Privacy policy

Account data

• Email address
• First and last name
• Password (stored in hashed form, never in plain text)

Business data you entrust to us

• Photos and PDFs of documents (receipts, invoices)
• Data extracted by automatic reading : amount, date, supplier, category
• The identity of the recipient accountant you designate

Activity log

• A history of your actions in the application (sending, validating, deleting documents) for audit and legal compliance purposes

• No device or installation identifier
• No IP address retained
• No automatic telemetry (device type, OS version, crash logs)
• No third-party analytics SDK (Google Analytics, Firebase, Sentry, etc.)

• No geolocation data
• No advertising identifier
• No cross-app tracking data
• No biometric data
• No contacts, calendar or microphone data

• Allow you to capture and organise your documents
• Forward your documents to the accountant you designate
• Provide user support
• Improve automatic reading (on aggregated and anonymous statistics only)
• Comply with our legal obligations (invoicing, fraud prevention)

Your documents are shared only with the accountant you explicitly designate in the application. This sharing ends as soon as you revoke it.

We never sell your data. We do not share it with advertisers.

We use the following technical sub-processors :

• OVH Cloud (France) — hosting, file storage
• OCR provider — automatic reading of documents (files are deleted after processing)
• Expo / EAS — distribution of application updates

• While your account is active : unlimited duration
• On deletion of your account : erasure within 30 days
• Encrypted backups : an additional 90 days, then purged
• Mauritian legal obligations (accounting retention) : 5 years for documents marked as exported to accounting

• Encryption in transit (HTTPS / TLS 1.2+)
• Encryption at rest for stored files
• Token-based authentication, automatic expiration
• Server access strictly limited to the technical team under a confidentiality obligation

In accordance with the Mauritian Data Protection Act 2017 and the GDPR for European users, you may at any time :

• Access your data
• Rectify it
• Export it (portability)
• Request its deletion
• Object to a processing operation

To exercise these rights, write to : contact@dipicorp.com

You may also lodge a complaint with the Mauritian Data Protection Office : dataprotection.govmu.org

Zenvia is reserved for users of legal age (18 or older). We do not knowingly collect data from minors.

This policy may be updated. The date of the last change is shown at the top. Material changes will be notified to you in the application.

Dipicorp Ltd (publisher of Zenvia)
Email : contact@dipicorp.com
Postal address : Avenue Badamier, Bellevue Phare, Albion, Mauritius

Data Protection Officer : contact@dipicorp.com