1. About this policy
Zeem Development LLC (“Zeem,” “we,” “us”), located in California, operates the Zeem client management and reporting platform, including the hub at hub.zeemdev.com, shared reports at reports.zeemdev.com, and related platform features. This policy covers platform users, people connecting business accounts, report recipients and viewers, and people contacting us about the platform.
For account administration, security, and our own service communications, Zeem determines how information is used. When a client directs us to process its business, customer, or reporting information, we process it to provide that client's services. If your information was supplied by a client, you may also contact that client about its practices and requests. This policy does not replace the independent privacy policies of connected services or cover unrelated websites or services merely because Zeem created them.
2. Information we collect
What we receive depends on your role, the information you provide, and the integrations you choose to connect:
- Account and contact information: names, work email addresses, account identifiers, roles, permissions, and authentication records. Platform passwords are stored as hashes rather than readable passwords.
- Client and business information: business names, contact details, logos, service records, agreements, notes, financial records, and other information entered or imported by authorized users.
- Connected-service information: provider account identifiers and names, approved assets, authorization scopes, access and refresh tokens, and data returned by the APIs for the features you use. Facebook and Instagram information is described below.
- Reports and delivery information: dashboard settings, date ranges, report metrics, email templates, recipient addresses, schedules, sharing settings, and delivery or synchronization status.
- Support and technical information: the messages and attachments you send us, audit events, errors, and connection activity. Our hosting and email providers may process IP addresses, browser or device information, timestamps, and delivery logs to operate and secure their services.
Information comes from you, authorized staff or clients, connected service providers, and technical activity associated with using the platform. Do not submit passwords for third-party accounts, unnecessary sensitive information, or information you are not authorized to share.
3. How we use information
- Provide accounts, permissions, client management, dashboards, reporting, and the integrations you request.
- Retrieve and synchronize authorized business data, calculate metrics, and generate reports and PDF exports.
- Send scheduled reports, test emails, credential-expiration reminders, and other service communications to configured recipients.
- Respond to support and privacy requests, troubleshoot problems, maintain security, prevent misuse, and meet applicable legal obligations.
We do not use connected-service information for purposes unrelated to the platform services described here. Connecting an advertising account allows reporting on its performance; it does not authorize Zeem to use your personal information for our own targeted advertising.
4. Facebook and Instagram integrations
The platform uses Facebook Login and Meta APIs to connect approved Facebook Pages, Instagram professional accounts, and advertising accounts for business reporting. This connection is separate from signing in to your Zeem platform account.
With your authorization, we may receive your Meta account identifier and name; identifiers, names, and usernames of the Pages, Instagram accounts, business assets, or advertising accounts you approve; authorization permissions and tokens; and reporting data for selected assets. Depending on the connector and granted permissions, reporting data can include follower totals, reach, views, engagement, interactions, post or media identifiers and details, and campaign or advertising performance. We retrieve only the data used by the enabled reporting features within the access you grant.
We use this information to identify approved assets, let you select which accounts to add, maintain authorized API access, synchronize metrics, and display or deliver reports to the relevant client and authorized recipients. Authorizing an asset does not automatically add every available asset to reporting; your selections determine the accounts added.
Meta handles its own login and consent screens. We do not collect your Facebook or Instagram password. We store provider tokens securely and use them to make authorized requests. We do not sell Meta information, use it for unrelated advertising, or disclose it to unrelated clients. Service providers may process it only as needed to operate the platform, and recipients may receive it when an authorized user shares a report.
You can remove a connection in the platform or revoke the app's access through the applicable Facebook or Instagram account settings, including Facebook's Business Integrations or Apps and Websites settings. Revocation stops future authorized access but does not by itself erase information already imported or exported. For deletion, follow the instructions in Section 9. Meta's own practices are described in its Privacy Policy.
5. Other connected services
When enabled and authorized, Google integrations provide account identifiers and reporting data such as Analytics metrics, advertising performance, or selected spreadsheet data. Microsoft integrations can provide authorized Planner or calendar information and send service emails from the configured mailbox. QuickBooks integrations can provide company, customer, invoice, payment, and transaction information for financial features.
Individual Microsoft connections identify the signed-in work account and provide its authorized Planner data. With calendar permission, the dashboard loads basic meeting details from that user's default Outlook calendar for the next fourteen days. Calendar events are fetched live rather than retained as reporting metrics. The individual connection does not request access to read mailbox emails; service email sending uses the separate configured platform mailbox.
We use provider information only for the selected features and within the permissions granted. Providers independently process login, consent, and API activity under their own policies. Disconnecting a service may stop features that rely on it. A client's website analytics or advertising practices remain that client's responsibility; this platform policy is not a substitute for its own visitor notice.
6. When information is disclosed
- Authorized users and clients: staff and client users receive access according to their roles, assignments, and the platform's access controls.
- Report recipients and viewers: authorized users can share dashboards by link, QR code, email, or PDF. Anyone with an unrestricted dashboard link may be able to view the report. Password and expiration settings can restrict access when enabled. Recipients can retain or forward downloaded reports and emails.
- Service providers: hosting, infrastructure, email delivery, and support providers process information needed to deliver their services.
- Connected platforms: we send requests, identifiers, and authorization information needed to use the integration you enable. We do not send your Zeem password to those providers.
