Privacy Policy

1. Introduction

Zovik.ai (“Zovik,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS analytics platform and related services (collectively, the “Service”).

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, company name, and password when you create an account.
• Store information: Store URLs, platform credentials, and configuration settings when you connect your Shopify or WooCommerce stores.
• Advertising account data: Google Ads and Meta Ads account data, including campaign performance metrics, ad spend, and attribution data, accessed via authorized API connections.
• Communications: Information you provide when contacting support or submitting forms.

2.2 Information Collected Automatically

• Usage analytics: Pages visited, features used, session duration, and interaction patterns within the Service.
• Device information: Browser type, operating system, IP address, and device identifiers.
• Log data: Server logs, error reports, and performance data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including our analytics dashboards and AI-powered insights.
• Process and analyze your eCommerce and advertising data to generate actionable recommendations.
• Send you product updates, service announcements, and transactional communications.
• Respond to your requests, comments, and support inquiries.
• Monitor and analyze usage trends to improve user experience.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations.

4. Data Storage and Security

Your data is stored on Amazon Web Services (AWS) infrastructure. We implement industry-standard security measures, including:

• Encryption at rest: All stored data is encrypted using AES-256 encryption.
• Encryption in transit: All data transmitted between your browser and our servers is protected via TLS 1.2 or higher.
• Access controls, audit logging, and regular security assessments.

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We integrate with and may share data with the following third-party services to provide our Service:

• Anthropic: Powers our AI-driven analytics and insights engine. Data sent to Anthropic is processed in accordance with their privacy policy and is not used to train AI models.
• Google: We access Google Ads data via authorized API connections to provide ad performance analytics.
• Meta: We access Meta Ads data via authorized API connections to provide ad performance analytics.
• Shopify:We access store data via Shopify's API to provide eCommerce analytics.
• WooCommerce:We access store data via WooCommerce's REST API to provide eCommerce analytics.

We only share the minimum data necessary for each integration to function. We do not sell your data to any third party.

6. Cookies

We use cookies strictly for analytics and essential service functionality. Specifically:

• Essential cookies: Required for authentication, session management, and core platform functionality.
• Analytics cookies: Used to understand how users interact with the Service so we can improve it.

We do not use advertising or tracking cookies. We do not serve ads on our platform.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. Upon account closure or deletion request:

• All personal data and connected store/ad account data will be permanently deleted within 30 days.
• Anonymized, aggregated data that cannot identify you may be retained for analytical purposes.
• Data required for legal compliance may be retained for the legally mandated period.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable export of your data.
• Objection: Object to certain processing activities.

To exercise any of these rights, contact us at privacy@zovik.ai. We will respond within 30 days.

9. GDPR Compliance (EEA Users)

If you are located in the European Economic Area (EEA), the following additional provisions apply:

• Legal basis: We process your data based on (a) your consent, (b) performance of a contract, (c) legitimate business interests, or (d) legal obligations.
• Data transfers: Your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and other approved transfer mechanisms to ensure adequate data protection.
• Data Protection Officer: You may contact our data protection team at privacy@zovik.ai.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

10. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know: You may request details about the categories and specific pieces of personal information we collect.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt-out:We do not sell personal information. If this changes, we will provide a “Do Not Sell My Personal Information” mechanism.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at privacy@zovik.ai.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: