Privacy Policy

Information we collect

• Account information: your email address and password, whether you use Zelfie as a Provider, a Client or both, and, for each side you use, whether you’re an individual or a company. Passwords are handled by our authentication provider and are never visible to us.
• Profile information: your first and last name. For Clients, the company or trading name, contact name, contact email and the weekday approvals are due. For Providers, an optional business profile: business name, tax ID and billing address.
• Profile picture, if you upload one.
• Timesheets and approvals: projects and assignments, dates, hours, start and end times, task descriptions, time off, templates and comments, and the approval history of each timesheet — submissions, approvals, requested changes, rejections and reassignments, with who acted and when.
• Directory, contacts and team members: the names, email addresses and roles of the people you add as counterparts, contacts or team members, and the invitations you send them. These people may not have a Zelfie account.
• Preferences: your default view, your list and table view settings, the company you're viewing, and your time zone, which your browser detects.
• Technical information: our hosting providers process your IP address and browser details to deliver and secure the service. We also measure how quickly pages load, without using cookies.

Signing in with Google

If you sign in with Google, Zelfie requests only the basic sign-in scopes: openid, email and profile. Google shares your name, email address and profile picture with us. We use your email address to create your account and sign you in, and your name to prefill your profile. We don’t use your Google profile picture, and we don’t access any other Google data, such as Gmail, Contacts, Calendar or Drive.

Information we receive from Google is never sold and never used for advertising. Zelfie’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• To provide Zelfie: recording and submitting timesheets, routing them for approval, showing them to the people you work with, and creating the PDF and spreadsheet exports you request.
• To send transactional email: account confirmation and password reset, invitations to connect or join a team, approval requests and reassignments, notice when a connection ends, and exports you choose to email.
• To keep Zelfie secure and working, and to fix problems.

The Providers and Clients you connect with, and the team members given access, see the timesheets and profile details the service needs to show them. We don’t sell personal information, and we don’t use it for advertising.

Service providers

We use these companies to run Zelfie. They process data on our behalf.

• Supabase: database, authentication and file storage. Our Supabase project is hosted in the São Paulo, Brazil region.
• Vercel: application hosting and page-load measurement (Vercel Speed Insights).
• Resend: sending transactional email.

Your information is stored and processed outside your country, including in Brazil and in other countries where these providers operate.

Cookies

Zelfie uses only the cookies it needs to work:

• A cookie that keeps you signed in.
• A cookie that remembers whether you’re viewing Zelfie as a Provider or a Client.
• A cookie that stores your time zone, so dates and times display correctly.
• A cookie that lets us resend your confirmation email right after you register.

We don’t use analytics or advertising cookies.

Retention and deletion

We keep your information while your account is active. To delete your account, email analytics@prediktive.com from the address on your account. We’ll delete your account and the personal information associated with it, except what we must keep to meet legal obligations. Records that also belong to another user’s account, such as a timesheet a Provider submitted to you, may remain available to that user.

Your rights

You can access and correct most of your information in Settings. To request a copy of your information, a correction or deletion, email analytics@prediktive.com.

Security

Zelfie uses encrypted connections, database access controls that limit each user to the records they’re allowed to see, and private storage for uploaded files. Approval links sent by email are single-use and expire after 7 days. No method of storage or transmission is completely secure, but we work to protect your information.

Children

Zelfie isn’t intended for anyone under 18, and we don’t knowingly collect information from them.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If we make significant changes, we’ll let you know by email or in Zelfie.

Contact

Prediktive LLC operates Zelfie. For questions about this policy or your information, email analytics@prediktive.com.