Privacy Policy

Last updated October 1, 2026

ZipKit provides a voice-first assistant for field sales teams. This policy explains what we collect, why, and what we do with it.

What we collect

  • Account information. Your name, email address, and the organization you belong to.
  • Content you create. The accounts, contacts, visits, notes, tasks, and photos you record in ZipKit, including the audio and transcripts of what you dictate.
  • Location. When you log a visit, the device's coordinates at that moment, so ZipKit can identify which account you are at. Location is captured only while you are actively using the app.
  • Connected services. If you connect a CRM such as HubSpot, the access tokens needed to read and write on your behalf, and the records exchanged.
  • Operational data. Logs, device and browser information, and error reports used to keep the service running.

How we use it

We use your content to operate the product: transcribing speech, identifying the right account, generating records, and syncing them to the systems you connect. We use operational data to debug, secure, and improve the service. We do not sell your data, and we do not use your content to train general-purpose AI models.

Processors we use

ZipKit relies on a small number of subprocessors to deliver the service, including cloud hosting and database providers and the AI model providers that perform transcription and generation. They process your content only to provide those functions on our instructions. A current list is available on request.

Retention

We keep your content for as long as your organization has an active account. When an organization is deleted, we delete its content within 30 days, except where we are required to retain records by law. You can request export or deletion at any time.

Your choices

  • Turn off location permission in your device settings at any time; visit logging will still work, but ZipKit will no longer suggest the account you are standing at.
  • Disconnect a CRM at any time from Settings → Integrations, which revokes our access tokens.
  • Request a copy of your data, or its deletion, by emailing us.

Security

Data is encrypted in transit and at rest. Access to production systems is limited to personnel who need it. ZipKit is not yet SOC 2 certified; we will update this page when that changes.

Contact

Questions about this policy or your data: privacy@zipkit.ai.

This is a starting draft, not legal advice. Have counsel review it before you take on customers with data-processing requirements.