Privacy Policy

1. Who We Are

ZIVO IT Technologies ("ZIVO IT", "we", "us", or "our") is an enterprise technology consultancy and Certified Odoo Official Partner operated by Shrisampadha Private Limited, an incorporated company headquartered in Hyderabad, Telangana, India.

Our principal office address is:

2. Personal Information We Collect

We only collect personal information that is necessary to fulfill our legitimate business communications and provide enterprise consultation. Information collected includes:

A. Information Submitted Through the Contact Form (/contactus)

When you initiate an enterprise advisory inquiry or request an Odoo consultation, we collect:

• Full Name: Used to personalize communication and address your inquiry professionally.
• Work Email Address: Used as the primary communication channel for consultation responses, proposal deliverables, and technical scheduling.
• Phone Number: Used for direct verification, telephone consultations, and scheduling follow-ups.
• Company / Organization Name: Used to understand your business context, industry vertical, and operational scale.
• Inquiry Message / Project Scope: Description of your workflow requirements, Odoo module needs, or cybersecurity concerns.

B. Information Collected Automatically

When you browse this website, our servers automatically record standard HTTP telemetry:

• IP address (used strictly for session integrity, security rate-limiting, and geo-regional routing).
• Browser user-agent, operating system, and language preference.
• Strictly necessary HTTP cookies generated by the Odoo web framework (e.g., session_id).
• Local storage keys used solely for client-side interface display preferences (e.g., light/dark theme state).

3. Why We Collect This Information & Legal Basis

We process your personal information for the following specific purposes:

• Responding to Consultations: To review enterprise requirements, prepare architectural recommendations, and communicate directly with your team.
• Scheduling Demonstrations: To organize interactive walkthroughs of Odoo ERP or cybersecurity capabilities.
• Security & Operational Integrity: To prevent spam, mitigate denial-of-service attempts, enforce honeypot anti-abuse filters, and protect our infrastructure.

Legal Basis / Consent: Submission of our contact form requires affirmative, voluntary consent via an unchecked mandatory checkbox. By checking this box, you consent to ZIVO IT storing and processing your inquiry information for the express purpose of evaluating and responding to your consultation request.

4. Backend Processing & Odoo CRM Integration

Unlike brochure websites that relay submissions via unencrypted email relays, inquiries submitted on our website are ingested directly over HTTPS into our backend Odoo 19 Enterprise CRM system (crm.lead).

• Lead Ingestion: Inquiries are automatically converted into internal CRM leads, categorized by source (e.g., Website Inquiries, Cybersecurity Advisory).
• Consent Record Storage: When a submission occurs, our controller validates the affirmative consent checkbox and stores verifiable consent metadata (consent boolean, timestamp, purpose, policy version, and terms version) directly within the CRM record.
• Internal Assignment: Leads are routed exclusively to certified ZIVO IT ERP architects and solution directors assigned to your sector.

5. Data Storage, Security & Access Controls

All inquiry data is stored in private PostgreSQL database instances backing our Odoo 19 deployment. We enforce multi-tiered administrative and technical safeguards:

• Encryption in Transit: All web traffic and form submissions are encrypted end-to-end using modern Transport Layer Security (TLS 1.2 / TLS 1.3).
• Role-Based Access Control (RBAC): Access to CRM records is strictly segregated and restricted to authorized personnel who require access to evaluate your enterprise project.
• No Public Exposure: Backend CRM identifiers, internal discussion logs, and database schemas are completely sequestered from public visitors.
• Honeypot & CSRF Defense: Form submissions utilize cryptographic CSRF tokens and automated honeypot trap fields to reject malicious automated bots.

6. Data Retention Policy

We retain personal inquiry information only as long as necessary to fulfill the operational purpose for which it was gathered:

• Inquiries that do not progress to an active consulting agreement or contractual engagement are archived or purged from our CRM.
• Inquiries that progress into active client engagements are retained pursuant to the applicable Master Services Agreement (MSA) and statutory financial accounting requirements.

7. Third-Party Services Actually Used

We believe in minimal data dispersion. We do not sell, rent, lease, trade, or distribute your personal details to third-party marketing brokers or data aggregation networks. The external services actually used on this website are limited to:

• Google Fonts (Google LLC): Used to deliver high-performance web typography (Space Grotesk, Inter, JetBrains Mono). Web font requests are handled directly by Google CDNs without tracking cookies.
• Outbound Mail Relay: If transactional notifications or acknowledgment emails are dispatched from Odoo, they route through our designated corporate mail gateway.

8. Cookies & Tracking Technologies

Our website does not use tracking pixels, advertising cookies, or cross-site fingerprinting. We use only strictly necessary session cookies generated by Odoo and client-side local storage to preserve your visual theme preference (dark/light mode).

For a comprehensive technical audit of all cookies and storage mechanisms, please review our dedicated Cookie Policy.

9. Your Rights Regarding Your Information

Depending on applicable laws and subject to necessary verification of your identity, you have the following rights regarding the personal information you submit to ZIVO IT:

• Right to Access: You may request a copy of the inquiry data we hold concerning you.
• Right to Rectification: You may request corrections to incomplete or inaccurate contact details.
• Right to Erasure: You may request that we delete your inquiry record from our Odoo CRM database, provided we are not legally obligated to retain it for commercial audit or regulatory compliance.
• Right to Withdraw Consent: You may withdraw your consent for prospective communications at any time.

To exercise any of these rights, submit a written request to info@zivoit.com with the subject line "Privacy Rights Request".

10. Updates to This Privacy Policy

We may periodically update this Privacy Policy to reflect enhancements to our services, architectural updates to Odoo, or evolving regulatory standards. Any modifications will be posted directly to this URL with an updated Effective Date. Continued interaction with our website after such updates signifies your acknowledgment of the amended policy.

11. Contact Information

If you have questions, feedback, or grievances regarding this Privacy Policy or our data handling practices, please contact our team: