Privacy Policy

Last updated: December 3, 2025

Zendrite is operated by Tigzen Limited, a company registered in New Zealand. We are committed to protecting your privacy and being transparent about how we handle your data.

This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Information you provide directly:

Account information: Email address and password when you create an account
Waitlist information: Email, name, phone (optional), company details, and information about your automation needs when you join our waitlist
Payment information: Billing details processed securely by Stripe (we do not store your credit card numbers)
Automation configurations: The automations you create, including any data mappings and workflow definitions
Communications: Any emails or messages you send us

Information collected automatically:

Usage data: How you interact with our service, including automation execution logs
Device information: Browser type, operating system, and device type
Log data: IP address, access times, and pages viewed

2. How We Use Your Information

We use your information to:

Provide and maintain the Zendrite service
Process your payments and manage your subscription
Send you service-related communications (account confirmations, billing notices, security alerts)
Respond to your questions and provide customer support
Improve our service based on how it's used
Prioritize waitlist applicants based on information provided
Analyze marketing leads and campaign effectiveness, including using AI tools for data analysis
Measure the effectiveness of our marketing campaigns
Send marketing communications (only with your consent, and you can opt out anytime)

3. Data Processed by Your Automations

When you create automations, they may process data from third-party services you connect (like Google Sheets, Slack, your CRM, etc.). This data:

Is processed only as directed by your automation configuration
May be temporarily stored in logs for debugging purposes
Is not used by us for any purpose other than executing your automations
Remains your responsibility in terms of compliance with applicable laws

You are responsible for ensuring you have the right to process any personal data that flows through your automations.

4. Third-Party Services and Data Processors

We use third-party service providers (subprocessors) to help us operate Zendrite. These providers may have access to your data but are contractually required to protect it and use it only for the purposes we specify.

Our subprocessors include services for:

Infrastructure and Hosting: Heroku, Cloudflare, Redis Cloud
Analytics and Monitoring: Google Analytics, Microsoft Clarity, Facebook Pixel, New Relic, LogAbyss
AI and Data Analysis: OpenAI, Anthropic
Communications: Mailgun, Google Workspace
Customer Relationship Management: Pipedrive
Payments: Stripe

For a complete list of subprocessors, including their purposes, locations, and privacy policies, see our Subprocessors page.

We regularly review our service providers and may add or change providers as needed to improve our service. We update the Subprocessors page when changes occur.

We do not sell your personal information to third parties.

5. Data Retention

Account data: Retained while your account is active and for a reasonable period after account closure to allow reactivation. You may request immediate deletion of your account data at any time.
Automation logs: Retained as needed for debugging, service improvement, and customer support purposes. Logs are automatically purged on a rolling basis.
Waitlist data: Retained until you become a customer or request deletion
Billing and payment records: Retained separately as required by tax, accounting, and financial regulations (typically 7 years), even after account deletion

6. Data Security

We implement appropriate security measures to protect your data, including:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Regular security reviews
Limited access to personal data on a need-to-know basis

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data (subject to legal retention requirements)
Portability: Request your data in a portable format
Objection: Object to certain processing of your data
Withdraw consent: Where processing is based on consent, you can withdraw it anytime

To exercise any of these rights, contact us.

For New Zealand residents:

You have rights under the Privacy Act 2020. You can also contact the Office of the Privacy Commissioner at privacy.org.nz if you have concerns about how we handle your data.

For EU/UK residents:

You have rights under GDPR/UK GDPR. We process your data based on: (a) contract performance (to provide the service), (b) legitimate interests (to improve our service), or (c) your consent (for marketing). You can contact your local data protection authority if you have concerns.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the service and understand how it's used.

Essential Cookies (Always Active)

Session cookies: Required for authentication and keeping you logged in
Security cookies: CSRF protection and security features

Analytics Cookies (Can be disabled via browser settings)

On our website and marketing pages:

Google Analytics: Website traffic and user behavior analysis (_ga, _gid, _gat cookies)
Microsoft Clarity: Session replays and heatmaps to improve user experience (_clck, _clsk, CLID, ANONCHK, MR, MUID, SM cookies)
Facebook Pixel: Advertising campaign effectiveness measurement (fr, _fbp cookies, marketing pages only)

Inside the application:

Usage analytics: To understand feature usage and improve the product

Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent the service from functioning properly. Disabling analytics cookies will not affect core functionality.

Do Not Track: We honor Do Not Track browser signals for analytics cookies but cannot disable essential session cookies as they are required for the service to function.

For detailed information about cookies used by third-party services:

9. International Data Transfers

Zendrite is operated by Tigzen Limited in New Zealand. However, we use service providers located in various countries around the world to help us provide and improve the service.

Your personal data may be transferred to and processed in the United States, the European Union, and New Zealand. These international transfers are necessary to provide the service.

We ensure that all service providers:

Maintain appropriate data protection standards comparable to New Zealand law
Process data only as instructed by us and for specified purposes
Implement appropriate technical and organizational security measures

For EU/UK users: Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions recognized by the European Commission, or other lawful transfer mechanisms recognized under GDPR.

For a complete list of our subprocessors and data processors, see our Subprocessors page.

10. Children's Privacy

Zendrite is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or how we handle your data:

Company: Tigzen Limited, trading as Zendrite
Location: New Zealand