Privacy Policy

Zentro ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. If you have questions, contact us at zentrotax@gmail.com.

1. Information We Collect

• Account information: When you create a account we collect your name, email address, and password (stored as a secure hash).

• Financial transaction data: Transaction records you upload via CSV — including merchant name, amount, date, and category. This data is used solely to provide the Zentro service.

• Usage data: Information about how you use the platform, including features accessed, pages visited, and actions taken within the app. This helps us improve the service.

• Device and browser information: IP address, browser type, operating system, and referring URLs collected automatically when you use the service.

• Payment information: Zentro uses Stripe to process payments. We do not store your credit card number, CVV, or full card details. Stripe's privacy policy governs payment data.

2. How We Use Your Information

• Providing the service: We use your financial data to classify transactions, surface deductions, generate reports, and power the AI Tax Coach.

• Improving accuracy: Aggregated, anonymized transaction patterns may be used to improve the AI model's classification accuracy. Your personal financial data is never used to train models in a way that could be traced back to you.

• Communication: We use your email address to send service updates, security alerts, and (if you opt in) product news. You can unsubscribe at any time.

• Legal compliance: We may retain and disclose data as required by law, regulation, or valid legal process.

3. Data Security

• All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

• We never store your bank login credentials. Zentro works with CSV exports — no direct bank connection or OAuth access is required.

• Access to user data is strictly limited to Zentro personnel who need it to provide the service.

• We conduct regular security reviews and maintain industry-standard security practices.

• In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery.

4. Third-Party Services

• Stripe: We use Stripe, Inc. to process all payments. Stripe is PCI DSS Level 1 certified. Your payment data is governed by Stripe's Privacy Policy.

• Analytics: We may use privacy-respecting analytics tools to understand aggregate usage patterns. We do not sell analytics data.

• Infrastructure: Zentro uses cloud infrastructure providers to host and process data. All providers are contractually required to maintain appropriate security standards.

• We do not sell, rent, or share your personal data with third parties for marketing purposes — ever.

5. Data Retention

• We retain your account data and transaction history for as long as your account is active.

• If you delete your account, your personal data and transaction history are permanently deleted within 30 days.

• Anonymized, aggregated data may be retained indefinitely for product analytics.

• You may export all your data at any time from your account settings before deletion.

6. Your Rights

• Access: You have the right to request a copy of all personal data we hold about you.

• Correction: You may update or correct your account information at any time from your settings.

• Deletion: You may delete your account and all associated data at any time. We will process the deletion within 30 days.

• Portability: You may export your transaction data and reports in CSV or PDF format from your dashboard.

• Opt-out: You may opt out of non-essential communications at any time using the unsubscribe link in any email.

7. Children's Privacy

• Zentro is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

• If you believe we have inadvertently collected information from a minor, please contact us immediately at zentrotax@gmail.com and we will delete the information promptly.

8. Changes to This Policy

• We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the 'Last updated' date below.

• Continued use of Zentro after a policy update constitutes acceptance of the revised policy.

9. Contact Us

• If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at zentrotax@gmail.com.

• We will respond to all privacy-related inquiries within 5 business days.