Privacy Policy

Effective date: 6 November 2026

Who we are

This policy explains how JetUp Inc. (“JetUp”, “we”, “us”) handles personal data for this website and for ziv, our software delivery service, which is currently offered as an invite-only pilot. JetUp Inc. is responsible for the processing described here. For the content your organization puts into ziv, we process it on your organization’s behalf.

Questions and requests: hello@zivhub.com.

Where your organization has a pilot agreement with JetUp Inc., that agreement also governs how we process the data your organization puts into ziv. If it differs from this policy, the agreement applies.

The website

This website is a set of static pages. It sets no cookies, uses no analytics or tracking, has no forms, and makes no requests to third parties. Its fonts and images are served from the same site.

Like any website, it is delivered by servers that record each request. Our content delivery network (Amazon CloudFront) keeps standard access logs, which include the requesting IP address, the date and time, the page requested, the browser’s user agent and the referring page. We use these logs only to operate and secure the site.

If you write to us at hello@zivhub.com, we receive your e-mail address and whatever you choose to include, and use them to reply to you.

What data the ziv service processes

ziv is used by people whom their organization has invited. For those people we process:

• Invitation details. The name and e-mail address your organization’s administrator enters when inviting you. The name is stored encrypted; the e-mail address is stored encrypted as your notification address and, separately, as a one-way keyed hash used to match your sign-in to the invitation.
• Sign-in data. You sign in with your Microsoft work or school account or your Google account, using OpenID Connect. ziv asks the provider for your basic profile and e-mail address. From the sign-in it uses only your account’s stable identifier at the provider (for Microsoft, the directory and object identifiers; for Google, the subject identifier) and your e-mail address when the provider confirms it as verified. The identifier is stored only as a one-way keyed hash. ziv does not store the name, photo or other profile details the provider sends. We never receive your password.
• Session and security data. Sign-in and session records (when you signed in, with which provider, when the session expires), and cookies that keep you signed in on the ziv application. These cookies are strictly necessary for the service; there are no advertising or analytics cookies. If you set up an authenticator app for sensitive actions, its secret is stored encrypted. Your IP address is used, in memory, to limit the rate of sign-in and some other requests, and appears in the access logs of our content delivery network.
• Content your organization puts into ziv. Requirements, work items, questions, answers, decisions and related records, which may include names and other personal data that you or your colleagues enter. ziv also keeps a one-way keyed hash of each e-mail address and phone number that appears in this content, so that the records about a person can be found later.
• E-mail notifications. ziv e-mails you when a question awaits your answer, and you answer in the ziv application. To do this we process your e-mail address and the messages we send (see below).
• Operational logs. Application, database and error logs that we use to run and fix the service.

Why we use it

• To provide the ziv service to your organization under its agreement with us: signing you in, showing you your organization’s records, sending you notifications and recording your answers.
• To keep the website and the service secure and working: preventing abuse, investigating faults and protecting accounts. This is in our and our customers’ legitimate interest.
• To reply to you when you contact us.
• To meet legal obligations that apply to us.

We do not sell personal data, and we do not use it for advertising.

E-mail notifications

Notification e-mails are sent through Amazon Simple Email Service (Amazon SES). Answering a question by replying to its e-mail is not yet enabled: the reply addresses some notifications carry are not active, and ziv receives no replies. Answer in the ziv application instead. If answering by e-mail reply is enabled later, we will update this page first. If an e-mail we send bounces or is reported as spam, Amazon SES keeps the address on a suppression list so that we stop sending to it.

Who receives the data

We use these subprocessors:

• Amazon Web Services — hosting, storage, databases, encryption keys, content delivery and e-mail (Amazon SES).
• Microsoft — sign-in, and it hosts our e-mail mailbox for hello@zivhub.com: messages you send to that address are received and stored by Microsoft.
• Google — sign-in only.

When you choose to sign in with Microsoft or Google, that provider authenticates you under its own privacy terms and tells ziv who you are.

Within the ziv service, your organization’s records are visible to the members of your organization according to the roles your organization assigns. We may also disclose data where the law requires it.

Where the data is stored

The website and the ziv service are hosted on Amazon Web Services in the United States, in the us-east-1 region (Northern Virginia). Our content delivery network serves the website and the application from edge locations closer to you, but its logs are stored in us-east-1. E-mails you send to hello@zivhub.com are stored in our Microsoft-hosted mailbox. If you use ziv or the website from outside the United States, your data is transferred to and processed in the United States.

Security

• The content of your organization’s records in ziv’s database is encrypted with a key for your organization alone, which is itself protected by a key held in AWS Key Management Service. Short labels your organization defines, such as role names and question categories, are not encrypted this way; like everything else, they are covered by the encryption at rest below.
• Databases, caches and storage are encrypted at rest, and connections to them are encrypted in transit. The database is not reachable from the internet.
• Sign-in uses OpenID Connect with the provider’s verified tokens. Session tokens and the other tokens and codes ziv keeps in its database are stored only as hashes. The one-time code your provider returns at sign-in is used at once and cannot be reused; because it is part of the page address, it also appears in our content delivery network’s access logs. Certain sensitive actions require a fresh sign-in and an authenticator-app code.
• The website and application are served only over HTTPS.

No system is perfectly secure, but we work to protect the data we hold.

How long we keep data

We keep data for the periods configured in our production systems:

• Content delivery network access logs: for this website, 365 days; for the ziv application, removed automatically within about two years (365 days, then up to 365 more days as an older stored version).
• Application, database and error logs: 90 days.
• Database and cache backups: 7 days. If a database or cache is retired, a final copy is kept until we delete it.
• Sign-in and session records: a session ends 12 hours after sign-in, but the records of sign-ins and sessions are kept with your account; no automatic deletion period is configured today.
• Reply addresses in notification e-mails (not active): each record expires after at most 14 days; expired records are then deleted in batches whenever ziv prepares a notification for your organization, and are kept until then.
• Addresses on the Amazon SES suppression list: until removed.
• Signed integrity checksums of each organization’s record, which contain no record content: kept for at least ten years in write-once storage that cannot be changed or deleted during that time; we do not delete them afterwards.
• Your organization’s content, your invitation details and your account: for as long as your organization uses ziv. No automatic deletion period is configured. During the pilot, ziv cannot yet delete an organization’s content on request: its decision record is append-only by design, and erasure is planned work. We answer every request sent to us and honour it as far as the service allows. Data removed from the live service stays in the automatic backups for up to 7 days.
• E-mails you send to hello@zivhub.com: no fixed period; we keep them as long as needed to deal with your message.

Your rights

Depending on where you live, you may have the right to ask us for access to your personal data, to correct it, to delete it, to restrict or object to its use, or to receive a copy of it. You may also have the right to complain to your local data protection authority.

To make a request, write to hello@zivhub.com. We may need to confirm your identity first. If your data is in ziv because your organization invited you, we may also involve your organization, since it decides what is kept in its records.

Children

The website and the ziv service are intended for businesses and are not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy. When we do, we will publish the new version on this page with a new effective date. If a change is significant, we will also tell the organizations using ziv.

Contact

JetUp Inc. — hello@zivhub.com