Privacy Policy

🗂️ What we store

We store account details (name, email, password hash) and the business CRM data your organisation enters into its workspace, including customer contact records. For organisations operating in healthcare, this is limited to contact and scheduling data only; we never store clinical records.

💳 Card and payment data

Payment card data is processed by Airwallex, our payment provider, and is never stored on our servers. We retain only a payment reference id and the card's brand and last 4 digits, for display in your billing settings.

🧩 Service providers

The following providers process data on our behalf:

• ·Supabase, database hosting.
• ·Vercel, application hosting.
• ·Resend, email delivery.
• ·respond.io, WhatsApp messaging, connected by your organisation.
• ·Airwallex, payment processing.

🔒 Data access

Data access is scoped per organisation: users can only see data that belongs to their own workspace. Zelix staff access workspace data only to provide support or to operate the service.

📋 Your rights

We handle personal data in line with Singapore's Personal Data Protection Act (PDPA). To request access to, correction of, or deletion of your personal data, contact hello@zelixlabs.com.

🗄️ Data retention

If a workspace is deactivated, its data is retained for 60 days from the date of deactivation, after which it may be permanently deleted.

✉️ Contact

Questions about this policy can be sent to hello@zelixlabs.com.