Marketing contact data is not transaction evidence.

Status and controller

This is a draft for the Founding Pilot, not an approved privacy notice. Controller identity, registered address, privacy contact, lawful bases and international-transfer terms must be completed by counsel before external use.

Marketing data

The demo form accepts name, work email, company, selected use case, an optional short message, consent version and basic campaign attribution. It does not accept file uploads or confidential transaction evidence. The data is encrypted at application level in the separate marketing database and is used to respond to the request and evaluate pilot fit.

Private product data

Zeklio App separately processes account and session records, organization memberships, deal roles and aliases, messages, controlled commercial terms, document versions and hashes, consent evidence, verification evidence, audit records, operational security records and optional pilot feedback. Access is derived from the authenticated user, organization, deal assignment and role-specific capabilities.

Recipients and international transfers

Authorized Zeklio personnel and approved service providers may process only the data needed for hosting, authentication, transactional email, storage, support or security. The final subprocessor list, processing locations and transfer safeguards are approval gates. A manual verifier may be an independent party rather than a Zeklio subprocessor, depending on the deal arrangement.

Retention

The marketing implementation deletes demo requests after 180 days and non-PII funnel events after 365 days. The current pilot template schedules raw evidence for deletion 45 days after close and closing packages for seven years, subject to legal hold and approved jurisdictional rules. Feedback, account, consent, message and audit retention periods remain launch decisions and must be published before external use.

Rights and contact

Access, correction, deletion, restriction, objection, portability, complaint and consent-withdrawal procedures depend on applicable law. Contact details and response procedures must be approved and published before the pilot opens.