Privacy Policy

1. Introduction

Zenia Finance, Inc. (“Zenia,” “we,” “our”) operates the working capital marketplace at www.getzenia.com. This Privacy Policy explains how we collect, use, share, and protect information about suppliers, investors, buyers, and visitors who use our platform. By accessing or using the Zenia platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use the platform.

2. Information We Collect

Account Information

When you create an account or apply for platform access, we collect your name, email address, company name, Tax ID (EIN), business address, and phone number. This information is required to verify your identity and onboard your business to the platform.

Financial Information

To facilitate invoice funding and advance disbursements, we collect invoice details, bank account information (routing and account numbers), transaction history, and credit-related data. This information is necessary to assess creditworthiness, price invoice advances, and execute payments on your behalf.

Bank Account Data via Plaid

When you connect your bank account, we use Plaid Technologies, Inc. to verify account ownership and retrieve account and transaction data. By connecting your bank account, you authorize Zenia and Plaid to access your account data as described in Plaid's Privacy Policy at https://plaid.com/legal/.

Usage Data

We automatically collect certain technical information when you visit or use the platform, including IP address, browser type and version, pages visited, session duration, referring URLs, and device information. This data is used to maintain platform security, diagnose technical issues, and improve platform functionality.

Communications

We retain records of communications you send us, including support emails, onboarding form responses, and any other correspondence. These records allow us to respond to your inquiries and improve our customer support processes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• –To verify your identity and business credentials through KYB/KYC processes
• –To assess creditworthiness and price invoice advances using our proprietary scoring models
• –To process invoice funding, advance disbursements, and settlements between counterparties
• –To send transactional notifications, including invoice status updates and funding confirmations
• –To comply with legal and regulatory obligations, including BSA/AML requirements, GLBA, and tax reporting
• –To detect, prevent, and investigate fraudulent activity or platform abuse
• –To improve our platform, develop new features, and optimize user experience

We do not sell your personal information to third parties under any circumstances.

4. Bank Account Data and Plaid

Zenia uses Plaid Technologies, Inc. (“Plaid”) to connect to your financial institution for account verification and data retrieval. Plaid is a licensed financial data aggregator regulated under applicable financial privacy laws, including the Gramm-Leach-Bliley Act (GLBA).

Your bank login credentials are never transmitted to or stored by Zenia — they are provided directly and securely to Plaid through its encrypted connection. We receive only account verification data and transaction summaries as necessary for credit assessment and advance disbursement processing.

You may revoke Plaid's access to your bank account at any time by contacting us at support@getzenia.com. Upon receiving your revocation request, we will delete your Plaid access token within 30 days. Note that revoking Plaid access may affect our ability to process invoice advances for your account.

For more information about how Plaid collects, uses, and shares your data, please review Plaid's Privacy Policy at https://plaid.com/legal/.

5. Information Sharing

We share your information only in the following limited circumstances:

• –Service providers: Stripe (payment processing), Mercury (operating banking), Plaid (bank account verification), Jack Henry (credit union integration), Railway (infrastructure hosting), and Vercel (web hosting). Each service provider is bound by a data processing agreement and may only use your data to provide services on our behalf.
• –Financial institution partners: Financial institutions and other platform investors receive anonymized invoice data necessary to evaluate and fund advances. Personal identifying information is not shared with investors beyond what is required for compliance purposes.
• –Legal and regulatory: When required by applicable law, court order, subpoena, or regulatory investigation, we will disclose information to the appropriate legal or governmental authority.
• –Business transfers: In connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will provide notice to you before your information becomes subject to a different privacy policy.

We do not share your personal information for third-party marketing, advertising, or data monetization purposes.

6. Data Retention

We retain your information for as long as necessary to provide the platform and comply with our legal obligations. Specific retention periods are as follows:

• –Financial transaction records: 7 years, as required by IRS regulations and the Gramm-Leach-Bliley Act
• –Account information: for the duration of your relationship with Zenia, plus 3 years, after which it is deleted
• –Plaid access tokens: deleted within 30 days of account termination or revocation request
• –System audit logs: 3 years

To request deletion of your information, contact support@getzenia.com. Note that certain data may be retained beyond these periods where required by applicable law.

7. Your Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• –The right to access the personal information we hold about you
• –The right to correct inaccurate or incomplete information
• –The right to request deletion of your information, subject to our legal retention obligations
• –The right to opt out of certain data uses where permitted by law
• –The right to data portability in a structured, machine-readable format

To exercise any of these rights, contact us at support@getzenia.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• –TLS 1.3 encryption for all data transmitted between your browser and our platform
• –AES-256 encryption for data stored at rest
• –Role-based access controls limiting internal access to your data on a need-to-know basis
• –Multi-factor authentication required for all platform access
• –Comprehensive audit logging of all system and administrative events

No system is completely secure. If you believe your information has been compromised or if you discover a security vulnerability, please contact us immediately at security@getzenia.com.

9. Cookies and Tracking

We use only essential cookies that are necessary for platform authentication and session management. These cookies allow you to remain logged in as you navigate between pages and are deleted when your session ends or when you log out.

We do not use advertising cookies, behavioral tracking cookies, or third-party analytics cookies. You may disable cookies in your browser settings, but this will affect your ability to log in and use the platform.

10. Children's Privacy

Our platform is designed exclusively for business use and is not directed at individuals under the age of 18. We do not knowingly collect or solicit personal information from minors. If you believe we have inadvertently collected personal information from an individual under 18, please contact us immediately at support@getzenia.com and we will delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify registered users by email at least 30 days before the changes take effect and will post the updated policy on this page with a revised “Last updated” date. Continued use of the platform after changes become effective constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: