Privacy Policy

1. Scope and responsibilities

I am responsible for the operation of Packzivo and for account administration, support and service security. Contact packzivo@gmail.com about this policy or your information.

Workspace owners decide which business records to enter, which people may access them and which integrations to authorize. When I handle customer, employee or recipient information on a business’s instructions, that business remains responsible for its collection and use. If your information was entered by a business using Packzivo, contact that business first; I can help route a request to the authorized owner. This policy does not replace that business’s privacy notice or any required data processing agreement.

2. Information collected

• Account information: name, email address, password hash, verification and recovery records, workspace memberships, roles and permissions. Packzivo stores a salted password hash rather than your readable password.
• Business records: customer and supplier contacts, email and phone details, billing and delivery addresses, product catalogs, prices, order contents, invoices, shipping and tracking details, documents, imports and operational history.
• Connected-service information: provider account/company identifiers, authorized accounting records, messages and group identifiers used for order intake, shipping responses, and access credentials or OAuth tokens needed for the connection.
• Technical and support information: IP address and browser/device information associated with authentication or requests, session identifiers, timestamps, errors, security/audit events, and information you send when requesting help.

Information comes from you, authorized workspace members, business imports, your browser and the providers you connect. Do not submit unrelated sensitive information, government identification numbers, health records or payment-card details in order messages or uploads. Packzivo does not need your QuickBooks password.

3. Why information is used

Information is used to sign users in, enforce workspace permissions, maintain customer and product records, review and process orders, carry out authorized accounting or shipping actions, provide exports and support, diagnose failures, prevent abuse and meet legal obligations. Audit records help investigate activity and reconcile uncertain provider outcomes.

Where a law requires a legal basis, these activities depend on the applicable circumstances: performing an agreement with you, legitimate interests in operating and protecting a business service, compliance with legal obligations, or consent where required. Authorizing an integration is a separate choice and does not authorize unrelated use of its data.

4. QuickBooks connection and control

An authorized company administrator connects QuickBooks Online through Intuit’s OAuth screen with the Accounting scope. Packzivo can import customer and product records and retain company/record identifiers, contact details, addresses, balances and other accounting fields returned for the enabled workflow. Customer synchronization runs from QuickBooks into Packzivo; editing a Packzivo customer does not update the QuickBooks customer.

Separately enabled fulfillment workflows can create invoices, retrieve invoice PDFs and write shipping or tracking references. These are accounting actions, so review the workflow and permissions before enabling them. Connecting QuickBooks does not authorize purchases of postage or unrelated transactions.

An authorized workspace administrator can disconnect QuickBooks on the Integrations page. This disables the local connection and removes its saved credentials; imported business records remain until separately deleted. To revoke Intuit’s authorization as well, disconnect Packzivo from the connected-app controls in QuickBooks. Disconnection does not undo invoices or other records already created. Request removal of imported information through packzivo@gmail.com.

Intuit handles its own account and authorization services under the Intuit Privacy Statement.

5. Who receives information

Information is accessible to workspace users according to their current permissions and to the operator when necessary for administration, support, security or a verified request. Infrastructure providers process information to run the service. Customer-directed integrations receive information needed for the workflows you enable.

• Railway: application hosting, databases, job processing, logs and backups. The current application deployment and database storage are in the United States.
• Intuit / QuickBooks Online: authorized accounting and synchronization, as described above.
• ShipStation and shipping carriers, when enabled: origin and recipient contact/address details, parcel and customs details, rates, labels and tracking.
• Whapi and WhatsApp, when enabled: authorized channel access and message/group information. Packzivo’s selected-group rules govern its order intake; they do not limit everything the channel provider itself can access.
• OpenAI, when AI extraction is enabled: source order-message text is sent for structured extraction. Recognized structured formats can be parsed locally without an AI request. Avoid including unrelated personal information. AI output requires human review.
• Email services: correspondence to the support mailbox is handled by Google/Gmail. If transactional email is configured, Resend receives recipient details and verification, recovery or invitation messages. Transactional email is not currently configured.
• Stripe: software billing is currently limited to test flows with unpublished prices. Any future commercial payment processing will require separate pricing and billing disclosures.

