Privacy Policy
Last updated: June 2026
This Privacy Policy explains how Zenvy ("we", "us", "our") collects, uses, and protects personal data in connection with the Zenvy advertising platform available at myzenvy.app. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Zenvy is a trading name of J Mani, a sole trader based in the United Kingdom. The platform connects beauty and lifestyle businesses with users of the Zenvy mobile app and is governed by UK law. For data protection enquiries, contact us at privacy@myzenvy.app.
2. What Data We Collect
Advertisers (business account holders)
- Name and email address (used to create and manage your account)
- Business name, location, and contact details you provide in your profile
- Payment information — processed securely by Stripe; we do not store card details
- Creative content you upload (images, videos, audio)
- Usage data including login times, page views, and campaign activity
- Communications you send to us (support requests, emails)
App users (Zenvy mobile app)
- No account or personal data is required to browse the Zenvy app
- Anonymous analytics may be collected by our app infrastructure provider to understand usage patterns
3. How We Use Your Data
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Providing and managing your advertiser account | Contract (Art. 6(1)(b)) |
| Processing payments via Stripe | Contract (Art. 6(1)(b)) |
| Moderating and publishing your creatives | Contract (Art. 6(1)(b)) |
| Sending transactional emails (credit expiry, moderation outcomes) | Contract (Art. 6(1)(b)) |
| Improving the platform and diagnosing technical issues | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations (e.g. financial records) | Legal obligation (Art. 6(1)(c)) |
| Sending marketing updates about new features (you may opt out at any time) | Legitimate interests (Art. 6(1)(f)) |
4. Third Parties We Share Data With
We do not sell your personal data. We share data only where necessary to operate the platform:
- Stripe — payment processing. Stripe is PCI-DSS compliant. Their privacy policy is available at stripe.com/gb/privacy.
- Vercel — hosting and edge delivery of the web platform.
- Cloudflare R2 — storage of creative media files (images, videos, audio).
- Neon / PostgreSQL — our database provider, used to store account and campaign data.
All third-party providers are required to handle your data in accordance with applicable data protection law. Where providers are based outside the UK, we ensure appropriate safeguards are in place.
5. Data Retention
- Account data is retained for as long as you hold an active account, and for up to 7 years afterwards to comply with UK financial record-keeping requirements.
- Creative media files are deleted from our servers within 30 days of the creative expiring or being removed.
- You may request deletion of your account and associated data at any time by contacting privacy@myzenvy.app. We will action deletion requests within 30 days, subject to any legal retention obligations.
6. Your Rights Under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure— request deletion of your data ("right to be forgotten")
- Restriction — ask us to restrict how we process your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests, including direct marketing
To exercise any of these rights, email privacy@myzenvy.app. We will respond within one calendar month. If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
7. Cookies
We use only essential cookies necessary to operate the platform — specifically, authentication session cookies that keep you logged in. We do not use tracking or advertising cookies. No cookie consent banner is required for essential cookies under UK law.
8. Security
We take reasonable technical and organisational measures to protect your data, including HTTPS encryption, access controls, and use of SOC 2-compliant infrastructure providers. No internet transmission is completely secure; in the event of a data breach affecting your rights and freedoms, we will notify you and the ICO as required by law.
9. Children
The Zenvy advertising platform is intended for business use only and is not directed at individuals under the age of 18. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered advertisers of material changes by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or requests, contact us at privacy@myzenvy.app.