Privacy Policy

Zenoa (“Zenoa,” “we,” “us,” or “our”) is a technology company specialising in software development, AI, cybersecurity, and R&D, including an AI-powered auto parts management platform, serving businesses across New Zealand, Australia, and beyond. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit zenoa.nz (the “Site”) or otherwise interact with us.

Information you give us directly — when you submit an enquiry, request a support ticket, or contact us, we collect what you enter, typically your name, email address, company, and the content of your message.

Information collected automatically — our hosting and analytics tooling automatically logs standard technical information when you visit the Site: IP address, browser and device type, pages viewed, referring page, and timestamps. We use Vercel Analytics for this, which is designed not to use cookies or collect personally identifiable information for its core analytics.

Information from platform customers — if you or your business uses our auto parts management platform or another Zenoa product, any data processed through that platform is governed by the separate services agreement for that engagement, not this general website policy.

• To respond to enquiries and support requests you submit.
• To operate, maintain, and improve the Site and our products.
• To communicate with you about your enquiry or an active engagement.
• To comply with legal, regulatory, and contractual obligations.
• To protect the security and integrity of our systems and the Site.

We do not sell your personal information.

We do not share your personal information with third parties except:

• With service providers who support our operations (e.g. hosting, email delivery, analytics), bound to protect your data and use it only to provide that service.
• Where required by law, regulation, court order, or governmental request.
• To protect the rights, property, or safety of Zenoa, our customers, or others.
• In connection with a merger, acquisition, or sale of assets, subject to the same protections described in this policy.

We store data in ISO-certified, Auckland-based data centres with AES-256 encryption at rest and TLS 1.3 in transit. As a cybersecurity company, we take data security seriously and use reasonable technical and organisational measures designed to protect information from unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We serve customers across New Zealand, Australia, and beyond. Where personal information is transferred internationally, we take reasonable steps to ensure it continues to be protected in a manner consistent with this Policy and applicable law, including New Zealand’s Privacy Act 2020.

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Policy, respond to your enquiry, meet our legal and contractual obligations, and resolve disputes. Platform customer data is retained per the terms of the applicable services agreement.

Depending on where you are located, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal exceptions.
• Object to or restrict certain processing of your information.

To exercise any of these rights, contact us using the details in Section 9.

Questions about this Privacy Policy or how we handle your information can be sent to [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the “Last updated” date above when we do. Continued use of the Site after changes take effect constitutes acceptance of the updated policy.