Privacy Policy

Effective October 20, 2026

History

Last updated: October 20, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of consumers' personal information, that does business in the State of California.
CCPA and/or CPRA refers to the California Consumer Privacy Act (the "CCPA") as amended by the California Privacy Rights Act of 2020 (the "CPRA").
Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to Zwivio LLC, 11220 W Burleigh St Ste 100 Wauwatosa, WI 53222-3214.
Consumer, for the purpose of the CCPA/CPRA, means a natural person who is a California resident.
Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
Country refers to: Wisconsin, United States.
Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. We use "Personal Data" and "Personal Information" interchangeably unless a law uses a specific term.
Service refers to the Website.
Service Provider means any natural or legal person who processes the data on behalf of the Company.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
Website refers to Zwivio, accessible from https://zwivio.com.
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Email address
First name and last name
Phone number
Address, State, Province, ZIP/Postal code, City
Location data (ZIP code, city, and in some cases approximate or precise location coordinates for dispatch routing, appointments, job status, customer live tracking where enabled, and related operational features)
Business information (for contractor accounts: business name, license number, insurance details, service ZIP codes)
Payment information (processed via Stripe for Zwivio platform billing and, where enabled, contractor Field Console invoice payments through contractor-connected Stripe accounts; Zwivio does not store raw card or bank account data)

Business Fit Check Data

When a service business uses the AI-assisted Business Fit Check, We may collect and process the conversation, including information the user provides about the business's services, service area, work preferences, availability and communication readiness, and ability to satisfy applicable business or trade requirements. We may use an artificial intelligence Service Provider to generate replies and to identify or summarize assessment facts from the conversation.

We store Business Fit Check messages, generated replies, accepted structured assessment facts, assessment results, source and campaign attribution, and limited provider or error metadata. Authorized Admin and Operations personnel may review this information and create secure internal CSV exports for quality assurance, support, safety, auditing, and analysis of whether the assessment is operating as intended.

The Business Fit Check is not intended to collect identity documents, Social Security numbers, payment credentials, sensitive identity numbers, or uploaded verification documents. Users should not provide that information in the assessment.

Field Console Data

When contractors use Field Console, We may collect and process information the contractor enters or generates in connection with their business operations, which may include:

Contractor customer names, phone numbers, email addresses, and service addresses
Job history, service records, service notes, appointment details, follow-ups, and reports
Follow-up schedules, contractor-configured customer reminders, and job type, trade, season, or schedule intent used to support follow-ups where enabled
Invoices, line items, invoice status, payment status, and payment records (including manual and online payments where enabled)
Invoice delivery, link access, and open or view status, including whether a customer has opened an invoice link, where such tracking is enabled
Job photos, closeout or close packet images, equipment documentation, and other uploaded job documentation where enabled
Technician assignment, job status, trip or job updates, and related operational metadata
Technician or job location data when live tracking, status updates, maps, or similar Field Console features are enabled

This Field Console data may relate to the contractor's customers and technicians. It is processed to provide Field Console to the contractor that entered or controls it, as described further in this Privacy Policy.

Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit Our Service or when You access the Service by or through a mobile device. Infrastructure providers (Render) automatically collect standard server logs including IP addresses, request timestamps, and user agent strings for operational and security purposes.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. The technologies We use may include:

Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons that permit the Company to count users who have visited those pages or opened an email.

We use both Session and Persistent Cookies for the purposes set out below:

Necessary / Essential Cookies. These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts.
Cookies Policy / Notice Acceptance Cookies. These Cookies identify if users have accepted the use of cookies on the Website.
Functionality Cookies. These Cookies allow Us to remember choices You make when You use the Website, such as remembering your login details or language preference.

Where required by law, we use non-essential cookies only with Your consent. You can withdraw or change Your consent at any time using Our cookie preferences tool or through Your browser/device settings.

We may also use cookies and similar technologies for advertising measurement, conversion tracking, and attribution on public marketing and onboarding pages.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.
To manage Your Account: to manage Your registration as a user of the Service.
For the performance of a contract: the development, compliance and undertaking of any contract with Us through the Service.
To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding updates or informative communications related to dispatch, verification, booking confirmations, and service updates.
To provide You with news, special offers, and general information about other goods, services and events which We offer, unless You have opted not to receive such information.
To manage Your requests: To attend and manage Your requests to Us.
For dispatch routing: To match homeowner service requests with qualified contractors based on location, availability, and reliability.
For Field Console: To provide contractor operations tools; maintain contractor customer records; schedule and manage jobs; send invoice, customer, and job updates; support service records, follow-ups, reports, and online invoice payment workflows where enabled; and provide support, troubleshooting, and security for Field Console features.
For the Business Fit Check: To provide an AI-assisted assessment for service businesses, understand and summarize assessment responses, answer grounded product questions, determine which assessment topics need clarification, support a reviewed transition into the application process, and evaluate the quality and safety of the assessment.
For business transfers: We may use Your Personal Data in connection with a merger, acquisition or sale of Company assets.
For other purposes: We may use Your information for data analysis, identifying usage trends, and to evaluate and improve our Service.

