Privacy Policy

Effective date: [TO BE SET]

Draft — not legal advice. This page is a working draft tailored from a reference template. It must be reviewed by qualified legal counsel before being treated as binding or published as final.

This Privacy Policy describes how Enterprises Zion ("Zion," "we," "us") collects, uses, and protects personal data across our products, including LovinFreq, in compliance with the LGPD (Brazil, Law 13.709/2018), GDPR (EU/UK), and CCPA/CPRA (California).

1. Controller

Enterprises Zion is the data controller for personal data described in this policy.

2. Data We Process

Identification and contact details; account credentials (hashed passwords, tokens); usage data (device, app interaction, IP); transaction details (excluding full card numbers, handled by our payment processor); support communications you send us.

3. Purposes & Legal Bases

We process data to perform our contract with you (accounts, subscriptions, support), to comply with legal obligations, for legitimate interests (security, fraud prevention, product improvement), and with your consent where required (e.g. marketing).

4. No Biometric Collection

Zion products do not collect or process biometric identifiers.

5. Data Sharing

We share data only with service providers who help us operate (hosting, payment processing, email delivery, analytics) under data-processing agreements, and with authorities when legally required. We do not sell personal data.

6. International Transfers

Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses as required by applicable law.

7. Retention

Account data is retained while your account is active. Upon deletion request, data is soft-deleted immediately and permanently erased within 30 days, except where retention is required by law (e.g. tax records).

8. Security

We use encryption in transit (TLS) and at rest for sensitive fields, hashed password storage, and access controls appropriate to the sensitivity of the data.

9. Your Rights

Depending on your jurisdiction, you may have rights to confirm, access, correct, anonymize, delete, or port your data, and to withdraw consent at any time (LGPD Art. 18, GDPR Art. 15–22, CCPA/CPRA and applicable US state laws). To exercise any right, or to request account deletion, visit our account deletion page or contact us directly.

10. Children

Our products are not directed to individuals under 18.

11. Contact

For any privacy question, data request, or complaint, the single point of contact is: support@enterpriseszion.com.