1. Who we are
ZMZM Technology is the party responsible for processing the data described here, and operates this site and its software products. To contact us about privacy or to exercise any of the rights below:
info@zmzmtech.com
2. Data we collect
We collect only what the service requires:
- Trial request: business name, contact name, email, mobile number, country, number of branches, and your notes.
- Account: company name, contact name, email, mobile number, and a password stored as a non-reversible hash.
- Verification codes: stored hashed, short-lived, and single-use.
- Service records: your orders, licenses, invoices and support tickets.
- IP address: used for bot verification and abuse limiting, and logged on admin sign-in attempts.
3. How we use data
To create and verify your account, contact you about your request and quotation, activate licenses and prepare your copy, issue invoices, provide support, and send service notifications and expiry reminders. We do not use your data for advertising or behavioural analytics, and this site carries no advertising trackers.
4. Who else receives data
We do not sell or rent your data. We use providers solely to deliver the service, each with its own policy:
- Cloudflare Turnstile — bot verification on sign-up and trial requests; receives your IP address.
- Twilio — sending verification codes by SMS; receives your mobile number.
- Google — only if you choose to sign in with a Google account; nothing is sent if you do not use it.
- The zmzmtech.com mail server — for verification emails, invoices and service notifications.
- WhatsApp (Meta) — if you choose to message us via the WhatsApp button; that conversation is then governed by the WhatsApp policy.
When electronic payment is enabled later, the payment provider will be added to this list; we will never hold your card details in any case. We may also disclose data where the law requires it.
Note: the site fonts, images and files are all served from our own servers — your browser contacts no third party merely to browse the pages.
Cross-border transfer: These providers are global companies running servers in other countries, so the data reaching them (your IP at Cloudflare, your mobile number at Twilio, your sign-in details at Google) is processed outside your country. We use them only as far as running the service requires, and each carries its own obligations and safeguards published in its policy. If this transfer is not acceptable to you, tell us before using the service.
5. Cookies
We use strictly necessary files only — no advertising or tracking cookies:
- Sign-in cookie: keeps you signed in for up to 14 days.
- Session cookie: expires after 30 minutes of inactivity.
- Language cookie: remembers your Arabic/English choice.
- Anti-forgery cookie: protects the forms.
- Turnstile sets its own files during bot verification.
6. Where your data is stored
Store and account data is stored on servers operated by ZMZM Technology. Your company operational data inside our products stays in a database dedicated to your company alone, never shared with another customer.
7. Security
All traffic is TLS-encrypted (https), passwords are stored hashed, the admin panel is protected by a password plus two-factor authentication (TOTP) and automatic lockout after failed attempts, and server access is limited to those who need it. No system is absolutely secure — if a breach affects your data we will notify you and the competent authority as the law requires.
8. Retention
We keep your account data as long as the account exists. On closure your personal data is anonymised immediately, while financial records (invoices and orders) are kept for the period accounting and tax rules require.
We take a daily backup to protect against data loss and keep the last 14 copies. Deleted data may therefore persist inside those backups until they rotate out.
9. Your rights
You may view and correct your data directly from the Profile page in the customer portal. You may close your account yourself from the portal, which anonymises your personal data and ends your licenses. You may request a copy of your data or object to its processing by writing to the address above, and we will respond within a reasonable period.
10. Children's data
Our services are directed at businesses and adults. We do not knowingly collect data about minors, and will delete such data if we become aware of it.
11. Updates to this policy
We may update this policy whenever our services or the providers we use change. The last-updated date appears below, and we notify account holders of material changes by email.
Last updated: 2026-08-24