Privacy notice
Effective 24 August 2026. This notice covers zimonai.com, client-account sign-in, service enquiries, Stripe payments and the information used to deliver an agreed ZimonAI assignment.
This notice applies when you browse zimonai.com, sign in to the client portal, prepare or send an enquiry, make a payment, book a consultation, or provide material for a supplier-verification assignment.
The website and the ZimonAI service are operated by 深圳智蒙湾科技有限公司 (ZimonAI Technology Co., Ltd.). A supplier, marketplace, certificate issuer, payment provider or other third party has its own responsibility for information processed in its systems.
Cloudflare delivers and protects the public website. Like other hosting and security providers, it may process network and system data needed to route traffic, detect abuse and keep the service available, such as IP address, request time, browser or device information and security events.
ZimonAI does not use those infrastructure records to build advertising profiles. To limit automated sign-in abuse, the client portal may briefly keep a keyed, pseudonymous request marker; the portal database does not retain the raw IP address for this purpose. Cloudflare processes its records under its own privacy notice and service arrangements.
On the production website, ZimonAI records limited events so we can understand which pages and service choices are useful and whether important actions work. The analytics database stores daily aggregate counts rather than named visitor profiles.
The site also records low-detail technical categories for JavaScript, rejected-promise or static-resource failures, together with fixed navigation-speed ranges. These records are used to diagnose reliability; they do not include the error message, stack trace, form text, account identifiers or URL query string.
The public requirement form transmits the contact and business fields you submit to ZimonAI over HTTPS. The operational database saves the request with a reference number before the page confirms receipt, so a failed email alert does not erase the submitted requirement.
The post-payment intake form currently prepares an email draft on your device. Its text is not uploaded by that form and leaves your device only after you review and send the message through your own email provider.
If you contact ZimonAI by email, telephone, WhatsApp, WeChat, LINE or LinkedIn, we receive the contact details and content you choose to provide. Please send only material relevant to the request and avoid card details, unrelated identity documents or unnecessary personal information.
Information you deliberately submit while signed in to the client portal is transmitted to ZimonAI and stored as part of the account and case record.
Checkout is hosted by Stripe. Stripe processes payment-method, contact, transaction, device and fraud-prevention data under its own terms and privacy notice. ZimonAI does not receive or store the complete card number or CVC.
To confirm and support an order, ZimonAI receives and records the Stripe session and payment references, service item, amount, currency, quantity, payment status, receipt email, customer name, and any business name, phone number, tax ID or service reference collected for that Checkout session.
A verification assignment may require supplier names, company records, quotations, product models, certificate numbers, images, correspondence and the buyer-side question the work is intended to support. Some material may contain names or business contact details.
ZimonAI uses the material only to assess the request, agree the scope, perform the work, explain the evidence, deliver the report, answer follow-up questions and maintain an auditable business record. The client remains responsible for having authority to share the material.
A portal account stores the verified email address, preferred language, internal account reference, linked case and order references, submitted case fields, status history and the delivery record for necessary account, order and service notifications. Sign-in may use Google or a short-lived one-time code sent by email. ZimonAI does not store Google passwords or Google access tokens, and does not keep a readable copy of a one-time code after verification.
ZimonAI does not sell personal information. Information is shared only when needed for the agreed work, when you instruct or authorise the sharing, to operate essential services, or when disclosure is legally required.
ZimonAI coordinates work across Taiwan and Shenzhen and uses international infrastructure and payment providers. Information may therefore be processed in more than one country or region, where privacy rules may differ from those where you are located.
Where a provider is involved, its contractual and security arrangements govern its processing. If a particular assignment requires a new recipient or unusual transfer, that need should be confirmed in the project scope.
Retention depends on the type of record, whether an assignment proceeds, accounting and tax requirements, the need to answer follow-up questions, and whether a dispute or legal obligation exists. ZimonAI does not keep information merely because storage is available.
Enquiry, account and assignment records are reviewed when no longer operationally necessary. Sessions expire and can be revoked at sign-out; deleting a portal account may require a verified request. Payment and accounting records may need to be kept for the legally required period. Aggregate analytics cannot ordinarily be linked back to a named person and is retained for site trend reporting.
ZimonAI uses access controls, provider-hosted HTTPS, restricted payment credentials, hashed portal-session identifiers and account-scoped case queries intended to reduce unauthorised access, alteration or disclosure. Full card data remains within Stripe-hosted payment systems.
No email, cloud or internet system is risk-free. If you believe information has been sent to the wrong place or a security issue affects your material, contact ZimonAI promptly with enough detail to identify the record.
Subject to applicable law and record-keeping duties, you may ask whether ZimonAI holds personal information about you and request access, correction, account closure or deletion. You may also ask for processing to be limited or object to a use where the relevant law provides that right.
A request may require reasonable identity verification. ZimonAI may retain information that must be kept for accounting, legal claims, security or regulatory obligations, and will explain the reason where a request cannot be completed in full.
The website and services are intended for business users and are not directed to children. Do not submit information about a minor unless it is necessary, lawful and specifically agreed in advance.
This notice may be updated when the website, providers or service process changes. The effective date at the top identifies the current published version. Privacy questions and requests can be sent to simonlo@zimonai.com.
Provider notices
These providers operate under their own terms and privacy notices.
Ask about this policy
Include the relevant service, payment or case reference so the question can be matched without sending unnecessary personal information.
