Privacy Policy

This Privacy Policy explains how Zenvish ("Zenvish", "we", "us") collects, uses, stores, shares, and protects information when you use the Zenvish platform and the Zenvish Reputation Engine, including any information we access from your Google Business Profile with your authorisation.

Zenvish is operated from Windsor, Queensland, Australia. For any privacy question or request, contact contact@zenvish.com.

1. Information we collect

Account information

When you create a Zenvish account we collect your name, business name, email address, and the details you provide to set up and operate your store or dashboard.

Google Business Profile data (Reputation Engine)

The Zenvish Reputation Engine is an optional feature. It works only after you explicitly connect your Google account through Google's secure OAuth consent screen and grant the https://www.googleapis.com/auth/business.manage scope. We access data only for the Google Business Profiles that the connected Google account is authorised to manage. With your authorisation we access:

• your business's Google reviews (review text, rating, reviewer display name, and your replies);
• your business information (name, address, hours, categories, attributes);
• performance insights Google exposes for your profile (e.g. calls, direction requests, website clicks).

We never access profiles you do not manage, and we do not use Google APIs to search for or compile information about other businesses.

2. How we use information

• To display your Google reviews and business information inside your Zenvish dashboard.
• To help you draft replies to reviews. AI-drafted replies are always shown to you for review; nothing is published to Google without your explicit approval.
• To show you new-review alerts and the insights Google provides.
• To operate, secure, support, and improve the Zenvish platform.

We do not sell your data, we do not use it for advertising, and we do not use it to train generalised machine-learning models.

3. How we store and protect information

• The Google authorisation (refresh) token is encrypted at rest. The token is never exposed to your browser or to any third party.
• Access to Google APIs uses short-lived access tokens issued only for your connection.
• We do not build a long-term archive of your Google review content. Review content is retained only as needed to provide the feature and is not aggregated into a separate data product; we do not retain Google-sourced content beyond 30 days.
• Access to production systems is restricted and audited.

4. Sharing

We share information only with service providers that help us operate the platform (for example, hosting and, for AI-drafted replies, our AI provider), under contracts that restrict their use of the data to providing the service. We do not otherwise share your Google Business Profile data with third parties. We may disclose information if required by law.

5. Your choices and deletion

You can disconnect your Google account from Zenvish at any time. On disconnect we revoke the authorisation and delete the stored token and any cached Google-sourced content associated with that connection. You can also request deletion of your Zenvish account by emailing contact@zenvish.com. You may revoke Zenvish's access directly from your Google account permissions page.

6. Cookies

This marketing website uses only the cookies necessary to serve the pages. The Zenvish application uses cookies required to keep you signed in and to operate the service.

7. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to account holders.

8. Contact

Zenvish — Windsor, Queensland, Australia. Email contact@zenvish.com.