about anything in this policy, email us at contact@zepnix.app.

Information you give us. When you sign up, fill out a form, or contact us, you may give us:

• Your name, email address, and phone or WhatsApp number.
• Your business name, role, and country.
• Account credentials (a password we store as a one-way hash, never in readable form).
• Payment details — handled by our payment processor, not stored by us directly.
• Content you put into ZepnixTravel: contacts, inquiries, bookings, messages, documents, and anything else you add to your account.

Information collected automatically. When you use our website or product, we automatically receive:

• Technical details: IP address, browser type, device type, operating system, time zone.
• Usage information: pages visited, features used, time of visit.
• Cookies and similar technologies (see section 10).

Information from third parties. If you connect a service to ZepnixTravel (for example, WhatsApp), we receive information that service shares with us — limited to what's needed to make the integration work.

We use the information we collect to:

• Provide the service — let you sign in, store your data, run features, send messages.
• Communicate with you — answer questions, send service updates, notify you about your account.
• Process payments and prevent fraud.
• Improve the product — understand how customers use features, find bugs, plan improvements.
• Comply with the law and protect against misuse of the service.

We don't sell your data to anyone. We don't use the content you put into ZepnixTravel (your customer data, your messages) to train AI models or advertise to you.

We share data only with companies that help us run the service. These are our subprocessors:

• Supabase — our database and authentication provider. Stores your account and application data.
• Vercel — hosts our website and application.
• Resend — sends transactional email (account confirmations, password resets, contact form replies).
• Wati — handles WhatsApp messaging through the official WhatsApp Business API.

Each of these has its own privacy and security practices. We only share what they need to do their job — for example, Resend gets the email address it needs to deliver a message, nothing more.

We may also share data when we're legally required to — for example, in response to a court order — or to protect the safety of our customers or the public.

If we're ever acquired by another company, we'll let customers know before any data is transferred.

Our main customer database is hosted by Supabase, in Singapore. Some of our other services (email, hosting, WhatsApp) may store data in other countries depending on where their servers are located.

This means your data may be processed outside Pakistan. We only work with providers that meet reasonable security standards.

We keep your data for as long as your account is active.

If you cancel your account, we keep your data for a reasonable period after — so you can change your mind, or retrieve a copy — and then we delete it.

Some information we're required to keep for longer for legal or financial reasons (for example, invoices for tax records). We keep those for as long as the law requires.

Information you ask us to delete is deleted as soon as reasonably possible, except where we have a legal reason to keep it.

You have rights over the information we hold about you:

• Access. Ask us what information we have about you.
• Correction.Fix anything that's wrong.
• Deletion. Ask us to delete your data.
• Export. Get a copy of your data in a usable format.
• Object. Tell us to stop processing your data in a certain way.

To exercise any of these, email contact@zepnix.app. We'll respond within a reasonable time.

We may need to verify your identity before we act on a request — we don't want to hand someone's data to the wrong person.

We take security seriously. Reasonable measures we have in place:

• Passwords are stored as one-way hashes — we can't read them.
• Data in transit is encrypted (HTTPS / TLS).
• Data at rest is encrypted by our database provider.
• Access to customer data is restricted to people who need it.

No system is perfectly secure. We can't promise your data will never be exposed. If we discover a breach that affects you, we'll notify you and the relevant authorities as required by law.

As mentioned in section 5, your data may be processed outside Pakistan — most likely in Singapore (Supabase) or the countries where our other providers operate.

By using ZepnixTravel, you consent to this transfer. We only use providers that have reasonable security practices, and we share only what's needed.

We use a small number of cookies — these are tiny files your browser stores so the service works.

Essential cookies.These are needed to sign you in and keep you signed in. Without them, the service doesn't work.

Analytics.We may use analytics tools in the future to understand how people use the site. If we do, we'll update this policy.

You can clear or block cookies through your browser settings. Blocking essential cookies will prevent you from signing in.

ZepnixTravel is for businesses. It's not designed for, or intended to be used by, anyone under 18.

We don't knowingly collect information from anyone under 18. If you believe we've received data from a minor, contact us and we'll delete it.

We may update this Privacy Policy. When we do:

• We'll change the "Last updated" date at the top.
• We'll email registered customers about significant changes.
• The new policy applies from the date we post it.

If you don't agree to the new policy, you can stop using the service and request deletion of your data.

For questions about this Privacy Policy, to exercise any of your rights, or for anything else — email us at contact@zepnix.app.

For legal notices, our governing jurisdiction is the courts of [CITY], Pakistan, as set out in our Terms of Service.