Privacy practices

What Zinvyl collects, why it is needed, and how it is handled.

Effective September 20, 2026

Who operates this service

Zinvyl is a trade name of G.B. Industry LLC, an Arizona limited liability company. G.B. Industry LLC is the legal service provider and merchant.

Scope

This notice covers the Zinvyl website, marketplace, intake, support, payment reconciliation, and service delivery. It does not replace a customer-specific data-processing agreement or written security addendum when one is required.

Information we collect

We collect contact and business identity, role and budget authority, buyer work requests, supplier type and capability descriptions, proof and agent-endpoint links, workflow descriptions, acceptance criteria, timing, communications, delivery records, transaction identifiers, payment status, and security or request metadata such as time, network address, user agent, and trace identifiers. Stripe processes payment-card and connected-account onboarding information when those services are used. Zinvyl does not receive or store full card numbers.

Order files

After live funding is verified, the payer may use the private order page to upload up to three limited-type files needed for the confirmed service. File metadata, cryptographic digests, review status, and delivery evidence are recorded separately from the file bytes. The private order URL and payer email together control customer access; customers must not forward that URL. Files are not published or used to train a general-purpose model. Do not upload credentials, card data, regulated personal data, executable code, archives, macros, or material outside the confirmed scope. Claimed trade-secret material must not be transferred until the written scope identifies its category and confirms permitted access, processing tools and providers, use, and retention.

Sources and use

Information comes from you, authorized teammates or agents, service interactions, Stripe, and hosting or security providers. We use it to qualify and scope requests, prevent abuse, verify funding, deliver and support purchased services, preserve acceptance and dispute evidence, improve bounded workflows, and meet accounting, tax, security, or legal obligations.

Automation and AI assistance

Zinvyl may use software automation and AI-assisted methods to perform an authorized service. Public intake is not the place for confidential documents or regulated data. Any additional processing boundary should be confirmed in the written scope before secure transfer. Automated tools do not independently authorize purchases, declare payment, or make final legal or compliance decisions.

Disclosure and sales

We disclose information to service providers for hosting, security, payments, communications, and professional support; to a customer's authorized representatives; in a business transaction subject to appropriate safeguards; or when required to protect rights, safety, or comply with law. We do not sell personal information or share it for cross-context behavioral advertising.

Analytics, cookies, and network data

Zinvyl uses Google Analytics 4 on public marketplace pages to understand acquisition routes, page use, and the non-sensitive steps from intake submission through verified purchase. Google Analytics may set a first-party _ga cookie and process pseudonymous browser or device identifiers, page URLs and titles, approximate city or country, browser and device information, session statistics, scrolls, outbound clicks, form-interaction events, selected offer, fixed transaction value, and a one-way-derived transaction key used to prevent duplicate purchase reporting. When a human intake qualifies for checkout, Zinvyl may temporarily bind the pseudonymous Analytics client and session identifiers to the purchase intent so a signed live Stripe payment event can report one verified purchase. Those temporary identifiers are removed from the purchase intent after successful reporting. Zinvyl does not intentionally send form contents, names, email addresses, company names, raw order or receipt identifiers, uploaded files, free-text descriptions, card data, or raw Stripe payment identifiers to Google Analytics. The private operations console does not load the analytics tag. The session_id URL parameter and email-like text are redacted in the Google Analytics stream, and this implementation disables Google signals and advertising-personalization signals.

Hosting and security systems may process network data needed to deliver pages, prevent abuse, and maintain reliability. Stripe applies its own technologies and privacy notice on Stripe-hosted checkout pages. You may limit analytics through browser cookie controls or the Google Analytics opt-out add-on.

Retention and deletion

We retain information for the shortest period reasonably necessary for the stated purpose, considering the service lifecycle, security, disputes, tax and accounting records, legal requirements, and backups. Order files are ordinarily reviewed for deletion within 30 days unless the written scope, an unresolved dispute, a security investigation, or law requires a different period; transaction and evidence metadata may be retained longer. Abuse-prevention fingerprints are one-way keyed hashes and are automatically removed from the active database after their short protection window. A deletion request does not require deletion of records that must be retained for payment, fraud prevention, disputes, tax, security, or law.

Security and incidents

We use data minimization, access restrictions, encrypted transport, signed payment events, request limits, and service-specific controls. No system can guarantee absolute security. If an incident creates notification duties, G.B. Industry LLC will investigate and provide notices required by applicable law.

Keep secrets out of intake

Do not submit passwords, private keys, API tokens, production credentials, regulated personal data, or raw confidential freight documents through the public intake form. De-identify examples. Secure transfer is arranged only after scope is accepted.

Your choices

Use the Zinvyl contact form to request access, correction, or deletion and identify the request as a privacy matter. Zinvyl will verify authority before disclosing or changing business records. Some records may be retained as described above.

United States operations and changes

Zinvyl currently offers these services to U.S. businesses and processes information in the United States. Material changes will be published with a new effective date and apply prospectively.