- Legal or organizational needs: information may be disclosed when required by law, to protect rights or security, or as part of a business reorganization or transfer subject to applicable privacy obligations.
7. Cookies and browser storage
The platform uses essential cookies for authentication and, where configured, unlocking password-protected shared reports. Browser storage can remember interface preferences such as navigation settings. The current platform does not include optional advertising pixels or cross-site advertising trackers.
You can manage cookies and browser storage in your browser. Clearing or blocking essential cookies may sign you out or prevent protected report access. The platform does not change essential storage behavior in response to a browser's Do Not Track signal. We do not use the platform to track personal browsing activity across unrelated websites for advertising. Connected provider websites have their own cookie and tracking practices.
Open Cookie Settings to review storage and reset navigation and Planner preferences. See Do Not Sell or Share My Personal Information for privacy choices and request instructions.
8. Retention and security
We retain information for as long as needed to provide the requested service, maintain authorized reporting and business records, resolve disputes, and meet legal obligations. Relevant factors include whether an account or integration is active, the client's instructions, the type of information, and a valid deletion request. We do not apply a single retention period to every category.
Reporting history for active clients defaults to five years; an authorized super admin may change the platform retention policy. Paused clients follow the same rolling reporting-history limit. Disconnecting a reporting integration clears its stored authorization and stops syncing without deleting its retained reporting history. Removing a client archives the client and their records for the configured archive period (twelve months by default), disables integration access and scheduled report delivery, and revokes existing shared report links. Authorized administrators may restore the client during this period. After the configured archive period expires, the client and associated records are permanently deleted from the active platform database. A minimal identifier digest may be retained to prevent a connected service from automatically recreating a removed client.
Verified deletion requests are handled separately without requiring you to wait for the archive deadline, subject to applicable legal requirements. Separate exports, delivered emails, other authorized connections, audit records, or backups may require additional handling. Information retained for a permitted reason is restricted to that purpose. Backup copies may remain until removed through the backup lifecycle and are not used for ordinary reporting.
We use safeguards including role-based access, hashed platform passwords, and encrypted stored provider credentials and tokens. Access is limited to people who need it for their role. No storage or transmission system can be guaranteed completely secure. Report owners should use appropriate sharing restrictions and avoid sending sensitive reports to unintended recipients.
9. Your choices and data deletion
You may request access to, correction of, or deletion of information, including information received through Facebook or Instagram. You do not need a Zeem platform login to submit a request.
- Complete the data deletion request form and verify the code sent to your email. Your verified request is sent to support@zeemdev.com. You can also email support for assistance, access or correction requests.
- Tell us whether you want access, correction, deletion, or removal of integration access. Include your contact email, the relevant client or business name, and the connected Facebook Page, Instagram username, or other account identifier if applicable.
- We will verify the request using information reasonably needed to confirm your identity and authority over the affected account or data. Do not send passwords, client secrets, access tokens, or unnecessary identity documents.
- We will review the request, carry out the applicable action, and respond by email within the time required by applicable law. If some information must be retained, we will explain the applicable reason.
Authorized administrators can disconnect reporting connections from Settings > Integrations. Disconnection clears stored credentials and stops syncing while retaining reporting history under the client retention policy. To delete imported records, submit a verified deletion request. To stop future provider access, revoke the integration in the provider's account settings as well. Removing Zeem's access or asking us to delete imported data does not delete the original content or your account at Facebook, Instagram, or another provider. Contact that provider to delete information it independently holds.
If your information belongs to a client's records, we may coordinate with that client to verify and complete the request. We cannot recall copies independently retained by report recipients, but will address copies under our control and applicable service-provider obligations. To stop report emails, contact the report owner or email support with the report name and recipient address; this does not automatically delete the underlying client records.
Open the dedicated Data Deletion page for these instructions without a platform login.
10. California privacy rights
Depending on applicable law and the circumstances, California residents may have rights to know about and access personal information, request deletion, correct inaccurate information, opt out of sale or sharing for cross-context behavioral advertising, limit certain uses of sensitive personal information, and receive equal service when exercising privacy rights. These rights are subject to applicable eligibility requirements and exceptions; being located in California does not by itself make every provision of the California Consumer Privacy Act apply to every business.
To exercise a privacy right, use the contact and verification process in Section 9. An authorized agent may submit a request, and we may require evidence of authorization and identity as permitted by law. We will not discriminate against you for exercising rights available under applicable law.
The categories, sources, purposes, and recipients of platform information are described in Sections 2–6. Zeem does not sell personal information or share it for cross-context behavioral advertising. We use platform information to provide our services as described in this policy. Because we do not engage in these activities, there is no sale or advertising-sharing activity to opt out of in the platform. Global Privacy Control does not affect essential authentication or service functions. You can still send privacy and opt-out requests to support@zeemdev.com; we will honor applicable rights and preference signals where legally required.
11. Children and international users
The platform is intended for business users and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided such information, contact us so we can investigate and take appropriate action.
Zeem is based in the United States. Information may be processed in the United States and other locations used by our service providers or connected platforms. Privacy laws in those locations may differ from those where you live. Where applicable, we use the safeguards required for international processing.
12. Policy changes and contact
We will update this page and its last-updated date when our practices change. For material changes, we will provide additional notice when required by law, such as a platform notice or email to affected account contacts.
For questions about this policy or a privacy request, contact Zeem Development LLC, California, United States, at support@zeemdev.com.