ZivniSign in

Privacy Policy

How Ace Communications collects, uses, and protects information you provide while using Zivni.

Last updated: April 19, 2026

1. Introduction

This Privacy Policy explains how Ace Communications (“we”, “our”, “us”), operating the Zivni field-sales platform at zivni.com and through our mobile applications, collects, uses, stores, and protects information about you and your business when you use our service. By signing up for or using Zivni you agree to the practices described here.

2. Information We Collect

2.1 Account & Profile Information

  • Full name, email address, phone number, and password (stored hashed).
  • Organisation name, country, currency, industry, and team size.
  • Role (super admin, admin, manager, sales, survey, distributor, retailer).
  • Profile photo (optional).

2.2 Operational Data You Enter

  • Outlets, distributors, products, orders, surveys, leads, opportunities, quotations.
  • Attendance check-ins, leave applications, expense claims, and HR records.
  • Photos uploaded for surveys, expense receipts, and employee documents.

2.3 Location & GPS Data

With your explicit permission, the Zivni mobile app collects your device's GPS location in the background — continuously during your working day, including when the app is closed or not actively in use. This background (“allow all the time”) location is used to display real-time team tracking on the map, to verify outlet check-ins, to compute travel distance and fuel cost, and to detect stops on your daily timeline. Background collection applies only to accounts assigned a field-sales role, runs between your check-in and check-out for the day (an automatic end-of-day check-out stops it if you forget to), and stops entirely when you sign out or revoke the location permission in your device settings. Managers and office staff are not tracked.

2.4 Payment Information

When you subscribe to a paid plan, payment details (card number, expiry, CVV, bank account) are collected and processed directly by our PCI-DSS-compliant payment partners (Safepay and PayFast in Pakistan; Paddle for legacy international subscriptions). We do not store full card numbers or CVV codes on our servers. We retain only a transaction reference, the last four digits of the card, the card brand, and the billing amount for accounting and dispute resolution.

2.5 Device & Usage Data

  • IP address, browser type, operating system, device model, app version.
  • Pages visited, features used, error logs, and performance metrics.
  • Cookies and local storage tokens used for keeping you signed in.

3. How We Use Your Information

  • To provide and operate the Zivni service for you and your team.
  • To authenticate you, secure your account, and prevent fraud.
  • To process payments, send invoices, and manage subscriptions.
  • To send service emails (password resets, billing receipts, security alerts).
  • To send optional product updates and marketing emails (you can unsubscribe at any time).
  • To improve features, debug issues, and analyse usage in aggregate.
  • To comply with legal obligations under the laws of Pakistan.

4. Data Sharing & Third Parties

We share data only with the following categories of trusted providers:

  • Hosting & database: Supabase (database, authentication, file storage), Vercel (web hosting).
  • Payments: Safepay and PayFast (Pakistan); Paddle (legacy international subscriptions).
  • Maps & geolocation: Google Maps Platform.
  • Messaging: Meta WhatsApp Business API for transactional notifications.
  • AI features: Anthropic (Claude) processes business and employee activity data to generate AI insights — both on demand (e.g. shelf photo analysis, voice orders, sales coaching) and on an automatic daily schedule (e.g. daily briefs, productivity digests, and attendance / HR anomaly detection).
  • Analytics: Google Analytics, for aggregate web-usage measurement.
  • Email delivery: Resend, for transactional, receipt, and notification emails.
  • Push notifications: Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM), to deliver mobile push notifications.

We do not sell your personal or business data to advertisers or data brokers. We only disclose data to law enforcement when compelled by a valid legal order from a court of competent jurisdiction.

5. Data Retention

We retain your account and operational data for as long as your subscription is active and for up to 90 days after cancellation, after which it is permanently deleted from production systems and within 180 days from encrypted backups. You may request immediate deletion at any time by emailing support@zivni.com.

6. Security

  • All traffic to and from Zivni is encrypted with TLS 1.2 or higher.
  • Passwords are hashed with industry-standard algorithms (bcrypt / argon2).
  • Database access is enforced through Row-Level Security policies.
  • Edge functions are protected by JWT validation and rate limiting.
  • Sensitive secrets are stored in encrypted secret managers, never in code.
  • Backups are taken daily and stored encrypted.

No system is 100% secure. In the event of a data breach affecting your account we will notify you within 72 hours of detection by email and in-app notice.

7. Your Rights

You have the right to:

  • Access a copy of all personal data we hold about you.
  • Correct inaccurate data through your profile settings.
  • Request permanent deletion of your account and data.
  • Export your business data in CSV / JSON format.
  • Withdraw consent for optional processing (e.g., marketing emails) at any time.

To exercise any of these rights, contact us at support@zivni.com. We will respond within 30 days.

8. Children

Zivni is intended for use by businesses. We do not knowingly collect personal information from children under the age of 16. If we learn that we have done so, we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be notified in-app and by email at least 14 days before they take effect.

10. Contact Us

For privacy questions, data requests, or to report a concern, please contact us: