Privacy Policy
Last updated: 16 October 2026
This Privacy Policy explains how Zite ("the Company", "We", "Us" or "Our") collects, uses, stores and shares information when You use the Zite web application, the Zite Android app and the website at zite.io (together, the "Service"). It also explains Your choices and rights. By using the Service, You agree to the practices described here.
1. Definitions
Account means a unique account created for You to access the Service.
Affiliate means a Zite entity in the United States or Nepal that is under common control with the Company.
Google User Data has the meaning given in Section 6.
Organization means the company, agency or other body that sets up a Zite Team and invites You to use the Service, such as Your employer.
Personal Data means information that identifies, or can be used to identify, an individual.
Service Provider means a company that processes data on Our behalf to help Us operate the Service.
Usage Data means data collected automatically when You use the Service.
You means the individual using the Service, or the Organization on whose behalf that individual uses it.
2. Organization data
Most information in Zite is entered by field staff, reviewers and managers on behalf of an Organization. The Organization decides which forms it uses, what it collects, who can see the results and how long they are kept. For that information, We act on the Organization's instructions and under Our agreement with it.
If You have a question about information an Organization has collected through Zite, please contact that Organization first. We will help them respond.
3. Information We collect
Account information. Your name, email address, phone number, role, and the Teams and Projects You belong to. Passwords are stored in hashed form, never in plain text.
Content You submit. Form responses, photos, files, site information, tasks, comments and similar content entered into the Service. This content is controlled by Your Organization (Section 2).
Device permissions. With Your permission, the mobile app may use Your device's location, camera and photo library, for example to record where a form was submitted or to attach a photo. You can turn these permissions on or off at any time in Your device settings.
Usage Data. Your device's IP address, browser type and version, device type, operating system, the pages and features You use, the time and date of Your visit, crash reports and device identifiers.
Information from Google. If You sign in with Google or connect Google Drive, We receive the information described in Section 6.
4. How We use information
To provide and maintain the Service, including offline data collection and sync.
To create and manage Your Account and control what You can access.
To deliver the features Your Organization sets up, such as forms, dashboards, tasks and notifications.
To contact You about the Service, including security alerts, product updates and support.
To keep the Service secure, prevent misuse and fix problems.
To understand how the Service is used and improve it, using aggregated or de-identified data where possible.
To comply with legal obligations.
We do not sell Personal Data, and We do not use it for advertising.
5. How We share information
Service Providers. Companies that help Us run the Service, such as Amazon Web Services (hosting and storage), email delivery and error monitoring. They may use the data only to provide services to Us.
Within Your Organization. Other users in Your Teams and Projects can see content according to the roles Your Organization assigns.
Affiliates. Our entities in the United States and Nepal, who must follow this Privacy Policy.
Business transfers. If the Company is involved in a merger, acquisition or sale of assets, data may be transferred. We will give notice before Your Personal Data becomes subject to a different privacy policy.
Legal requirements. Where required by law or a valid request from a public authority, or to protect the rights, property or safety of the Company, Our users or the public.
With Your consent. For any other purpose You agree to.
6. Google User Data
This section explains how the Service handles information received from Google. If it conflicts with any other part of this Privacy Policy, this section applies to Google User Data.
6.1 What Google User Data means. Google User Data is information We receive from Your Google Account through Google APIs when You (a) sign in to Zite with Google, or (b) connect Google Drive to sync reports from Zite.
6.2 Google User Data We access.
Sign in with Google (scopes: openid, userinfo.email, userinfo.profile). We receive Your Google account identifier, email address, name and profile picture.
Google Drive sync (scope: drive.file). Zite can do only two things in Your Google Drive: (1) view Your folder structure through the Google folder picker, so that You or Your Project administrator can choose the folder where reports are saved; and (2) create reports in that folder as Google Sheets, and later edit the files Zite created. Zite cannot and does not see, open or edit any other files in Your Google Drive.
We do not request access to Gmail, Google Contacts, Google Calendar or any other Google service.
6.3 How We use Google User Data. We use Google User Data only to provide features You request:
to sign You in and link Your Google Account to Your Zite Account;
to show which Google Account is connected; and
to create and update Google Sheets copies of Your Zite reports in the Drive folder that You or Your Project administrator set up.
We do not use Google User Data for advertising, marketing or profiling, to determine creditworthiness or for lending purposes, or to develop, improve or train generalized artificial intelligence or machine learning models.
6.4 How We store and protect Google User Data. We store Your Google account identifier, email address, name, profile picture link, and the access and refresh tokens that allow Drive sync to run. This data is kept in Our database hosted on Amazon Web Services. Tokens are encrypted at rest, all data is encrypted in transit using HTTPS/TLS, and access is limited to authorized staff.
When Drive sync runs, Zite first generates the report file from Your Organization's data and saves it briefly in Our cloud storage on Amazon S3. It then uploads it to Your Drive as a Google Sheet. The sync writes reports to Your Drive; it does not copy the contents of Your other Drive files to Our servers. Once a report is in Your Drive, it is governed by Your Drive's sharing settings and Google's terms.
6.5 How We share Google User Data. We do not sell Google User Data. We do not transfer it to advertising platforms, data brokers or information resellers, and We do not share it with Affiliates or business partners for advertising or promotions. We disclose it only to Service Providers that help Us operate the Service (such as Amazon Web Services), where required by law, or with Your consent.
No person at Zite reads Google User Data unless You give permission (for example, when You ask Our support team for help), it is necessary for security purposes such as investigating abuse, or it is required by law.
6.6 Retention and deletion of Google User Data.
We keep sign-in profile data for as long as Your Zite Account exists.
We keep Drive tokens for as long as Drive is connected. If You disconnect Drive or revoke access, sync stops and We delete the stored tokens within 60 days.
You can revoke Zite's access to Your Google Account at any time at https://myaccount.google.com/permissions.
You can ask Us to delete the Google User Data We hold by emailing [email protected]. We will delete it within 30 days unless the law requires Us to keep it. If Your Zite Account is managed by an Organization, We can remove Your Google User Data on request even if the Organization keeps the Account itself.
Reports already synced to Your Drive stay there until You or Your Organization delete them.
6.7 Limited Use. Zite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Data retention
We keep Personal Data for as long as Your Account is active, as needed to provide the Service, as set out in Our agreement with Your Organization, or as needed to meet legal obligations and resolve disputes. Organizations decide how long content they collect is kept; when an agreement ends, We delete or return that content as the agreement requires. Usage Data is generally kept for a shorter period unless needed for security or to improve the Service.
8. Where information is processed
The Service is hosted on Amazon Web Services. Our team works in the United States, Thailand, and Nepal and may access data to operate and support the Service. This means Your information may be processed outside Your country, where data protection laws may differ. We use contracts and access controls to protect it wherever it is processed.
9. Security
We protect information with encryption in transit, role-based access controls and limited staff access. No method of transmission or storage is completely secure, so We cannot guarantee absolute security, but We work to protect Your information and will notify affected users and Organizations of a breach as required by law.
10. Your choices and rights
You can ask to access, correct, export or delete Your Personal Data, or to withdraw consent You have given, such as device permissions or Google access. Depending on where You live, You may have additional rights, including the right to object to or restrict processing and to complain to a data protection authority. To make a request, contact Us at [email protected]. If Your request concerns content controlled by an Organization, We will refer it to that Organization.
11. Children
Zite is a workplace tool. Accounts are for adults acting on behalf of an Organization, and the Service is not directed at children. We do not knowingly create Accounts for children under 13.
Organizations may collect information about children as part of their work, for example when registering a household and its members. That information is collected and controlled by the Organization (Section 2), which is responsible for having a lawful basis to collect it and for obtaining any consent required from a parent or guardian. We process it only on the Organization's instructions, protect it as described in this Privacy Policy, and do not use it for any other purpose.
12. Links to other websites
The Service may link to websites We do not operate. We are not responsible for their content or privacy practices, and We encourage You to read their privacy policies.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. For material changes, We will also notify You by email or a notice in the Service before the change takes effect.
14. Contact Us
If You have questions about this Privacy Policy or Your information:
Email: [email protected]
Contact form: https://www.zite.io/contact