ZenoSust Privacy Notice

What we process

ZenoSust processes account identity, organisation membership, role, entitlement, security events, audit events and product records that an authorised user explicitly saves. Product uploads are processed for the requested workflow; source files are not retained by the shared platform unless a product screen expressly says otherwise.

Purpose and control

We use this information to authenticate staff, isolate organisations, provide calculations and downloads, operate approvals, prevent abuse, investigate incidents, recover the service and meet legal obligations. Organisation owners control staff membership and saved-result retention. ZenoSust personnel may suspend access for security, non-payment, misuse or legal requirements.

Retention

Saved product records follow the organisation setting, between 30 and 365 days. Encrypted operational backups retain up to 14 scheduled copies. Security and access logs may be retained for at least 180 days where required for cybersecurity compliance, incident response or legal claims. Deletion from the active database may not immediately remove a record from a protected backup; it expires through the backup cycle.

Sharing and transfers

Data may be processed by contracted hosting, email, security or technical service providers solely to operate the service. We do not sell customer data. Cross-border access or processing is used only where permitted and protected by appropriate contractual and technical controls.

Your responsibilities and choices

Do not upload unnecessary personal, patient, payment-card, authentication-secret or legally restricted data. Use individual staff IDs and revoke leavers promptly. Requests to access, correct or erase account information can be sent to the contact above, subject to legal retention and verification.

Security and incidents

Controls include secure sessions, role-based access, tenant filtering, input limits, audit events, encrypted backups and restricted administration. No internet service is risk-free. Report suspected unauthorised access immediately.