We may share Your Personal Data in the following situations:

With Service Providers: We may share Your Personal Data with Service Providers to monitor and analyze the use of our Service, to contact You, to process payments, and to process AI-assisted Business Fit Check conversations and structured assessment information on Our behalf.
With matched contractors or homeowners: When a job is officially assigned, the homeowner's contact information is shared with the assigned contractor only, and the contractor's profile information is shared with the homeowner. Contact information is not shared before official assignment.
For business transfers: We may share or transfer Your Personal Data in connection with any merger, sale of Company assets, or acquisition.
With Your consent: We may disclose Your Personal Data for any other purpose with Your consent.
With contractors using Field Console: Where a contractor uses Field Console for their own customers or jobs, We may share limited information with that contractor's customers or authorized users (for example, invoice links, customer status pages, appointment or job updates, or live location where a feature is enabled and permissions allow) as directed by the contractor's use of the Service.

Contractor Customer Data in Field Console

Contractors retain ownership of customer data they enter into Field Console. We process that data to provide the Field Console service for that contractor, including storage, backups, support, security, and service operation as described in this Privacy Policy.

We do not use contractor-entered Field Console customer data for unrelated marketplace routing, marketplace lead generation, or marketing without appropriate authorization. Marketplace dispatch and Field Console are separate product surfaces; information You provide for marketplace jobs or homeowner requests is handled under the marketplace-related sections of this Privacy Policy.

Customers whose information was entered by a contractor into Field Console may contact Zwivio about privacy requests; depending on the request and applicable law, Zwivio may coordinate with the contractor that provided or controls the customer relationship.

Contractors may request an export of their Field Console customer and job data by contacting [email protected]. Following account or subscription cancellation, Zwivio may retain Field Console data for a reasonable period to allow for data export requests before deletion or anonymization, unless a longer retention period is required or permitted for legal, tax, accounting, dispute, security, or service-operation purposes.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We apply the following maximum retention periods:

Account Information: Retained for the duration of your account relationship plus up to 24 months after account closure.
Customer Support Data: Support tickets and correspondence up to 24 months from ticket closure.
Usage Data: Website analytics data, cookies, IP addresses, device identifiers: up to 24 months from date of collection. Server logs: up to 24 months for security monitoring and troubleshooting.
Marketing Data: Retained until you unsubscribe or up to 24 months from your last engagement.
Business Fit Check Data: Assessment conversations, generated replies, structured assessment facts, results, attribution, and related quality or runtime metadata are retained on a rolling basis for up to approximately 180 days from the most recent assessment activity, unless a longer period is required or permitted for legal, security, fraud-prevention, or dispute purposes.
Field Console Records: Contractor customer records, invoices, payment records, service records, job history, and related Field Console operational data may be retained for the duration of the contractor's account relationship and for a reasonable period thereafter (including after Field Console subscription cancellation to allow export requests as described above), or longer where needed for legal, tax, accounting, dispute, security, fraud prevention, or service-operation purposes.
Location and Job Status Records: Location, trip, and job-status data collected through Field Console or marketplace features may be retained for the duration of the relevant job or account relationship and for a reasonable period thereafter, or longer where needed for support, security, dispute resolution, or legal compliance.

We may retain Personal Data beyond these periods where required by legal obligation, to establish or defend legal claims, or at your explicit request.

When retention periods expire, We securely delete or anonymize Personal Data. Residual copies may remain in encrypted backups for a limited period consistent with our backup retention schedule.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

You may contact Us to request access to, correct, or delete any Personal Data that You have provided to Us.

To request deletion of your personal data, email [email protected] with the subject line "Data Deletion Request". We will respond within 30 days.

Please note that We may need to retain certain information when We have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

SMS / Text Messaging

The Company may send you automated transactional SMS messages including verification codes, job dispatch notifications, booking confirmations, status updates, Field Console invoice or job updates where enabled, and operational alerts related to your use of the Zwivio platform.

Message frequency varies based on your activity on the platform. Msg & data rates may apply. Consent to receive SMS is not a condition of purchase or use of our Service.

Reply STOP to opt out of SMS messages from Zwivio.
Reply START to opt back in.
Reply HELP for assistance or contact us at [email protected].

Opting out may limit our ability to deliver time-sensitive service and dispatch updates. For questions about our SMS practices, contact us at [email protected].

Detailed Information on the Processing of Your Personal Data

The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.

