Privacy Policy

Zipflow ("we", "us", "our") is operated by Zipflow. We take your privacy seriously. This policy explains what data we collect, why we collect it, and your rights.

1. Who this policy covers

This policy covers tradespeople who use Zipflow to generate and send quotes ("users"). It also covers customers who receive and respond to quote links sent by users.

2. What data we collect

From tradespeople (registered users):

• Account data — your name, email address, and profile photo if you sign in with Google
• Business profile — business name, trade, address, phone, email, VAT number (all optional, entered by you)
• Job data — job descriptions, quotes, tasks, prices, customer names and contact details you enter
• Voice transcripts — when you use voice input, your speech is converted to text and processed to detect job details. Transcripts are stored for quality improvement
• Usage data — pages visited, features used, quote funnel events (anonymised)
• Device data — browser type, operating system, screen size (for analytics)
• Push notification tokens — if you grant permission, a device token is stored to enable push notifications

From customers (quote recipients):

• Response data — whether you accepted or declined a quote, and when
• We do not create accounts for customers. We only store your response to the specific quote link you received.

3. How we use your data

• To provide the Zipflow service — generating quotes, storing jobs, sending quote links
• To send you push notifications you have opted into (smart reminders, chase alerts)
• To improve our AI detection accuracy using anonymised transcript data
• To provide customer support
• To comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

4. Where your data is stored

Your data is stored in Google Firebase (Firestore), hosted in the European Union. Voice transcriptions use the Groq API (US-based). By using Zipflow you consent to this processing.

5. How long we keep your data

• Job and quote data: retained while your account is active, deleted within 30 days of account deletion
• Voice transcripts: retained for up to 12 months for quality improvement, then deleted
• Analytics events: retained for up to 24 months in aggregated form

6. Your rights (UK GDPR)

You have the right to:

• Access — request a copy of your personal data
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — withdraw notification permission at any time in your device settings

To exercise any of these rights, email us at privacy@zipflow.co.uk.

7. Cookies

Zipflow uses only essential cookies required for authentication (Firebase Auth session tokens). We do not use advertising or tracking cookies.

8. Third-party services

• Google Firebase — authentication, database, cloud functions (Privacy policy)
• Groq — voice transcription and AI quote generation (Privacy policy)
• Vercel — hosting and serverless functions (Privacy policy)

9. Children

Zipflow is not intended for users under 18. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy. We will notify you of significant changes by email or in-app notification.

11. Contact

Zipflow
Email: privacy@zipflow.co.uk
Website: zipflow.co.uk

---

Zipflow is registered with the Information Commissioner's Office. ICO registration number: ZC133493.