Legal

Privacy Policy

Last updated: 9 May 2026

1. Who we are

Zoravel is operated by Elixon LTD, United Kingdom. We are the data controller for account data and data processor for email lists you upload. Contact: hello@zoravel.com

2. What data we collect

Account data: your email address, organisation name, and payment history. This is required to provide the service.

Email lists: CSV files you upload for verification. These are processed solely to deliver verification results and deleted immediately after processing begins. Export files are deleted 72 hours after generation.

Analytics: we use self-hosted Umami analytics to understand how the service is used. Umami is privacy-friendly, does not use cookies, and does not collect personal data.

3. Legal basis for processing

Account data is processed on the basis of contract - it is necessary to provide the service you have signed up for.

Email lists you upload are processed on the basis of legitimate interests - you are using the service to verify your own data. You are the data controller for any personal data in your lists and are responsible for ensuring you have a lawful basis to process it.

4. Data retention

Source CSV files are deleted immediately after processing begins.

Export files are deleted 72 hours after generation.

Account data is retained for the duration of your account and deleted within 30 days of account closure.

5. Data sharing

We do not sell your data. We share data only with service providers necessary to operate the service:

  • Stripe - payment processing
  • Fly.io - hosting infrastructure
  • AWS S3 - file storage

6. Your rights

Under GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing
  • Data portability

To exercise any of these rights contact us at hello@zoravel.com.

7. Cookies

We use one first-party session cookie required for authentication. Our analytics (Umami) does not use cookies. See our Cookie Policy for details.

8. Contact

Elixon LTD, 51 Roundmead, Bedford MK41 9HY, United Kingdom.
For any privacy-related queries contact support@zoravel.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.