Privacy Policy

This policy explains what information SalesBlitz collects, why we collect it, and how it is handled. It applies to the SalesBlitz web console, the handheld field application and our APIs (together, “the Service”). If anything here is unclear, write to support@zyoolah.com.

Information we collect

• Account information — names, email addresses, phone numbers and roles of administrators, back-office users and field sales reps that your company registers.
• Company information — trading names, registration details, tax identifiers, addresses and branding your company provides when setting up a workspace.
• Operational records — the business data your team creates in the Service: customers, routes, products, price lists, stock movements, invoices, credit notes, cash collections and blitz activity.
• Location data — GPS coordinates captured for customer sites and field visits, used for route planning and visit verification.
• Device and usage data — registered device identifiers, sign-in sessions, and an audit trail of actions taken in the Service (who did what, when, from which device).

How we use it

• To provide, operate and secure the Service for your company.
• To authenticate users and enforce your company's roles and permissions.
• To send transactional email — invitations, account verification and password resets. We do not send marketing email without consent.
• To compute the reports and KPIs the Service exists to provide.
• To investigate faults, abuse or disputes, using the audit trail.

Your company controls its data

Your company is the controller of the operational records it creates. SalesBlitz processes that data on your company's instructions. Administrators decide who is invited, what roles they hold and which records they can reach. Deactivating a user or seller revokes their access immediately.

What we do not do

• We do not sell personal information. Ever.
• We do not share your operational records with other tenants.
• We do not use your business data to advertise to your customers.

Data retention

Business documents in the Service are retained rather than destroyed, because invoices, stock movements and cash records are exactly the things a distributor must be able to look up years later. Records are soft-deleted: hidden from daily use but preserved for audit and compliance. On termination of your subscription, your company may request export of its data via the API, and thereafter deletion, subject to legal retention obligations.

Security

Access to the Service requires authenticated sessions. Field devices are individually registered and PIN-secured, and repeated failed sign-ins lock the account. Every write to the system is recorded in an audit trail. We review our security practices on an ongoing basis and continue to strengthen them.

Cookies

The web console uses only the cookies and local storage needed to keep you signed in and remember your workspace. We do not run third-party advertising trackers.

Changes to this policy

If we make material changes, we will notify company administrators by email before the changes take effect, and update the effective date above.

Contact

Questions, access requests or complaints: support@zyoolah.com.