Who handles data for Zyflow?
Your data is hosted by [HOSTING PROVIDER] in [HOSTING LOCATION], and [EMAIL PROVIDER] delivers Zyflow’s emails. The table gives each one’s purpose, data and location, ready to copy into any questionnaire that asks for every sub-processor.
| Provider | What it does for Zyflow | Data involved | Where |
|---|---|---|---|
| [HOSTING PROVIDER] (Zyflow CRM) | Runs the app and this website, and stores the database and your files | Everything in your workspace, from customers, deals and follow-ups to files, invoices and change history. Your name, email address and sign-in sessions (IP address and browser). Tool-call logs (tool names only, kept 90 days). Server logs, with passwords, tokens, email addresses and phone numbers removed | [HOSTING LOCATION] |
| [EMAIL PROVIDER] (Zyflow CRM) | Delivers the emails Zyflow sends to you and your team | Your name and email address, plus what each email says: sign-in, confirmation and reset links; welcome, invitation and import emails, which name the workspace; and the 8am email,1 which lists follow-ups, customer names, amounts to collect, invoice numbers, due dates and birthdays | [EMAIL LOCATION] |
Zyflow never emails your customers and keeps no copy of what it sends. [EMAIL PROVIDER] keeps delivery logs for [EMAIL LOG RETENTION]. Anyone can turn off their 8am email in Settings > Profile (“Morning digest”).
Why your AI apps aren’t on this list
The AI apps you connect, such as Claude or ChatGPT, aren’t Zyflow’s subprocessors. You choose each one and approve the one workspace it may use. What it receives there falls under your own agreement with that AI provider, and disconnecting it revokes its access at once. Here’s how data moves between your AI app and Zyflow.
If you choose Continue with Google, Google confirms who you are and shares your name, email address and profile picture with Zyflow, under your Google account’s terms.
No one else handles your workspace data
Zyflow renders invoice, quote and letter PDFs itself, keeps your files with the rest of your data, and runs its own sign-in for AI apps. The app and this site use no analytics, advertising or error-tracking services.
No DPA or certifications yet
Zyflow doesn’t offer a data processing agreement (DPA) yet. Zyflow doesn’t hold security certifications such as SOC 2 or ISO 27001 today, and doesn’t offer two-factor sign-in or SSO yet. The security page lists what we don’t offer yet.
Changes to this list
Every change to this list is dated here, newest first.
| Date | Change |
|---|---|
| [LIST PUBLISHED DATE] | List published: [HOSTING PROVIDER] (hosting) and [EMAIL PROVIDER] (email delivery) |
Questions about a provider, or a privacy request? The contact page says where to send them.
- Security: What your AI can and can’t touch, and every gap we have today.
- Export your data: Download your records as CSV or JSON files, on every plan.
- History and undo: See what each AI app changed, and when.