Privacy Policy

This Privacy Policy explains how Zetver ("Zetver", "we", "us") handles information when you visit zetver.com, create a business account, or use the Zetver Service — a software-as-a-service (SaaS) CRM for studios and classes covering QR check-in, attendance, memberships, payments tracking and a customer portal.

Zetver is a tool for businesses. When a studio, gym or class (a "Business") records its own customers in Zetver, the Business is responsible for that personal information; we process it on their behalf to provide the Service. This policy also tells Businesses what they can expect from us in that role.

Depending on how you use Zetver, we process the following categories of information:

• Business account information: the details a business owner provides at sign-up — owner name, email address, phone number, business name, business type and city — plus subscription plan and account status.
• Customer information entered by Businesses: records the Business creates about its own customers, such as customer name and phone number, membership or plan details, attendance and check-in history, and payment records.
• Authentication information: email address and password credentials for signing in (handled by our authentication provider), session data that keeps you signed in, and the role and permissions that control what each user can access within a business.
• Payment-related integration information: if a Business connects a payment gateway to accept online payments from its customers, we store the gateway configuration needed to operate it (such as gateway account references and API keys). These are stored securely on our servers and are never exposed in the browser. When an online payment is made, we receive and store the payment status and references (such as order and payment identifiers) returned by the gateway.
• Technical information: standard server logs and basic technical details (such as IP address, browser or device type, and timestamps) needed to operate, secure and troubleshoot the Service.

Zetver uses only what it needs to run the product:

• Authentication session cookies, so you stay signed in securely.
• Local storage for interface preferences (such as your light/dark theme choice) and to support the installable customer portal app.

We do not run third-party advertising or behavioural-tracking scripts on the product.

• We do not collect or store your customers' card numbers, CVVs, UPI PINs or other payment-instrument credentials. Card details entered during an online payment are entered directly into the payment gateway's secure checkout and are processed by the gateway — not by Zetver.
• We do not sell personal information, and we do not share it with third parties for their own marketing.

We use the information described above to:

• Provide and operate the Service — accounts, QR check-in, attendance, memberships, payments records, portals and notifications.
• Authenticate users, enforce roles and permissions, and keep each business's data isolated from other businesses.
• Provide customer support and respond to requests.
• Maintain the security, integrity and performance of the Service, and prevent abuse.
• Communicate service-related announcements, such as account, subscription or security notices.

We share information only with:

• Service providers that help us operate Zetver, notably our cloud hosting and authentication/database provider (Supabase), which stores and processes data on our instructions.
• Payment gateways (such as Razorpay), but only where a Business enables online payments. The gateway processes the customer's payment as an independent payment service provider under its own privacy policy and terms; Zetver receives only the payment status and references it needs to keep records accurate.
• Authorities, where disclosure is required by applicable law or legal process.

We never make a Business's customer records visible to other businesses on Zetver.

We use industry-standard measures to protect information, including encrypted connections (HTTPS/TLS), password-based authentication managed by our authentication provider, database access controls, and row-level security that isolates each business's data. Payment-gateway credentials are stored only on the server side and are masked when displayed.

No system is perfectly secure. If a data breach affecting your business occurs, we will notify affected Businesses as required by applicable law.

We keep business and customer records while a business account is active so the Service can function, and for a reasonable period afterwards for legal, accounting and dispute-resolution purposes.

A business owner may request deletion of its business account and the customer data in it by contacting us. We will delete the data subject to legal retention requirements and backup cycles. Individuals who have a relationship with a Business (for example, a studio member) should direct data requests to that Business first, and we will support the Business in honouring valid requests.

Depending on applicable law, you may have rights to access, correct, export or delete personal information we hold about you, and to withdraw consent where processing is based on consent. Business owners can manage most account, staff and customer data directly in the Service, or contact us for help.

Because Businesses enter their customers' information into Zetver, requests relating to that information are best made to the Business, and we will assist the Business in responding.

Zetver is a business tool and is not directed at children under 18. We do not knowingly create accounts for, or collect personal information directly from, children.

We may update this Privacy Policy as the Service evolves or the law requires. The current version is always published on this page with its "last updated" date.

For privacy questions or requests, contact zetver.com@gmail.com or use the details on our Contact Us page.