Privacy

Zolt is an operations consultancy for consumer brands. Our client portal at zolt.ai is invite-only: we use it with companies we have a signed engagement with. This page explains what we collect, why, and what you can ask us to do with it.

What we collect

• Account details for the people we invite: name, work email, title, department, and sign-in and security events.
• Business data our clients share or connect: files uploaded to the intake checklist, and data read from connected systems.
• An audit log of actions in the portal, including file downloads.

Our website

zolt.ai counts page views with Vercel Web Analytics, which uses no cookies and doesn’t identify you. If you use the contact form, we keep what you send (your name, email, company and message) to reply to you, and we don’t add you to any mailing list.

Connected systems, including Shopify

When a client connects a Shopify store, Zolt requests read-only access to orders, products, customers, inventory, fulfillment, returns, discounts, shipping and reports. We store order amounts, dates, line items, statuses, an opaque customer identifier, and the shipping region and postcode. We do not store customer names, email addresses or phone numbers. We never write to the store.

We use this data only to analyze the client’s own business for that client: order economics, repeat-purchase cohorts and fulfillment costs.

What we don’t do

• We don’t sell data, share it with other clients, or use it for advertising.
• We don’t use one client’s data to benefit another client.

Where it lives and who sees it

Data is stored with our infrastructure providers in the United States (Vercel for hosting and file storage, Neon for the database, Resend for email). Access tokens for connected systems are encrypted. Within a client, access follows roles the client controls; Zolt staff access requires two-step verification and every action is logged.

Retention and deletion

We keep engagement data for the length of the engagement and as long as needed to support the work that follows. A client can disconnect a system at any time from the portal. Shopify merchants can also ask Shopify to redact customer or store data; we act on those requests automatically.

Your requests

To ask what we hold about you, correct it, or delete it, write to privacy@zolt.ai. We answer within 30 days.