Provider privacy information: Railway, ShipStation, Whapi, WhatsApp, OpenAI, Google, Resend and Stripe. Their terms and processing practices apply to their own services.

I do not sell personal information or share it for cross-context behavioral advertising. Information may be disclosed where legally required, to protect people or the service, or to investigate fraud. If the service’s ownership changes, any transfer of information must remain subject to applicable law and notice of material changes.

6. Cookies, browser storage and tracking

Packzivo uses essential authentication cookies and browser storage to maintain sign-in, protect requests and preserve workflow state such as carts or invitation progress. Sessions are configured to last seven days unless ended earlier. Disabling cookies or clearing storage may sign you out or remove unfinished local work.

The site does not currently use advertising pixels or cross-site behavioral analytics, and does not change its behavior in response to a browser’s Do Not Track signal. Google Fonts is requested to display the site’s typeface; your browser sends technical request information such as your IP address to Google when loading it. Hosting and connected services also process technical request data as part of their operations.

7. Retention and deletion

Account and business records are retained while needed for the workspace, requested services, security, reconciliation or legal recordkeeping. The duration depends on the record’s purpose, workspace instructions, unresolved transactions and applicable obligations. Closing a browser or disconnecting a provider does not delete imported records.

Temporary recoverable WhatsApp source text is scheduled to expire after seven days and is removed by the cleanup worker. Accepted intake, orders, audit records and backups have separate lifecycles; the seven-day period does not apply to all message-derived records. Authentication session expiry also does not delete the underlying account.

Contact packzivo@gmail.com to request account closure, deletion or a retention explanation. Requests are handled by the operator after verifying identity and authority, rather than through an automatic deletion button. Information that must be retained for legal, security or transaction purposes may be restricted instead of immediately erased. Backup copies may remain until rotated out and are not a substitute for active use of deleted records.

8. Security and processing locations

Controls include HTTPS, permission checks, password hashing, secure production session cookies, and application encryption for stored integration credentials and private document files. These controls do not mean that every database field has application-level encryption or that access is risk-free. See Security & data for more detail.

Connected providers may process information in other countries under their own arrangements. Contact the operator before placing information in Packzivo if your business requires a particular storage location, a data processing agreement or specific international-transfer safeguards. No certification or blanket regulatory-compliance guarantee is made.

Report a suspected security incident to packzivo@gmail.com without sending passwords or secret keys. Where legally required, affected people or businesses will be notified of a personal-data breach.

9. Your choices and privacy requests

You can ask to access, correct, export or delete personal information, restrict or object to processing, or withdraw consent where processing relies on it. Available rights depend on the law that applies to you. Withdrawal does not invalidate earlier lawful processing. Where applicable, you may complain to your local data protection authority and request review of a declined request.

Email packzivo@gmail.com with the request, the relevant workspace and enough detail to locate the records. I will verify identity and workspace authority proportionately, respond within applicable legal deadlines and explain any lawful limitation or refusal. Do not email identity documents or account credentials unless a secure, necessary verification method has been agreed. You will not be penalized for exercising an applicable privacy right.

Workspace owners can export supported business records from the app. Exports exclude credentials and authentication secrets; original private documents may require separate authorized downloads. Customer records owned by QuickBooks should normally be corrected in QuickBooks and then refreshed in Packzivo.

10. Children

Packzivo is intended for adult business users, not children, and does not knowingly collect information from children under 13. If you believe a child’s information was submitted, contact packzivo@gmail.com so it can be investigated and removed where appropriate.

11. Policy changes and contact

The effective date appears at the top. Material changes will be communicated through a prominent service notice or direct communication as appropriate, before taking effect where required. If a new use requires consent, it will be requested; changing this page alone does not supply that consent.

Operator: Aviran Amoyal, an individual operating Packzivo. Support and privacy requests: packzivo@gmail.com. Related agreement: Terms of Service.