Last updated Aug 10, 2026
What data we collect, why, how we use and retain it, and your rights.
Zenith Intelligence Technologies Inc. ("PaidSeal") operates the Service. This Policy explains how we handle personal data. For data you upload about your own clients, you are the controller and we are your processor — see our Data Processing Agreement.
Account data: name, email, business details, and authentication credentials (stored only as salted hashes). Content data: the invoices, estimates, clients, items, expenses and documents you create. Usage data: feature usage counters and coarse, cookieless page counts. Device/technical data needed to deliver and secure the Service. Payment-provider status where you connect Stripe/PayPal (we never store your customers’ card numbers).
To provide, secure and improve the Service; to authenticate you; to send transactional messages (documents, receipts, reminders, password resets) and — only with your opt-in and opt-out controls — product/marketing messages; to enforce plan limits; to detect abuse and fraud; and to comply with law.
We process personal data to perform our contract with you, for our legitimate interests in operating and securing the Service, to comply with legal obligations, and with consent where required (e.g. non-essential cookies, marketing).
We share data with vetted sub-processors that help run the Service — hosting, email delivery, payment providers, and AI features — under contract and only as needed. We do not sell personal data. See the Sub-processors reference for the current list.
Every tenant is isolated at the database level with row-level security; the application connects with least-privilege database roles. TLS protects data in transit; credentials are hashed; one-time tokens are stored only as hashes; public links are signed. Sensitive secrets are encrypted at rest.
We keep account and content data while your account is active and as needed to provide the Service and meet legal, tax and accounting obligations. You can export or delete your data; on deletion we remove or irreversibly anonymise it within a reasonable period, except where retention is legally required.
Where data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
Subject to law, you may access, correct, export, restrict, or delete your personal data, and object to certain processing. You can exercise these in-app or by contacting [email protected]. Marketing emails include a one-click unsubscribe; you will still receive transactional messages.
The Service is not directed to children under 18 and we do not knowingly collect their data.
We will notify material changes to this Policy. Contact Zenith Intelligence Technologies Inc. at [email protected] for privacy questions or to reach our data-protection contact.