Draft, pending legal review. This policy is a template and is not yet in effect. Bracketed items are placeholders, and applicability of GDPR, UK GDPR, CCPA/CPRA and other laws must be confirmed by counsel.
Legal

Privacy policy

Effective date: [Effective date] · Last updated: [Date]

1. Who we are

[Company legal name], trading as ZeroDriveX, [Registered address], operates JSCAIP, the Supply Chain Analysis and Intelligence Platform. For website visitors and contact requests we act as controller. For documents customers submit for review, we act as processor on the customer's behalf [counsel to confirm roles].

2. What we collect

  • Contact requests: name, work email, and optionally company, role, review volume and your message.
  • Customer accounts: organisation name, contact email, and records of reviews (supplier name, date, review type, outcome, usage).
  • Submitted documents: supplier documents may contain personal data such as names and business contact details of supplier staff. Original files are not stored; extracted text is deleted when each review finishes; the report and extracted key facts are kept.
  • Website assistant chat: if you use the "Contact us" chat, we keep the messages you type and the automated replies for 30 days so our team can follow up and improve answers, then delete them. The assistant only uses information published on this website; it cannot see customer accounts, documents or reports. Your IP address is stored only in protected form for abuse prevention. Replies are automated. Please do not share confidential information in the chat; if the assistant cannot help, it will refer you to support@support.zerodrivex.com.
  • Technical data: server logs with request IDs, routes, status codes, timings and IP addresses used for rate limiting and security. Logs do not include document contents.

3. Why we use it

  • To respond to your enquiry [legal basis: legitimate interests / steps prior to contract].
  • To provide, secure and bill for the Service [legal basis: contract; legitimate interests].
  • To meet legal obligations [legal basis: legal obligation].

We do not sell personal data and do not use it for advertising. We do not use customer documents to train AI models [confirm against provider terms].

4. Who we share it with

Only the subprocessors needed to run the Service, (a list is available to customers on request), and authorities where the law requires. International transfers: [transfer mechanisms, e.g. SCCs].

5. How long we keep it

Website assistant transcripts: 30 days. Contact requests: [period]. Reports and usage records: [period / until deletion requested by the customer]. Logs: [period]. Backups: [period].

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to data portability. Contact us at [privacy@zerodrivex.com - confirm]. You may also complain to your data protection authority [lead authority].

7. Cookies

The public site uses no analytics or trackers. The only cookie for website visitors is a strictly necessary one set when you use the chat, so the conversation continues across pages. See our cookie policy.

8. Security

See our Security page and Security & Trust page.

9. Changes

We will post updates here and change the "last updated" date. Material changes will be notified to customers [method].