Last updated: 11 August 2026
Privacy Statement
This Privacy Statement explains how Bkody Software ("Zinevu", "we", "our" or "us"), registered with the Dutch Chamber of Commerce under KVK number 71881832, collects, uses, shares and protects personal data when you use our website at zinevu.com and our SaaS platform (together the "Services"). We act as data controller for personal data processed under this statement.
If you have questions, contact us at [email protected].
1. Personal data we collect
We collect personal data in the following categories:
Data you provide directly
- Account data — name, email address, phone number, company name and password when you register for or use the Zinevu platform.
- Contact and enquiry data — any information you submit via our contact forms, support requests or email correspondence.
- Billing data — company name, billing address and VAT number. Payment card details are processed directly by our payment processor (Stripe) and are never stored by us.
- Content data — product catalogues, pricing rules, customer records and other data you upload or create within the platform.
Data collected automatically
- Usage data — pages visited, features used, session duration, clicks and interactions within the platform.
- Device and technical data — IP address, browser type, operating system, screen resolution and referring URL.
- Cookie data — see our Cookie Policy for full details.
Data about your customers (processor role)
When you use Zinevu to manage your own customers' data (leads, signed quotes, contact details), you act as data controller and we act as data processor. Our Data Processing Agreement governs this processing.
2. Legal basis for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the Services and managing your account | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails (invoices, alerts, password resets) | Performance of a contract (Art. 6(1)(b)) |
| Processing payments | Performance of a contract (Art. 6(1)(b)) |
| Complying with legal obligations (tax records, accounting) | Legal obligation (Art. 6(1)(c)) |
| Analysing website usage to improve the Services (Google Analytics) | Legitimate interests (Art. 6(1)(f)) |
| Sending product updates and marketing emails | Consent (Art. 6(1)(a)) or legitimate interests where permitted |
| Fraud prevention and platform security | Legitimate interests (Art. 6(1)(f)) |
3. Google Analytics
We use Google Analytics 4 to understand how visitors use our website. Google Analytics collects data such as pages viewed, session duration and approximate geographic location via anonymised IP addresses. This data is processed by Google LLC on servers in the United States under the EU–US Data Privacy Framework.
We have enabled IP anonymisation. We do not use Google Analytics to build individual user profiles or serve personalised advertising. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your cookie preferences via our cookie banner.
4. How we share personal data
We do not sell personal data. We share data only with the following categories of recipients and only to the extent necessary:
- Hosting and infrastructure — Vercel (application hosting), Railway (background worker hosting). Data is stored within the European Economic Area where possible.
- Analytics — Google LLC (Google Analytics 4), under standard contractual clauses and the EU–US Data Privacy Framework.
- Payment processing — Stripe Inc., which acts as an independent data controller for payment card data.
- Customer support — support tooling used by our team to respond to tickets.
- Legal and regulatory — where we are required to disclose data by law, court order or competent authority.
Where we transfer personal data outside the EEA, we rely on adequacy decisions, standard contractual clauses or other appropriate safeguards under GDPR Chapter V.
5. Data retention
- Account data — retained for the duration of your subscription plus 30 days after termination, then deleted or anonymised.
- Billing and invoice records — retained for 7 years to comply with Dutch tax law.
- Support correspondence — retained for 2 years after the ticket is closed.
- Analytics data — retained for 14 months in Google Analytics, then automatically deleted.
- Cookie consent records — retained for 1 year.
6. Your rights under GDPR
If you are in the European Economic Area, you have the following rights regarding your personal data:
- Right of access — obtain a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data where there is no overriding legal basis for retention.
- Right to restriction — limit how we process your data in certain circumstances.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These include encryption of data in transit (TLS 1.2+) and at rest, access controls, and regular security assessments. See our Security page for more detail.
8. Children
The Services are directed at businesses and are not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.
9. Changes to this statement
We may update this Privacy Statement from time to time. We will notify registered users by email and update the "Last updated" date above. Continued use of the Services after the effective date constitutes acceptance of the revised statement.
10. Contact
Bkody Software (trading as Zinevu)
KVK: 71881832
Email: [email protected]