Privacy Policy
Last updated: April 1, 2026
1. Who We Are
zerentry is operated by zerentry, a company incorporated in Switzerland. We provide an AI-powered document management and accounting automation platform.
For any privacy-related questions, contact us at contact@zerentry.com.
2. Data We Collect
We collect the following categories of personal data:
- ·Account data — name, email address, organization name (via Clerk authentication)
- ·Documents — files you upload (PDFs, images, office documents) and the text/metadata extracted from them
- ·Usage data — pages visited, features used, timestamps, IP address
- ·Billing data — subscription plan, payment method (processed by Stripe — we never store card numbers)
- ·Integration tokens — OAuth tokens for connected services (Xero, QuickBooks) stored encrypted
3. How We Use Your Data
- ·To provide and operate the zerentry service (document processing, OCR, AI extraction)
- ·To authenticate you and manage your account
- ·To process payments and manage subscriptions
- ·To sync data with third-party accounting tools you have connected
- ·To send transactional emails (processing complete, account alerts)
- ·To improve service quality and fix bugs (aggregated, anonymized)
We do not use your documents or extracted data to train AI models. We do not sell your data to third parties.
4. Sub-processors
We rely on the following third-party services to operate zerentry:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting & infrastructure (SOC 2 Type II compliant) | USA / EU |
| Clerk | Authentication & user management | USA |
| Stripe | Payment processing | USA |
| Mistral AI | OCR & AI document extraction | EU (France) |
| MinIO / S3 | Document file storage (encrypted) | EU |
| Xero (optional) | Accounting sync — only if you connect it | NZ / UK |
| QuickBooks (optional) | Accounting sync — only if you connect it | USA |
5. Data Retention
- ·Account data is retained while your account is active and for 90 days after deletion
- ·Uploaded documents are retained until you delete them or close your account
- ·Billing records are retained for 10 years as required by Swiss law
- ·Audit logs are retained for 12 months
6. Data Security
- ·Hosted on SOC 2-compliant infrastructure (Vercel)
- ·Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
- ·No data sharing between customers — strict tenant isolation
- ·OAuth tokens stored encrypted in the database
- ·Regular security reviews and dependency updates
7. Your Rights (GDPR)
If you are located in the European Economic Area or Switzerland, you have the following rights:
- ·Access — request a copy of your personal data
- ·Rectification — correct inaccurate data
- ·Erasure — request deletion of your data ("right to be forgotten")
- ·Portability — receive your data in a machine-readable format
- ·Objection — object to processing based on legitimate interest
- ·Restriction — request limited processing in certain circumstances
To exercise any of these rights, email contact@zerentry.com. We will respond within 30 days.
8. Your Rights (CCPA — California Residents)
If you are a California resident, you have the right to:
- ·Know what personal information we collect, use, disclose, and sell
- ·Delete personal information we have collected (with some exceptions)
- ·Opt out of the sale of personal information — we do not sell personal information
- ·Non-discrimination for exercising your rights
To submit a request, email contact@zerentry.com with the subject line "CCPA Request".
9. Cookies
We use the following cookies:
- ·Session cookies — required for authentication (Clerk)
- ·Preference cookies — theme (light/dark), language
- ·Demo session cookie — for the sandbox demo mode (no account required)
We do not use advertising or tracking cookies.
10. International Transfers
Some of our sub-processors are located outside Switzerland and the EEA (notably Clerk and Stripe in the USA). These transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission, or the sub-processor is certified under an equivalent framework.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email at least 30 days before any material changes take effect. Continued use of zerentry after that date constitutes acceptance of the updated policy.
12. Contact
zerentry — Switzerland
Email: contact@zerentry.com