Payments

We use third-party services for payment processing. Stripe is used for distinct payment flows:

Zwivio platform billing. Stripe processes contractor billing for Zwivio marketplace platform fees, Field Console subscriptions, and related charges to Zwivio. Payment method details for these charges may be stored by Stripe on our behalf. Zwivio does not store raw card or bank account data for these payments.
Field Console invoice payments (Stripe Connect). Where a contractor enables online invoice payments, Stripe Connect Express may process customer payments to the contractor's connected Stripe account. The contractor is the merchant of record for those invoice payments. Stripe may process customer payment details, contractor onboarding and identity verification (KYC) information, and contractor bank or payout information according to Stripe's terms. Zwivio facilitates invoice and payment-link technology and stores payment status and correlation records needed to operate Field Console; Zwivio does not store raw customer card or bank data for these payments.

Your payment information is subject to Stripe's Privacy Policy: https://stripe.com/privacy

SMS and Communications

We use third-party services to deliver SMS messages.

Telnyx. Telnyx is used to send transactional SMS messages including verification codes, dispatch notifications, job updates, and account communications. Your phone number and message content are transmitted to Telnyx for delivery purposes. Telnyx's Privacy Policy: https://telnyx.com/privacy-policy

Email Marketing

We may use Your Personal Data to contact You with transactional emails and other information related to your service requests or contractor account. You may opt-out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email We send or by contacting Us.

Resend. Their Privacy Policy can be viewed at https://resend.com/legal/privacy-policy

Maps and Location Services

We use third-party map services and may process approximate and/or precise location data for marketplace dispatch, appointment and job status, customer live tracking or status pages where enabled, technician or job location updates, maps in Field Console or contractor tools, and operational support.

Where live location sharing is enabled for a job or feature, location information may be shown to customers or other permitted users according to the feature, permissions, and the contractor's or user's use of the Service. Availability of specific live-tracking or map views may vary by product area and configuration.

When a technician initiates an on-the-way or similar active trip status update for a Field Console job, their real-time or near-real-time location may be shared with the customer associated with that job for the duration of the active trip session, where the feature is enabled. Location sharing ends when the technician marks arrived, the trip session ends, or the job is cancelled.

Mapbox. We use Mapbox to render maps, including service area maps and job-related map displays where applicable. Mapbox may collect your IP address and general or precise location data for map rendering and related services. Mapbox's Privacy Policy: https://www.mapbox.com/legal/privacy

Usage, Performance and Miscellaneous

Cloudflare. We use Cloudflare for DNS, content delivery, security, and performance services. Cloudflare processes visitor IP addresses and related request metadata at the network edge before traffic reaches our servers. When you visit our public pages, we may also create a privacy-preserving internal analytics record that includes the page visited, timestamp, referrer, browser family, limited marketing attribution tags (such as UTM parameters), and approximate IP-based location data such as country, region, and city when available. We do not store raw IP addresses in these internal traffic insights records. Instead, we store a derived hashed identifier for limited internal analytics and site operations. These records are automatically deleted after 365 days. Cloudflare's Privacy Policy: https://www.cloudflare.com/privacypolicy/
Google Ads. We use Google Ads and related Google advertising technologies on public marketing and onboarding pages to measure the effectiveness of our advertising and understand whether our ads lead to contractor onboarding or other relevant actions. These technologies may use cookies, device identifiers, browser information, referral URLs, pages visited, approximate location, and advertising click identifiers such as gclid. We use this information for ad attribution, conversion measurement, campaign performance analysis, and improving our public marketing. Google may process this information according to its own Privacy Policy and advertising technologies policies. Google's Privacy Policy: https://www.google.com/intl/en/policies/privacy/
Reddit Ads. We use Reddit advertising technologies, including the Reddit Pixel and Conversions API, on public marketing and onboarding pages to measure the effectiveness of our Reddit advertising and understand whether our ads lead to contractor onboarding or other relevant actions. These technologies may use cookies, device or browser identifiers, IP address, user agent, referral URLs, pages visited, and advertising click identifiers such as rclid, and may receive limited match keys you provide in forms (such as email address or phone number) for conversion attribution. We use this information for ad attribution, conversion measurement, campaign performance analysis, and improving our public marketing. Reddit may process this information according to its own Privacy Policy and advertising technologies policies. Reddit's Privacy Policy: https://www.reddit.com/policies/privacy-policy
Google Places. Google Places is a service that returns information about places using HTTP requests. It is operated by Google. Google Places service may collect information from You and from Your Device for security purposes. The information gathered by Google Places is held in accordance with the Privacy Policy of Google: https://www.google.com/intl/en/policies/privacy/

CCPA/CPRA Privacy Notice (California Privacy Rights)

This privacy notice section for California residents supplements the information contained in Our Privacy Policy and it applies solely to all visitors, users, and others who reside in the State of California.

