Your data is safe with us
Zinevu runs on servers in the EU, encrypts sensitive data and works under a GDPR Data Processing Agreement — so you can focus on your business.
- Hosting
- Germany (EU)
- GDPR
- DPA included
- Encryption
- AES-256
Built secure from the start
Security is not a feature we added — it's how the product was designed. Every layer of Zinevu is built with protection in mind.
Encryption
Sensitive data is encrypted. Passwords are stored only as one-way hashes, access tokens and credentials for connected services — calendars, accounting software, webhooks and WhatsApp — are encrypted with AES-256, and every connection to Zinevu runs over HTTPS.
Access control
Every team member has their own login and a role that decides what they can see and do — down to whether customer contact details are visible. Sign in with email and password or with your Google account.
Hosting in the EU
Zinevu's servers and databases run in Hetzner data centres in Germany. Cloudflare delivers the site and protects it against attacks. Our privacy policy explains which safeguards apply when data is processed outside the EEA.
Monitoring
Automated checks run around the clock: availability every minute, and disk space, database, background jobs and backups every ten minutes. When something is wrong, our team is alerted automatically.
Backups
The database and uploaded files are backed up every night. If a backup is missing, the monitoring raises an alert.
Careful development
Every change is tracked in version control, and an automated test suite covers critical parts such as pricing and integrations.
Privacy and GDPR
Zinevu processes your customers' data on your behalf. The agreement and the policy that govern this are public.
- Processor
GDPR
We act as a data processor under Article 28 GDPR, with a standard Data Processing Agreement for all customers.
- Public
Privacy policy
Explains what we process and why, including data received through Meta for WhatsApp and lead ads, how long we keep it and how it is deleted.
Common questions
Where is my data stored?
Zinevu's servers and databases are hosted by Hetzner Online GmbH in data centres in Germany. Cloudflare, Inc. delivers the site and protects it against attacks. Where personal data is processed outside the EEA, our privacy policy explains the safeguards that apply.
Can I get a Data Processing Agreement (DPA)?
Yes. Our standard Data Processing Agreement is part of our terms, applies to every customer and is published on this website. For specific requirements, contact [email protected].
How do you handle security incidents?
If a personal data breach affects your data, we notify you without undue delay and in any case within 48 hours of becoming aware of it, as set out in our Data Processing Agreement.
How do team members sign in?
With their email address and password, or with their Google account. Everyone has their own login, and their role decides what they can see.
Can I delete my data?
Yes. You can export your data yourself from the settings, and account owners can ask us to delete their data at any time. We delete it within 30 days and confirm by email; copies in our backups disappear as those backups expire.
Responsible disclosure
Found a security vulnerability in Zinevu? Please report it responsibly. We take every report seriously.
[email protected]Please do not disclose vulnerabilities publicly until we've had the opportunity to address them.