Privacy Policy

This Privacy Policy explains how Zevmio ("Zevmio", "we", "us") collects, uses and protects information when you visit our website or use the Zevmio cold email, inbox and CRM platform (the "Service"). If you have questions, contact us at contact@zevmio.com.

1. Who is responsible for your data

Your account information (for example your name, email and billing details): Zevmio decides how this is used and is responsible for it.
Data you put into the Service (for example leads, contact lists, email content and replies): you, our customer, decide what to collect and why. We process it only to provide the Service on your behalf. You are responsible for having a lawful basis to collect and contact the people in your lists.

2. Information we collect

Information you give us

Account details: name, email address, phone number, workspace name and password (stored only as a secure hash).
Sign in with Google: your name, email address and profile picture from Google.
Connected mailboxes: email address, server settings and credentials for SMTP/IMAP, or access tokens when you connect Google or Microsoft. Passwords and tokens are stored encrypted.
Customer data: leads and contact details you import or add, notes, tags, CRM deals and tasks, email templates, campaigns, and emails sent and received through connected mailboxes.
Payments: the plan and amount, payment method, transaction or invoice ID, and, for manual payments, the sender number and the payment screenshot you upload. We never receive or store your full card, bKash, Nagad or Rocket credentials.
Support and contact: messages you send us through support tickets, the contact or book-a-call forms, or email.

Information collected automatically

Security and usage data: sign-in times, failed sign-in attempts, and a one-way hashed version of the IP address used at signup and sign-in (we do not keep the raw IP address for these checks).
Email engagement: when you enable tracking in a campaign, emails include a small tracking image and tracked links so you can see opens and clicks, plus an unsubscribe link. These record when a recipient opens an email, clicks a link or unsubscribes.
Cookies: see section 8.

3. How we use information

To create and secure your account, including one-time codes for signup and sign-in.
To run the Service: send your campaigns, sync replies into your inbox, run email warmup, show analytics and enforce your plan limits.
To process payments, activate plans and send billing, trial and usage notices.
To provide support and respond to your requests.
To detect and prevent abuse, spam, fraud and security incidents, including enforcing our Acceptable Use Policy.
To improve the Service using aggregated information that does not identify individuals.
To send product updates about the Service. You can opt out of non-essential messages at any time.

We do not sell your personal information, and we do not sell or rent your customer data or lead lists.

4. Email warmup

When you turn on warmup for a mailbox, Zevmio sends and receives automated, conversational emails between your mailbox and other mailboxes in the Zevmio warmup network (other customers' warmup mailboxes and mailboxes operated by Zevmio). These messages are generated from templates; the system may open, reply to, and move them out of spam to build sender reputation. Warmup only uses warmup messages. It does not read, send or share your regular emails or your leads.

5. AI features

When you use AI features (for example writing or improving emails, or suggesting replies), the text you submit and the relevant context are sent to the third-party AI provider configured for the Service to generate a result. We send only what the feature needs. These providers process the data under their own terms. Do not submit sensitive personal data to AI features.

6. Google and Microsoft data

When you connect a Google or Microsoft mailbox, we use the access it grants only to send email you ask us to send, sync replies into your Zevmio inbox, and run warmup for that mailbox. Zevmio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use mailbox data for advertising, and we do not allow humans to read it except with your permission, for security reasons, or where required by law. You can disconnect a mailbox at any time from Email Accounts.

We share information only as needed to run the Service:

Service providers: hosting and infrastructure, email delivery, payment processing (such as UddoktaPay and mobile financial services), AI providers (section 5) and support tools. They may use the information only to provide their services to us.
Your workspace: members of your workspace can see the workspace's data according to their role.
Legal reasons: when required by law, to respond to valid legal requests, or to protect the rights, safety and property of Zevmio, our customers or others.
Business changes: if Zevmio is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction.

8. Cookies

We use cookies that are necessary for the website and Service to work: a session cookie to keep you signed in, a security token that protects forms, an optional "remember me" cookie, and preference cookies that remember your light or dark theme and sidebar layout. On public pages, optional analytics and marketing tags (Google Analytics, Google Tag Manager and Meta Pixel, when configured) run only after you choose Allow in the consent banner. These providers may set their own cookies and receive usage data. You can withdraw or change your choice using the footer's cookie settings link; necessary cookies remain in use. We do not load these marketing tags in the signed-in Service or Super Admin area.

9. Data retention and deletion

We keep account and workspace data while your account and workspace exist.
When a package expires, your workspace is paused but your data is kept so you can renew; you can still download your leads.
Workspace owners can delete a workspace, and you can delete your account from Profile settings. Deleting your account permanently removes the workspaces you own and their data, including leads, campaigns, mailbox connections and uploaded files.
We keep limited records longer when needed for legal, tax, accounting, security or fraud-prevention reasons, such as payment records and security logs. Residual copies in backups are removed as backups are rotated.
We may delete workspaces that have been inactive and unpaid for a long period, after giving notice to the owner.

10. Security

We protect information with measures including encrypted connections (HTTPS), encryption of mailbox passwords, access tokens and API keys at rest, hashed passwords, one-time verification codes, role-based access inside workspaces, and audit logs for administrative actions. No system is perfectly secure, so please use a strong password and keep your login codes private.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. You can update most details in your Profile and Workspace settings, export leads as CSV, and delete your account yourself. For anything else, email contact@zevmio.com. If you are a recipient of a customer's emails, please contact the sender directly or use the unsubscribe link; we will help route your request where we can.

12. International transfers

Our service providers may process information in countries other than yours. Where we transfer information, we take reasonable steps so it remains protected as described in this policy.

13. Children

The Service is meant for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, notify account owners by email or in the Service.

15. Contact

Questions or requests about privacy: contact@zevmio.com