Zevko

Legal

Privacy Policy

Last updated: May 2026

1. Who we are

This Privacy Policy applies to Zevko, a procurement software service operated byGVIX Labs SRL, a company incorporated in Romania, European Union.

For any privacy-related questions or requests, contact us at: contact@gvix.xyz

2. What data we collect and why

We collect only what is necessary to provide the Zevko service.

Account data

When you sign up, we collect your email address and any profile information you provide. This is used to create and manage your account. Legal basis: performance of a contract.

Procurement data

RFQs, line items, supplier responses, quotes, and purchase orders you create or receive through Zevko are stored on your behalf so you can access and manage them over time. Legal basis: performance of a contract.

Supplier data

When you invite a supplier, we store their email address and the quote information they submit. Suppliers are informed via the invitation email that their response will be stored by the organisation that invited them. Legal basis: legitimate interest of the procuring organisation.

Usage data

We may collect anonymised usage data (page views, feature usage) to improve the product. This does not identify you personally.

3. How long we keep your data

Account and procurement data is retained for as long as your organisation account is active. If you delete your account, your data is permanently removed within 30 days.

We may retain anonymised, aggregated data indefinitely for analytical purposes.

4. Who we share your data with

We do not sell your data. We share it only with the following sub-processors necessary to operate the service:

  • Supabase / Amazon Web Services (AWS) — database hosting and authentication, EU region
  • Vercel — application hosting and anonymous traffic analytics (no cookies, no personal data collected)

All sub-processors are contractually bound to handle your data in accordance with GDPR.

5. Your rights under GDPR

As an EU resident, you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Portability — request your data in a machine-readable format
  • Objection — object to processing based on legitimate interest
  • Restriction — request that we limit how we use your data
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at contact@gvix.xyz. We will respond within 30 days.

6. Supervisory authority

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the data protection authority in your country of residence.

7. Cookies

Zevko uses only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify active users by email. The "Last updated" date at the top of this page always reflects the most recent version.