Zelius Privacy Policy

Effective date: 18 June 2026

1. What This Policy Covers

This policy covers zelius.ch, Z-Files, Z-Files Pro, email capture, bid-profile forms, Stripe checkout, email digests, engagement events, and related customer communications. It should be read together with the Zelius Terms.

2. Data We Collect

Depending on how you interact with Zelius, we may collect:

• contact data, such as name, email address, company, and website;
• subscription and billing data processed through Stripe;
• bid-profile data, such as target markets, sectors, capabilities, portals used, and company preferences;
• public company and procurement data, such as portal registration, public awards, buyer history, CPV or sector signals, geography, and company identifiers;
• email engagement events, such as confirmations, bounces, complaints, deliveries, and clicks;
• technical data, such as IP address, user agent, timestamps, logs, and security events.

3. How We Use Data

We use data to:

• operate the Zelius website and signup flows;
• confirm subscriptions and process payments;
• generate, personalize, and send Z-Files reports;
• score opportunities against your public data or bid profile;
• respond to requests and provide support;
• detect bounces, complaints, abuse, fraud, and delivery problems;
• improve the service and measure whether reports are useful;
• comply with legal, accounting, tax, and security obligations.

4. Legal Bases

Where GDPR or Swiss data-protection law requires a legal basis, we rely on one or more of the following:

• contract: to provide subscriptions, reports, checkout, billing, and support;
• legitimate interests: to secure the service, improve reports, measure click engagement, operate B2B communications, and keep records;
• consent: where required for optional communications or tracking choices;
• legal obligation: for tax, accounting, compliance, and legally required records.

5. Email Tracking and Deliverability

We process email delivery events such as sent, delivered, bounced, complained, failed, and suppressed so that we can keep the mailing list healthy and avoid sending to invalid or complaining addresses.

We may use click tracking in Zelius emails. Click tracking records when a recipient clicks a link and helps us understand whether a report or opportunity is relevant. Open tracking uses an invisible pixel and is more privacy-sensitive; it is not enabled for Zelius unless we separately disclose it and have a suitable basis to use it.

6. Public Procurement Data

Zelius relies heavily on public procurement and company information. Public company data and public award history may be used to infer a company's likely market, sector, portal usage, or opportunity fit. This data may relate to legal entities and, in limited cases, contact persons listed in public procurement material.

7. Processors and Service Providers

We use service providers to operate Zelius. They may include:

• Stripe for checkout, subscriptions, billing, tax, and payment processing;
• Resend for email sending, delivery events, bounces, and complaints;
• hosting and infrastructure providers used by Zephior Sarl;
• analytics, logging, security, and service-operations tools where needed;
• customer-management tools used to manage relationships and support requests.

We select providers that are appropriate for the service and use contractual safeguards where required.

8. International Transfers

Zephior Sarl is based in Switzerland and primarily operates with European infrastructure where practical. Some providers may process data in Switzerland, the European Economic Area, the United Kingdom, the United States, or other countries. Where required, we use appropriate transfer mechanisms such as adequacy decisions, standard contractual clauses, or equivalent safeguards.

9. Retention

We keep data only as long as needed for the purposes above. Subscription, payment, and tax records may be retained for statutory accounting periods. Email suppression, bounce, and complaint records may be retained to prevent unwanted or harmful sending. Bid profiles and report history are retained while the customer relationship is active and for a reasonable period afterwards unless deletion is required or requested.

10. Your Rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also unsubscribe from non-essential emails using the unsubscribe link or by contacting us.

To exercise rights, contact [email protected]. We may need to verify your identity before acting on a request.

11. Security

We use technical and organizational measures designed to protect data against unauthorized access, loss, misuse, or alteration. No system is perfectly secure, but we operate Zelius with security and data minimization in mind.

12. Changes

We may update this policy as Zelius evolves. If a change is material, we will update the effective date and provide notice where appropriate.

13. Contact

Privacy and legal questions: [email protected]. Product questions: [email protected].