Privacy Policy
Last updated 10 Sept 2026
1. Who we are
Zavlo Ltd, a company registered in England and Wales is the data controller for the personal data described here. Contact us at privacy@zavlo.online about anything on this page.
2. What we collect
Account data (name, email, password hash, language and theme preferences), the content you create (workspaces, boards, cards, comments, attachments), and technical data such as IP address, browser user agent and timestamps used for security and troubleshooting.
3. Why we collect it, and our lawful basis
To provide the service and bill for it (performance of a contract), to keep accounts secure and prevent abuse (legitimate interests), and to meet accounting and tax obligations (legal obligation). We do not sell personal data and we do not use your content for advertising.
4. Where your data lives
Application data and backups are held on servers in the United Kingdom and the European Economic Area. Where a processor operates outside the UK, the transfer relies on UK adequacy regulations or the International Data Transfer Addendum to the standard contractual clauses.
5. Processors
Payments are processed by Stripe, which receives the billing details you enter — we never store card numbers. Transactional email may be delivered through an email provider. Each processor is bound by a written agreement limiting them to our instructions.
6. Retention
We keep your data while your account is active. Deleting your account removes your profile and any workspace you own, including its boards and cards. Backups are rotated on a short cycle. Invoices and tax records are kept for six years, as UK law requires.
7. Your rights
Under the UK GDPR you can access, correct, export, restrict, object to or delete your personal data — from the product, or by writing to privacy@zavlo.online. If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ico.org.uk). Customers in Brazil hold the equivalent rights under the LGPD and may complain to the ANPD.
8. Cookies
We use a single essential cookie to keep you signed in, plus local storage for your theme choice. No advertising or third-party tracking cookies are used, so there is no consent banner to click through.
9. Contact
Privacy questions or requests: privacy@zavlo.online