Policy

Privacy Policy

Last updated: October 15, 2026

SAVI (“SAVI,” the “Platform”) is a software product operated by ZRSpro LLC (“ZRSpro,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect personal information in connection with savicrm.com, app.savicrm.com, SAVIcrm, SAVIcam, SAVIdata, our AI features, and related services and communications (collectively, the “Services”). It should be read with our Terms & Conditions and our Privacy & Security page, which includes our Data Processing Addendum.

1. Who this policy covers

• Subscribers — businesses and professionals who license SAVI to run their operations, and their Authorized Users.
• Prospects and visitors — people who visit our websites, request information, book demos, attend events, or communicate with us.
• End Clients — the customers, homeowners, leads, and contacts whose information a Subscriber stores and manages inside SAVI. For End Client information, Section 2 explains our limited role.

2. Our role: controller vs. processor

When we are the controller

For information about Subscribers, prospects, and visitors — such as account, billing, usage, and marketing information — we decide how and why it is used. We are the controller (or “business”) for that information, and this policy applies directly.

When we are the processor

For End Client information that a Subscriber loads into, collects through, or manages within SAVI (such as a contractor’s homeowner contacts, leads, job records, photos, call recordings, and messages), the Subscriber decides how it is used. The Subscriber is the controller, and we act as a processor (or “service provider”) that handles it only on the Subscriber’s instructions to provide the Services, under our Data Processing Addendum. The Subscriber’s own privacy notice governs that information, and the Subscriber is responsible for having authority and any required consents to submit it.

3. Information we collect

3.1 Information you provide

• Account and identity: name, business name, job title, email, phone number, business address, login credentials, and profile details.
• Billing: plan, billing address, and payment details (payment card data is collected and stored by our payment processors, not by SAVI).
• Registration and compliance: business details needed for messaging registrations (such as A2P/10DLC brand and campaign information, EIN, and business contact information), and licensing or verification information you provide.
• Communications with us: support requests, emails, chats, calls (which may be recorded with notice), survey responses, coaching and onboarding notes, and feedback.
• Events and marketing: information you provide when you register for a demo, webinar, event, or our client network.

3.2 Information collected automatically

• Device and usage data: IP address, browser and device type, operating system, pages and features used, clicks, referring URLs, timestamps, and log data.
• Approximate location derived from IP address.
• Cookies and similar technologies (see Section 12).

3.3 Information from third parties

• Payment processors, identity-verification, and fraud-prevention providers.
• Carriers and messaging-registration providers regarding your registration status.
• Business-data, enrichment, and marketing partners, and publicly available sources (for example, business listings and licensing databases).
• Integrations you connect, such as calendars, email, accounting, and advertising accounts, according to your settings.
• Referral partners and Network members who refer you to us.

3.4 Information processed for Subscribers (End Client data)

Contact and relationship data that Subscribers enter, import, or collect through the Services, such as names, addresses, phone numbers, emails, property and job details, notes, appointments, quotes, invoices, payment records, message and call history, call recordings and transcripts, AI conversation logs, and SAVIcam photos, video, and documents (which may contain location and time metadata). We process this information as a processor, as described in Section 2.

4. How we use information

• To provide, operate, maintain, and secure the Services, including messaging, calling, AI, and data features.
• To create and manage accounts, process payments, and administer subscriptions.
• To complete messaging registrations and comply with carrier requirements.
• To provide customer support, admin support, onboarding, data migration, coaching, and training you request.
• To communicate with you about your account, security, updates, and policy changes.
• To send marketing about our products, services, and events (you can opt out at any time).
• To operate our client network and make introductions you have opted into.
• To analyze, measure, and improve the Services and develop new features, including using aggregated or de-identified data.
• To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms and Acceptable Use Policy.
• To comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

We do not sell personal information, and we do not use End Client information for our own marketing.

5. Artificial intelligence

Some features use artificial intelligence to assist with tasks such as answering inquiries, running AI voice and chat agents, drafting messages, summarizing conversations, transcribing calls, and automating follow-up. When you use these features, the content involved (such as messages, call audio, and transcripts) is processed by AI systems to deliver the feature.

• We do not use Customer Data or End Client information to train generalized, publicly available AI models.
• Third-party AI providers we use are contractually limited to processing information to provide the requested feature, and not for their own purposes.
• AI output may be inaccurate or incomplete, and Subscribers are responsible for reviewing it and for disclosing AI use to their End Clients where required by law.

6. Legal bases for processing

Where laws such as the EU or UK GDPR or Brazil’s LGPD apply, we rely on: contract (to provide the Services you request); legitimate interests (to operate, secure, market, and improve our business, balanced against your rights); consent (for example, for certain marketing and cookies, which you may withdraw at any time); and legal obligation (to comply with law).

