Legal
Privacy Policy
Effective date: January 1, 2026 · Last updated: January 1, 2026
We built Zimtelligence for firms that operate under public-sector scrutiny. That standard applies to us too: this policy explains, in plain terms, what we collect, why, and the controls around it.
1. Scope
This Privacy Policy describes how Zimtelligence (“we,” “us”) collects, uses, discloses, and protects information when you visit our website, request access, start a trial, schedule a briefing, or use our intelligence platform (collectively, the “Services”). It applies to information we collect directly from you and information generated through your use of the Services.
2. Information We Collect
We collect: (a) Account and contact information you provide — name, work email, company, role, firm size, and jurisdictions of interest; (b) Billing information — processed directly by our payment processor (Stripe); we never store full card numbers on our systems; (c) Usage data — pages viewed, features used, timestamps, and diagnostic logs; (d) Communications — messages you send through our forms or by email; and (e) Business data you submit to the platform, such as jurisdictions, bid contexts, and project parameters used to generate draft structures.
3. How We Use Information
We use collected information to: provide and operate the Services; generate compliance tracking and draft outputs for the jurisdictions you specify; process payments and manage subscriptions; respond to inquiries and schedule briefings; improve data quality, coverage, and model performance; detect and prevent fraud, abuse, and security incidents; and comply with legal obligations. We do not sell your personal information, and we do not use your submitted business data to train models for other customers.
4. Public Source Data
Our platform collects and structures data from public municipal, county, and state portals. This data is public record and is collected in compliance with each source's terms of access and applicable law. Where public records incidentally contain personal information, we handle that information under the same safeguards described in this policy.
5. Sharing and Disclosure
We share information only with: (a) Service providers that operate under contractual confidentiality and data-protection obligations (cloud hosting, payment processing, email delivery, analytics); (b) Professional advisors under duty of confidentiality; (c) Authorities where required by law, subpoena, or to protect rights and safety; and (d) A successor entity in the event of a merger, acquisition, or asset sale, subject to this policy. We do not share your data with data brokers.
6. Data Retention
We retain account and business data for the life of your subscription and for up to 24 months afterward to support audits, dispute resolution, and legal compliance, after which it is deleted or de-identified. Form submissions from non-customers are retained for up to 12 months. You may request earlier deletion as described below.
7. Security
We maintain administrative, technical, and physical safeguards aligned with recognized security frameworks, including encryption in transit (TLS 1.2+) and at rest (AES-256), least-privilege access controls, multi-factor authentication for internal systems, and regular access reviews. See our Data Compliance page for detail. No method of transmission or storage is 100% secure; if we learn of a breach affecting your data, we will notify you consistent with applicable law.
8. Your Rights and Choices
Depending on your jurisdiction (including under the CCPA/CPRA and, where applicable, the GDPR), you may have the right to access, correct, delete, or port your personal information, and to opt out of certain processing. To exercise these rights, contact us through our Contact page with the subject “Privacy Request.” We verify requests before acting and respond within the timeframes required by law. We do not discriminate against you for exercising privacy rights.
9. Cookies and Analytics
We use a small set of strictly necessary cookies for session integrity and security, and privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising trackers. You can control cookies through your browser settings; disabling strictly necessary cookies may affect site function.
10. International Transfers
Our primary infrastructure is located in the United States. If you access the Services from outside the US, you understand that your information will be processed in the US under safeguards described in this policy and, where required, under appropriate transfer mechanisms.
11. Children's Privacy
The Services are business tools and are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on this page with an updated effective date, and where required, by direct notice to account holders. Continued use after the effective date constitutes acceptance.
13. Contact
Questions about this policy or our data practices can be sent through our Contact page with the subject “Privacy.”
This policy is a working draft prepared for review and does not constitute legal advice. It should be reviewed by qualified counsel in your operating jurisdictions before launch.