1. Who we are
This Privacy Policy explains how Enkova s. r. o., registered at Lehotská 370/22, 972 71 Nováky, Slovakia (trading as "Zolarflow", "we", "us", "our"), processes personal data when you use Zolarflow (the "Service"). We act as the data controller for personal data we collect about you as a user of the Service.
2. Data we collect
- Account data: name, email, password hash, profile image, workspace and role.
- Customer/contact data you upload: the contacts, notes, transcripts, scripts, and bookings you store in your workspace.
- Communications: messages you send through the Service (emails, booking reminders) and support conversations with us.
- Usage & telemetry: pages visited, actions taken, feature usage, device and browser data, IP address, approximate location, timestamps, and error logs.
- Cookies & similar technologies: as described in Section 9.
Payment information (card details, billing address) is collected and processed directly by our Merchant of Record, Paddle. We do not store full payment card data.
3. Why we use your data & legal bases
- Provide the Service (account creation, hosting your workspace, sending booking & follow-up emails on your behalf) — performance of a contract with you.
- Security & fraud prevention (abuse detection, rate limiting, suspension) — legitimate interests and legal obligation.
- Customer support — performance of a contract / legitimate interests.
- Service improvement & analytics — legitimate interests; where required, consent.
- Marketing communications to you about Zolarflow — consent (you can withdraw at any time).
- Legal compliance (tax, accounting, responding to lawful requests) — legal obligation.
4. Who we share data with
We share personal data only with:
- Service providers (subprocessors): hosting and database (Supabase / Cloudflare), email delivery, analytics, and support tooling.
- Paddle.com, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, invoicing, and refund handling.
- Professional advisers (legal, accounting) under confidentiality.
- Authorities where we are required by law to do so.
We do not sell personal data.
5. International transfers
We are based in the EU (Slovakia). Some of our subprocessors may process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or adequacy decisions issued by the European Commission.
6. How long we keep data
We keep personal data only for as long as we need it for the purposes described above, or as required by law (e.g., accounting records). When you delete your account, we delete or anonymise your personal data within a reasonable period, unless we are required to keep it.
7. Your rights
Under the GDPR you have the right to: access your data, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent at any time. You can also lodge a complaint with the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov SR) or your local supervisory authority. We respond to verified requests within one month.
8. Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, role-based permissions, and audit logging. No system can be 100% secure; you are responsible for keeping your credentials confidential.
9. Cookies
We use cookies and similar technologies that are strictly necessary to run the Service (session, authentication, security) and, where applicable, analytics cookies to understand product usage. You can manage non-essential cookies via your browser settings or in-app preferences where available.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children.
11. Changes
We may update this Privacy Policy from time to time. We will let you know of material changes via the Service or by email.
12. Contact
Enkova s. r. o., Lehotská 370/22, 972 71 Nováky, Slovakia. For any privacy questions or to exercise your rights, contact us through the in-app help or your account dashboard.