Privacy Policy

Privacy Policy

Last updated November 04, 2025

This privacy notice for Zinnia Software, Inc. ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

  • Visit our website at http://www.getzinnia.ai, or any website of ours that links to this privacy notice

  • Download and use our mobile application (Zinnia), or any other application of ours that links to this privacy notice

  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@getzinnia.com.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

  • job titles

  • email addresses

  • names

  • phone numbers

  • usernames

  • passwords

  • contact preferences

  • contact or authentication data

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Facebook, Twitter, or other social media account. If you choose to register in this way, we will collect the information described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:

  • Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's calendar, and other features. If you wish to change our access or permissions, you may do so in your device's settings.

  • Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.

This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

  • Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).

  • Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

Information collected from other sources

In Short: We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources.

In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, social media platforms, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion. If you interact with us on a social media platform using your social media account (e.g., Facebook or Twitter), we receive personal information about you such as your name, email address, and gender. Any personal information that we collect from your social media account depends on your social media account's privacy settings.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.

  • To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.

  • To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.

  • To enable user-to-user communications. We may process your information if you choose to use any of our offerings that allow for communication with another user.

  • To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.

  • To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see "WHAT ARE YOUR PRIVACY RIGHTS?" below.

  • To post testimonials. We post testimonials on our Services that may contain personal information.

  • To evaluate and improve our Services, products, marketing, and your experience. We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.

  • To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.

  • To send users a daily dossier of every external meeting they have that day. With user's permission, Zinnia will integrate into their calendars using Google Calendar or Outlook Calendar to pull their external meetings. Using that data, we will provide a summary every morning of every person they are meeting with each day, a bio on the company they work for, and other information generated from the internet.

  • To enable users to pull relevant data on people and companies that they search within Zinnia. With user's permission, Zinnia will provide contextually relevant search outputs for any bio or company searched for, based on the user searching.

2.1 AI Features & Customer Data Isolation

In addition to the ways we process your information described above, we also offer AI-enabled features. The following section explains how we handle customer data in connection with those capabilities.

When you use these AI-enabled features, we handle your data with the same care and protection as all other data covered by this Policy. Specifically:

  • No Training Use: We do not use customer data—whether content, metadata, or outputs—to train, fine-tune, or otherwise improve our AI models or any third-party models in a way that would mix your data with other customers’ data.

  • Data Isolation: All data processed through AI features remains isolated within your organization’s account and workflows. It is never shared or combined with other customers’ data for cross-training, benchmarking, or analytics.

  • Third-Party AI Providers: If we rely on trusted third-party AI providers, they are contractually required to process your data only to provide the requested functionality and are prohibited from using it to train or improve their own models.

  • Security and Confidentiality: AI-related data is subject to the same technical and organizational safeguards we apply throughout our systems, including encryption in transit and at rest, strict access controls, and audit logging.

  • Transparency and Control: If we ever change how your data is used for AI purposes, we will update this Policy and, when required by law, request your consent before applying such changes. You may also disable or opt out of AI-enabled features at any time by contacting us.

  • Data Rights: You retain full ownership and control of your data. Upon request or termination, your data and any AI-generated derivatives will be deleted in accordance with our standard data deletion procedures.

3. What Legal Bases Do We Rely On to Process Your Personal Information?

In Short: We process your information only when necessary and with a valid legal reason (e.g., consent, contractual obligations, compliance with laws, legitimate business interests).

If you are in Canada, we may process your information with your express or implied consent, or in limited cases without consent as allowed by law.

4. When and With Whom Do We Share Your Personal Information?

 In Short: We may share information with third parties as described below.
Vendors, Consultants, and Third-Party Service Providers
 We share data with third parties who perform services for us. They are contractually obligated to protect your data and only use it as instructed.
Third Parties May Include:

  • Advertising/Marketing: Google, Microsoft

  • Account Connections: Google, LinkedIn

  • Cloud Services: AWS, Google Cloud, Microsoft Azure

  • Infrastructure: Cloud Firestore

  • Billing: Stripe, QuickBooks

  • Retargeting: Google Ads, LinkedIn, Facebook

  • Social Media: Meta

  • User Authentication: Google OAuth, LinkedIn OAuth, Outlook OAuth

  • Analytics: Google Analytics

  • Hosting: Webflow

  • Performance Monitoring: Hotjar, Mixpanel

  • CRM Integrations: HubSpot, Salesforce – If you choose to connect your CRM, any data synced from HubSpot or Salesforce is stored in isolation from other organizations. This data will never be shared with other Zinnia customers. Upon request, we will delete any synced data stored in our systems.