7. How information is shared

• Service providers and subprocessors that help us operate the Services, such as hosting and infrastructure, communications carriers and messaging providers, payment processors, AI providers, data providers, analytics, and support tools. They may use information only to provide services to us.
• Infrastructure and platform providers: SAVI is built on and delivered using third-party platform and infrastructure technology. Information processed through the Services may be hosted and handled by those providers under their own security and data terms.
• Carriers and registration providers as needed to register and deliver your messaging and calls.
• Integrations you choose to connect, and anyone else at your direction.
• Network members, limited to business contact information you have agreed to share when you opt into our client network.
• Professional advisors such as lawyers, accountants, and insurers, under confidentiality.
• Legal and safety: to comply with law, regulation, legal process, or governmental requests; to enforce our agreements; and to protect the rights, property, or safety of ZRSpro, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to this policy.

8. SMS / text messaging

If you provide your mobile number to us, we may send you account, service, security, and (with your consent) marketing text messages. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help. Consent to marketing messages is not a condition of purchase.

Subscribers who send messages through SAVI are solely responsible for obtaining consent and complying with communications laws and carrier requirements for their own messages, as described in our Terms and Acceptable Use Policy.

9. Data retention

We keep personal information only as long as reasonably necessary for the purposes described in this policy, including to provide the Services, meet legal, tax, accounting, and carrier record-keeping requirements, resolve disputes, and enforce our agreements. We may keep information longer where needed for a complaint, investigation, or anticipated litigation. End Client information is retained according to the Subscriber’s configuration and our Terms; after an account is closed, it is deleted or anonymized within a commercially reasonable period (generally within 90 days), subject to backups and legal requirements. We may retain anonymized or aggregated information indefinitely.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, as described on our Privacy & Security page. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials, enabling available security features, and securing your own devices and networks.

11. Links and third-party services

The Services may link to or integrate with websites, apps, and services we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

12. Cookies, analytics, and advertising

We and our partners use cookies, pixels, and similar technologies to keep you signed in, remember preferences, secure the Services, measure usage, and, on our marketing websites, measure and improve advertising. You can manage cookies through your browser settings and, where available, our cookie preferences tool; blocking some cookies may affect functionality. The Services do not currently respond to “Do Not Track” signals. Where required by law, we honor recognized opt-out preference signals (such as Global Privacy Control) for applicable processing.

13. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding personal information we control:

• Access to the personal information we hold about you and information about how we use it.
• Correction of inaccurate information.
• Deletion of your information, subject to legal exceptions.
• Portability of information you provided, in a usable format.
• Objection or restriction of certain processing, including direct marketing.
• Withdrawal of consent where processing is based on consent.
• Opt out of the sale or sharing of personal information, targeted advertising, and certain profiling. We do not sell personal information or share it for cross-context behavioral advertising in exchange for money; to the extent any advertising cookies on our marketing websites are considered a “sale” or “sharing” under state law, you may opt out using our cookie preferences tool or a recognized opt-out preference signal.
• Limit the use of sensitive personal information, where applicable. We do not use sensitive personal information to infer characteristics about you.
• Non-discrimination: we will not discriminate against you for exercising your rights.

How to make a request

Email [email protected] with “Privacy Request” in the subject line. We will verify your identity before acting, which may require confirming information we already hold. You may use an authorized agent, who must provide proof of authorization; we may also ask you to verify your identity directly. We will respond within the time required by law (generally 30 to 45 days, which may be extended where permitted). If we deny your request, you may appeal by replying to our decision with “Appeal” in the subject line, and we will respond to the appeal as required by law. If you are in the EU or UK, you may also complain to your local data-protection authority.

Requests about End Client information

If your information was provided to SAVI by a business you dealt with, please send your request to that business. We will assist it in responding.

14. U.S. state privacy disclosures

In the past 12 months we have collected the following categories of personal information about Subscribers, prospects, and visitors, for the purposes described in Section 4, and disclosed them for business purposes to the categories of recipients described in Section 7:

We do not knowingly sell or share the personal information of consumers under 16.

15. Children’s privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

16. International users and transfers

We are based in the United States, and the Services are operated from the United States. Information may be processed in the United States and in other countries where we or our service providers operate, which may have different data-protection laws. Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses.

Canada: you may request access to and correction of your personal information and withdraw consent, subject to legal and contractual restrictions. Australia: you may request access to and correction of your personal information and may complain to the Office of the Australian Information Commissioner if you are not satisfied with our response.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and notify you of material changes where required by law. Your continued use of the Services after an update means you accept the revised policy.

18. Contact us