Privacy Policy

This Privacy Policy explains how Zenvish ("Zenvish", "we", "us") collects, uses, stores, shares, and protects information when you use the Zenvish platform and the Zenvish Reputation Engine, including any information we access from your Google Business Profile with your authorisation.

Zenvish is operated from Windsor, Queensland, Australia. For any privacy question or request, contact contact@zenvish.com.

1. Information we collect

Account information

When you create a Zenvish account we collect your name, business name, email address, and the details you provide to set up and operate your store or dashboard.

Google Business Profile data (Reputation Engine)

The Zenvish Reputation Engine is an optional feature. It works only after you explicitly connect your Google account and grant the https://www.googleapis.com/auth/business.manage scope. We access data only for the Google Business Profiles that the connected Google account is authorised to manage. With your authorisation we access:

• your business's Google reviews (review text, star rating, reviewer display name, the reviewer's public profile image where one is provided, and your replies);
• the name and address Google lists for the locations the connected account manages, so you can choose which location to connect;
• the Google Business posts you create in Zenvish — their text, image, schedule, and any offer or event details you enter.

We do not read the performance metrics Google reports for your profile (such as calls, direction requests, or website clicks). We never access profiles you do not manage, and we do not use Google APIs to search for or compile information about other businesses.

How your Google connection is made

There are two connection paths, and which one applies to your account changes who holds your Google authorisation. If you are not sure which applies to you, ask us at contact@zenvish.com.

• Direct connection. You connect through Google's own secure OAuth consent screen, and Zenvish holds the resulting refresh token, encrypted at rest.
• Connection through a service provider. Where your account is connected through a review-management provider we use, you connect your Google account inside that provider's own hosted flow. On that path the provider, not Zenvish, holds your Google authorisation token, and your reviews, replies, and posts pass through it on their way to and from Google. Zenvish authenticates to the provider with a single platform credential and matches what comes back to your connected account before showing it to you.

Review request data

If your store uses Zenvish review requests, we process the customer name, email address, and mobile number already held in your store's order records so the invitation can be sent, together with a record of whether each invitation was sent, clicked, or opted out of. This data stays in your store's own database and with the SMS and email provider that delivers the message. It is not sent to Google or to that review-management provider.

2. How we use information

• To display your Google reviews and connected location inside your Zenvish dashboard.
• To help you draft replies to reviews. The review text and star rating are sent to our AI provider to produce the draft. AI-drafted replies are always shown to you for review; nothing is published to Google without your explicit approval.
• To publish and schedule the Google Business posts you create, including a weekly repeat where you choose one.
• To send the review invitations you enable, and to record their delivery, clicks, and opt-outs.
• To operate, secure, support, and improve the Zenvish platform.

We do not sell your data, we do not use it for advertising, and we do not use it to train generalised machine-learning models.

3. How we store and protect information

• On a direct connection, the Google authorisation (refresh) token is encrypted at rest, is never exposed to your browser, and is not passed to anyone else.
• On a connection made through a service provider, Zenvish holds no Google token at all — the provider holds it, as described in section 1.
• Where Zenvish calls Google itself, it does so with short-lived access tokens minted only for your connection.
• We do not build a long-term archive of your Google review content and we do not aggregate it into a separate data product. Reviews sit in a working cache that powers your inbox, and each sync deletes cached reviews that have not been refreshed in the last 30 days.
• Access to production systems is restricted.

4. Sharing

We share information only with the service providers that help us operate the platform, under terms that restrict their use of the data to providing the service. For the Reputation Engine those are:

• Our review-management provider — where your account is connected through it, it holds your Google authorisation and carries your Google reviews, replies, and posts between Zenvish and Google.
• Our AI provider — the review text and star rating are sent to it to draft a suggested reply. Drafts are returned to you; nothing is published from there.
• Our hosting provider, and the SMS and email provider that delivers review invitations you enable.

We do not otherwise share your Google Business Profile data with third parties. We may disclose information if required by law.

5. Your choices and deletion

You can disconnect your Google account from Zenvish at any time. On disconnect we delete the stored connection, any Google token we hold for it, and the reviews we cached for it, so Zenvish stops reading your profile. If your account was connected through our review-management provider, the Google authorisation on that path is held by that provider, and revoking access in your Google account ends it immediately. In either case you can revoke access directly from your Google account permissions page. You can request deletion of your Zenvish account by emailing contact@zenvish.com.

6. Cookies

This marketing website uses only the cookies necessary to serve the pages. The Zenvish application uses cookies required to keep you signed in and to operate the service.

7. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to account holders.

8. Contact

Zenvish — Windsor, Queensland, Australia. Email contact@zenvish.com.