Other Sharing Situations

  • Business Transfers: In case of mergers, sales, etc.

  • Other Users: Publicly shared information may be visible to others.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: Yes, we use cookies and similar technologies to collect and store information. See our Cookie Notice for details.

6. How Do We Handle Your Social Logins?

In Short: If you use a social media account to register or log in, we may receive certain profile information from your provider (e.g., name, email, profile picture). We use this data only for the purposes described in this notice. Please review your social media provider’s privacy policy for more info.

7. How Do We Keep Your Information Safe?

In Short: We use reasonable technical and organizational security measures to protect your information. However, no system is 100% secure, so use the Services at your own risk and always use secure environments.

8. Do We Collect Information From Minors?

In Short: We do not knowingly collect or market to children under 18. If we learn of such data collection, we will delete it. If you become aware of this, please contact us at support@getzinnia.com.

9. What Are Your Privacy Rights?

In Short: In some regions (e.g., Canada), you have rights to access, correct, delete, or restrict processing of your data. You can review, change, or terminate your account at any time.

  • Withdraw Consent: You can withdraw your consent at any time.

  • Opt Out of Marketing: Unsubscribe via links in emails or contact us.

  • Account Information: Update or delete your info in account settings. Some data may be retained for legal or fraud-prevention reasons.

  • Cookies: Most browsers allow you to reject cookies (may impact functionality).

For questions, email us at support@getzinnia.com.

10. Controls for Do-Not-Track Features

Most browsers and some apps offer a Do-Not-Track (“DNT”) setting. There’s currently no uniform standard for DNT signals, so we do not respond to them at this time.

11. Do United States Residents Have Specific Privacy Rights?

In Short: Residents of California, Colorado, Connecticut, Utah, and Virginia have specific rights regarding personal information.

Categories of Personal Information Collected

How We Use and Share Information

  • Targeting/marketing cookies

  • Social media cookies

  • Beacons/pixels/tags

Your Rights

  • Request deletion of your data

  • Request to know what data is collected/used/shared

  • Right to non-discrimination for exercising privacy rights

  • Right to limit use/disclosure of sensitive info (not applicable as we don’t process it)

  • Opt out of selling/sharing personal info (disable cookies or use the “Do Not Sell or Share My Personal Information” link)

For more details or to exercise your rights, contact support@getzinnia.com.

12. Do Other Regions Have Specific Privacy Rights?

In Short: You may have additional rights based on your country.

Australia

We comply with the Privacy Act 1988. You can request access to or correction of your information at any time.

13. Calendar Integration

Zinnia offers optional integration with Google Calendar and Outlook Calendar. With your authorization, we have read-only access to your calendar events to provide daily meeting summaries. You can revoke access at any time in your account settings.

14. Personal and Company Bios

Bios in Zinnia’s daily summaries are generated from public data sources using AI. We strive for accuracy but cannot guarantee it, so don’t use our bios for anything official (unless you enjoy living dangerously). Please report inaccuracies to support@zinnia.com.

15. Limited Use and Compliance

 Calendar data is used solely to generate daily summaries for you. We do not transfer, sell, or use your data for advertising or credit purposes.
Similarly, any data synced from HubSpot or Salesforce is stored strictly for your organization’s use, kept in isolation from other Zinnia customers, and never shared outside your account. Upon request, we will delete any synced CRM data stored in our systems.
All staff and contractors must comply with this policy and Google’s API Services User Data Policy.

16. Do We Make Updates to This Notice?

In Short: Yes, we update this notice as needed. The revised date will be posted. Major changes may be communicated directly or via prominent notice.

17. How Can You Contact Us About This Notice?

For questions or comments, email us at support@getzinnia.com or mail:

Zinnia Software, Inc.
3423 Piedmont Rd NE
Atlanta, GA 30305
United States

18. How Can You Review, Update, or Delete the Data We Collect From You?

You may request access, changes, or deletion of your personal information by contacting support@getzinnia.com.