Privacy Notice

1. Who controls your data

ZWIFI APPLICATION HOSTING SERVICES, trading as ZWIFI, operates ZWiFi and acts as personal information controller for account, billing, support, security, and platform-administration data. A user account operator may separately act as controller for hotspot-user data it collects through its WiFi service.

2. Data we process

We may process business and administrator names, usernames, email addresses, phone numbers, password hashes, account numbers, IP addresses, device and client identifiers such as MAC addresses, Omada Cloud Controller configuration, voucher and authorization records, wallet and transaction records, support communications, security logs, and acceptance records.

3. Purposes and lawful bases

We process data to create and secure accounts, perform contracts, provision and operate requested services, process payments, maintain wallets and audit records, prevent fraud, troubleshoot, answer complaints, comply with law, and pursue legitimate security and service-improvement interests. Where consent is the proper basis, it will be requested separately and may be withdrawn subject to lawful limits.

4. Sharing and processors

Data may be shared only as necessary with service providers such as PayMongo, TP-Link Omada, hosting, security, email, and infrastructure providers; with professional advisers; or with authorities when legally required. Providers are expected to use appropriate safeguards and process data only for authorized purposes.

5. Retention

Account and operational data are retained while needed to provide the service. Transaction, acceptance, security, and legal records may be retained longer where necessary for accounting, fraud prevention, dispute handling, or legal obligations. Data no longer needed is deleted, anonymized, or securely isolated according to applicable retention requirements.

6. Security

We use access controls, password hashing, HTTPS, secure cookies, request validation, rate limiting, user-account isolation, logging, backups, and other reasonable organizational and technical measures. No system is risk-free; report suspected incidents immediately.

7. Your rights

Subject to law, you may request access, correction, erasure or blocking, data portability, objection, withdrawal of consent where applicable, information about processing, and damages or complaint remedies. Identity verification may be required before fulfilling a request.

8. Contact and complaints

Send privacy requests to [email protected]. You may also contact the National Privacy Commission if you believe your rights were violated.

9. Updates

We may update this Notice when processing changes. Material changes will be communicated through the service or account contact details, and a new version date will be published.