Privacy Policy

1. Introduction

This privacy policy explains how October Ventures Pte. Ltd., a company registered in Singapore, doing business as Zivooo ("Zivooo", "we" or "us"), collects, uses, shares and protects information in connection with our AI content platform available at https://zivooo.com, including all sub-sites and micro-sites controlled by us and any related application (collectively, the "Service"). In this policy, "user" or "you" means any person viewing the Service or submitting any information to Zivooo in connection with using the Service.

Zivooo is the controller of the information described in this policy. By accessing our website, using the Service, connecting an integration, or otherwise providing us with your information, you accept the practices described here. If you have questions or concerns, contact us at muntasir@zivooo.com. This policy does not apply to services offered by other companies or individuals, including third-party platforms you connect to the Service; for those we encourage you to read the applicable third-party privacy policies.

This policy forms part of, and is subject to, Zivooo's Terms of Service or any applicable subscription agreement.

2. Information we collect

2.1 Account and Personal Information

When you create an account we collect the name of the individual creating the account, email address, a hashed password, company name, and the website address you want us to work on. You may optionally provide a business phone number, brand assets, and publishing preferences (collectively, the "Personal Information"). If you contact us for support and disclose additional personal information, we store that too.

2.2 Billing Information

Payments are processed by Stripe. We do not receive or store your full card number, CVC, or bank credentials. We store the identifiers Stripe returns to us (customer and subscription IDs), your plan and its status, and the billing events needed to run your subscription. Stripe processes your payment details as a separate controller under its own privacy policy.

2.3 Website and Content Data

Delivering the Service requires us to collect and generate data about your business and your market. This includes pages we crawl from the website you give us, your business profile and brand voice as extracted from that website, products and pricing you tell us about, your ideal customer profile, publicly available pages and data about competitors you or we identify, keywords, search results, search volume and ranking data obtained from third-party data providers, your content plan, and the briefs, articles, images and metadata the Service produces for you (collectively, with anything else you input, the "Customer Content"). Customer Content is your data; we handle it as described in Section 3 and in our Terms of Service.

2.4 Connected Accounts and Credentials

If you connect a content management system (such as WordPress or Ghost), a webhook, or Google Search Console, we store the credentials or tokens needed to keep that connection working. API keys and OAuth refresh tokens are encrypted at rest using AES-256-GCM and are used only to perform the actions you enabled. You can disconnect any integration at any time from Settings, after which we stop using it and remove the stored credential.

2.5 Usage Data

When you use the Service we record data about that use ("Usage Data"), including the actions you take in the dashboard and editors, job and pipeline records, processing and error logs, and internal records of the computing resources your account consumes.

2.6 Web Tracking Information

We, and third-party service providers we engage ("Contractors"), may use cookies, web beacons, pixel tags and similar technologies to operate the Service and to understand how it is used. The data collected ("Web Tracking Information") may include the address of websites visited before and after ours, browser type, Internet Protocol (IP) address, the pages you visit and links you click, and whether you opened an email we sent. See Section 6 for details on cookies and how to control them.

3. How we use information

We use the information described above to: create and maintain your account and authenticate you; research, generate, review, score, schedule and publish content for you; operate the integrations you connect; take payment and manage your subscription; provide support and send transactional messages about your account, drafts and billing; monitor, secure, debug and improve the Service; detect and prevent fraud and abuse; and comply with legal obligations. With your consent where required, we may also send marketing about Zivooo products and services, and you can opt out at any time using the unsubscribe link in any such message or by writing to muntasir@zivooo.com.

Where the EU or UK General Data Protection Regulation applies, our legal bases are: performance of a contract with you (operating the Service and your subscription); our legitimate interests (securing and improving the Service, preventing abuse, and direct marketing to business contacts); your consent (non-essential cookies and certain marketing); and compliance with legal obligations (tax and accounting records).

3.1 Aggregated and Anonymized Data

We create statistical, aggregated data relating to our users and the Service for analytical purposes. Aggregated data is derived from Personal Information, Customer Content and Usage Data, but in aggregated form it does not identify any particular customer, individual, household, browser or device. We use it to understand our customer base and to develop, improve and market the Service, and we may disclose it in that form.

3.2 Legal Exception

Notwithstanding the above, Zivooo may use Personal Information, Customer Content and Usage Data to the extent required by law or legal process, or if in Zivooo's reasonable discretion use is necessary to investigate fraud or any threat to the safety of any individual, to protect Zivooo's legal rights, or to protect the rights of third parties.

4. AI processing of your data

The Service uses third-party artificial intelligence models to produce briefs, articles, metadata and images. To do that, we send relevant Customer Content to those providers, which can include your business profile, brand voice, product and pricing details, target keywords, competitor research, and the drafts themselves. We send only what is needed to produce your content, and we instruct providers to process it solely to return a result to us.

We do not sell your data. We do not use Customer Content to train our own models. We use AI providers under their commercial API terms, which for the providers we use do not permit training their models on data submitted through those APIs. Zivooo staff, including the editors who review your drafts before publication, can access Customer Content where it is necessary to deliver, support, secure or debug the Service.

5. How we share information

We do not sell your Personal Information, and we do not share it with third parties for their own marketing. We share information only as follows.

5.1 Service Providers

We share information with Contractors who process it on our behalf under written confidentiality and data protection obligations, and only to the extent needed to run the Service. The categories, and the providers we currently use, are:

• AI model providers (Anthropic): content brief, article, and metadata generation.
• Search and keyword data providers (Oxylabs, DataForSEO): search results, AI overviews, related questions, keyword and ranking data.
• Image generation and file storage (FAL, Amazon Web Services): article images and asset hosting.
• Hosting and infrastructure (Vercel, MongoDB, Redis): running the application and storing application data.
• Payments (Stripe): checkout, subscriptions and invoicing.
• Email delivery (Resend): transactional and account email.
• Analytics (Google Analytics): website and product usage measurement.

