Privacy

Who we are

Zavva Holdings, LLC, 515 North Flagler Drive, Suite 350, West Palm Beach, FL 33401, United States. Email zavvaadmin@zavvaholdings.com.

What we collect

When you run a scan or sign in, we store:

• Your email address.
• The business name, website, category, and city you submit.
• The questions, model replies, score, sources, and actions from the scan.
• A hash of your IP address, used only to limit free scans. We do not keep the raw address in the database.
• A sign-in cookie after you use a magic link. The cookie is HTTP-only.
• If you pay, Lemon Squeezy processes the card. We store the plan, status, and their customer and subscription identifiers. We do not store card numbers.

Why

We use this information to run the scan, enforce the free-scan limit, send the result and weekly digest, sign you in, and provide the plan you bought. The business fields are sent to the model provider you configured so it can answer. We do not sell personal information and we do not use it for unrelated advertising.

Who else sees it

Depending on how the server is configured, data is processed by:

• The host that runs the app (intended: Vercel).
• The database (intended: Turso / libSQL).
• The model provider in use: Perplexity, OpenAI, and/or Google Gemini. In mock mode, no model provider is called.
• Lemon Squeezy, if you pay.
• The email provider (intended: Resend). The console provider used in local development stores the message body, including sign-in links, in the local database.

Anyone with a result link can see that scan. The link is not indexed by design, but it is not secret once you share it. Do not put information in the business name that you would not want on that page.

How long

Scan results stay until you ask us to delete them or we close the product. Sign-in links expire after 30 minutes. Session cookies last 30 days. IP-hash counters are kept per day so the rate limit can reset. You can email zavvaadmin@zavvaholdings.com to ask for deletion of an address and its scans. We will also delete what we can from backups on their normal cycle. Lemon Squeezy keeps payment records under its own policy.

Children

The service is for business owners and marketers. It is not directed at children under 16, and we do not want accounts for them.

Your requests

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to some processing. Email zavvaadmin@zavvaholdings.com. We may need to confirm you control the inbox. This draft does not yet name a supervisory authority or a formal appeals process. Add those when counsel reviews it.