Categories of Personal Information Collected

The following is a list of categories of personal information which We may collect or may have been collected from California residents within the last twelve (12) months.

Category A: Identifiers. Examples: real name, postal address, IP address, email address, account name, driver's license number. Collected: Yes.
Category B: Personal information (Cal. Civ. Code § 1798.80(e)). Examples: name, address, telephone number, financial information. Collected: Yes.
Category C: Protected classification characteristics. Collected: No.
Category D: Commercial information. Examples: records of services, invoices, or payments related to Field Console or marketplace activity. Collected: Yes.
Category E: Biometric information. Collected: No.
Category F: Internet or other similar network activity. Examples: browsing history, interaction with a website. Collected: Yes.
Category G: Geolocation data. Examples: approximate or precise physical location. Collected: Yes. We may collect ZIP code, city, approximate GPS coordinates, and where enabled precise location for dispatch routing, appointments, job status, customer live tracking, and related operational features.
Category H: Sensory data. Collected: No.
Category I: Professional or employment-related information. Examples: service-business trades, service area, work preferences, availability, communication readiness, and responses about business or trade requirements provided through the Business Fit Check or onboarding. Collected: Yes.
Category J: Non-public education information. Collected: No.
Category K: Inferences drawn from other personal information. Examples: structured Business Fit Check facts inferred from assessment responses, such as proposed trade mappings, topic completion, or readiness items requiring clarification. Collected: Yes.
Category L: Sensitive personal information. Collected: No.

Sources of Personal Information

Directly from You. Information comes from forms You complete on our Service.
Indirectly from You. Information comes from observing Your activity on our Service.
Automatically from You. Information is collected through cookies We or our Service Providers set on Your Device.
From Service Providers. This includes third-party vendors that We use to provide the Service to You.
Derived from information You provide. For the Business Fit Check, We may use an artificial intelligence Service Provider to identify or summarize structured assessment facts from Your responses.

Use of Personal Information

We may use or disclose personal information We collect for business or commercial purposes including: to operate our Service; to provide support and respond to inquiries; to fulfill or meet the reason You provided the information; to respond to law enforcement requests; for internal administrative and auditing purposes; and to detect security incidents.

Disclosure of Personal Information

We may use or disclose the following categories of personal information for business or commercial purposes:

Category A: Identifiers
Category B: Personal information categories listed in the California Customer Records statute
Category D: Commercial information
Category F: Internet or other similar network activity
Category G: Geolocation data
Category I: Professional or employment-related information
Category K: Inferences drawn from other personal information

Sale of Personal Information

We do not "sell" or "share" information as most people would commonly understand these terms. We do not, and will not, disclose Your Personal Information in direct exchange for money or some other form of payment.

Your Rights under the CCPA/CPRA

If You are a resident of California, You have the following rights:

The right to notice. You have the right to be notified which categories of Personal Information are being collected.
The right to know/access. You may request disclosure of information about Our collection, use, sale, and disclosure of personal information.
The right to say no to the sale or sharing of Personal Information (opt-out).
The right to correct Personal Information.
The right to limit use and disclosure of sensitive Personal Information.
The right to delete Personal Information.
The right not to be discriminated against for exercising any of Your consumer's rights.

Exercising Your CCPA/CPRA Data Protection Rights

To exercise any of Your rights under the CCPA/CPRA, contact Us by email: [email protected]

We will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request.

Do Not Sell or Share My Personal Information

You have the right to opt-out of the "sale" of Your personal information. To exercise Your right to opt-out, please contact Us at [email protected].

Sale of Personal Information of Minors Under 16 Years of Age

We do not knowingly collect personal information from minors under the age of 16 through our Service. We do not sell the Personal Information of Consumers We actually know are less than 16 years of age. If You have reason to believe that a child under the age of 16 has provided Us with personal information, please contact Us.

"Do Not Track" Policy (CalOPPA)

Our Service does not respond to Do Not Track signals. However, some third-party websites do keep track of Your browsing activities. If You are visiting such websites, You can set Your preferences in Your web browser to inform websites that You do not want to be tracked.

Your California Privacy Rights (Shine the Light Law)

Under California Civil Code Section 1798, California residents with an established business relationship with Us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes. To request more information, contact Us using the contact information provided below.

California Privacy Rights for Minor Users (Business and Professions Code Section 22581)

California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. To request removal of such data, contact Us using the contact information provided below.

Children's Privacy

Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 16 without verification of parental consent, We take steps to remove that information from Our servers.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Questions? Contact us at [email protected]

Questions? Contact us at [email protected] or +1 (414) 595-3532.