We may change providers as the Service evolves. A current list is available on request at muntasir@zivooo.com.

5.2 Platforms You Connect

When you connect a publishing platform or webhook, we send the content and metadata you approved to that platform on your instruction. What that platform then does with it is governed by its own terms and privacy policy.

5.3 Within Your Organization

We disclose Customer Content and Usage Data to the administrators and users of the account under which it was submitted.

5.4 Permitted Disclosures

Zivooo reserves the right to disclose information it collects in connection with the Service (a) to any successor to Zivooo's business as a result of any merger, acquisition or similar transaction, in which case this policy continues to apply until the successor gives notice of a new one; and (b) to any law enforcement or regulatory authority to the extent required by law, or if in Zivooo's reasonable discretion disclosure is necessary to investigate fraud or any threat to the safety of any individual, to protect Zivooo's legal rights, or to protect the rights of third parties.

6. Cookies and analytics

We use strictly necessary cookies to keep you signed in and to secure your session; the Service does not work without them. We also use Google Analytics to understand how the website and product are used, which sets cookies and processes your IP address and interaction events. Most browsers let you block or delete cookies, and you can opt out of Google Analytics using Google's opt-out browser add-on. Blocking strictly necessary cookies will prevent you from signing in.

7. Google Search Console integration

The Service offers an optional integration with Google Search Console so that we can measure how your content performs and find keyword opportunities. Connecting it is entirely your choice, and the Service works without it. When you connect your Google account, Zivooo requests a single Google OAuth scope:

• https://www.googleapis.com/auth/webmasters.readonly: read-only access to the Search Console properties you own, so the Service can retrieve your search performance data (queries, impressions, clicks, average position, and the pages they belong to) and your list of verified properties. This scope is read-only. It cannot modify or delete anything in your Search Console account, and it gives us no access to Gmail, Drive, Calendar, Contacts, or any other Google service.

We use this data only to report your performance back to you, to expand your keyword pool, to detect keyword cannibalization, and to decide which published articles need refreshing. Zivooo's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not sell Google user data.
• We do not use Google user data to train generalized or artificial intelligence models.
• We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features that are prominent in the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not allow humans to read your Google user data unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and used for internal operations in accordance with applicable privacy requirements.

You can disconnect Search Console at any time from Settings, which revokes the stored OAuth token and stops all further access. You can also revoke Zivooo's access directly from your Google Account permissions page.

8. Data retention and deletion

We keep your information for as long as your account is active and for as long as needed to provide the Service. You can delete your account at any time from Settings. Doing so cancels any active subscription and purges your account record together with the associated crawled pages, competitor data, keyword pools, content hubs, calendar items, content jobs, publishing records, backlink records and usage logs from our systems.

Two things survive deletion, by design. Articles already published to your own website or CMS remain there, because they belong to you and live on your property; remove them from your own platform if you no longer want them. And we retain records we are legally required to keep, such as invoices and tax records held by us and by Stripe, along with aggregated and anonymized data that no longer identifies you. Residual copies may persist in encrypted backups for a limited period before being overwritten on our normal backup cycle.

9. Your privacy rights

You can review and update most of your Personal Information directly in the Service using the profile and settings pages, and you can export or delete your content and your account from Settings.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to how we process it, to receive it in a portable format, to withdraw consent at any time without affecting processing already carried out, and to opt out of the sale or sharing of personal information (we do neither). If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority. If you are in Singapore, you may contact the Personal Data Protection Commission.

To exercise any of these rights, write to muntasir@zivooo.com. We respond within 30 days, or sooner where the law requires it. We may need to verify your identity before acting on a request, and we will not discriminate against you for exercising these rights. Where you submit personal data about other people as part of Customer Content, you act as the controller of that data and we process it on your behalf as described in our Terms of Service.

10. International data transfers

Zivooo is established in Singapore, and the providers listed in Section 5.1 operate in a number of countries, including the United States and the European Union. Using the Service therefore involves transferring information across borders, including to countries whose data protection laws differ from those where you live. Where such a transfer is subject to the EU or UK GDPR, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by the provider concerned.

11. Security

We take security precautions to protect the security and integrity of your information in accordance with this policy and applicable law. These include encryption in transit, encryption at rest for integration credentials and OAuth tokens, hashed passwords, access controls limiting staff access to what their role requires, and separate authentication for our editorial staff. However, no Internet transmission or storage system is completely secure, and we cannot guarantee that a security breach will never occur. Without limiting the foregoing, we are not responsible for the actions of hackers and other unauthorized third parties that breach our reasonable security procedures. If a breach affects your personal data and the law requires notice, we will notify you and the relevant authority within the applicable deadline.

12. Children

The Service is a business product intended for use by people aged 18 and over. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a child has provided us with personal information, contact us at muntasir@zivooo.com.

13. Links to other websites

The Service may contain links to other websites, and the content we produce for you cites third-party sources. Zivooo is not responsible for the privacy practices or the content of those websites. Review the privacy statement of any site you visit that collects information. This policy applies solely to information collected by Zivooo.

14. Changes to this policy

Zivooo may modify this policy from time to time. If we make a material change to how information is collected, used or transferred, we will update this page, revise the "Last revised" date above, and give more prominent notice such as an email to the address on your account. Continued use of the Service after a change takes effect means you accept the updated policy.

15. Contact us

The Service is operated by October Ventures Pte. Ltd., a company registered in Singapore, doing business as Zivooo. For privacy questions, to exercise your rights, or for general product support, write to muntasir@zivooo.com.