01
Service Data
Uploaded documents, client information, portfolio data, financial data from integrations, research queries, meeting notes, and custom configurations.
Privacy & Data Protection
Privacy Policy, and your choices.
This Privacy Policy describes how Zom Technologies LLC (“ZOM”) collects, uses, and discloses information, and what choices you have with respect to the information.
01 · Scope
The scope of this policy.
This Privacy Policy governs ZOM's Services, Websites, and the other interactions you have with us. A separate Master Subscription Agreement governs Service Data.
This Privacy Policy applies to ZOM's products and services, including applicable mobile and desktop applications (collectively, the "Services"), ZOM websites (collectively, the "Websites") and other interactions (e.g., customer service inquiries, user conferences, etc.) you may have with ZOM. If you do not agree with the terms, do not access or use the Services, Websites, or any other aspect of ZOM's business.
This Privacy Policy does not apply to any third-party applications or software that integrate with the Services through the ZOM platform ("Third-Party Services"), or any other third-party products, services or businesses. In addition, a separate agreement governs delivery, access, and use of the Services (the "MSA"), including the processing of any data submitted through the Services ("Service Data").
02 · Data collection
Information ZOM collects and receives.
ZOM may collect, generate, and receive Service Data and other information in a variety of ways depending on how you interact with our Services.
02
Account Information
Email address, phone number, password, and billing details for account creation and management.
03
Usage Information
Metadata about how you interact with the Services, including features used and research queries made.
04
Log Data
Server logs including IP address, browser type, settings, and timestamps retained for 365 days.
05
Device Information
Device type, operating system, device settings, unique identifiers, and crash data.
06
Cookie Information
Cookies and similar technologies used to collect information about your browsing activities.
03 · Data usage
How ZOM uses information.
Information is used to operate and improve the Services, in line with the applicable MSA and as required by law.
Service Data Usage
Service Data will be used by ZOM in accordance with the applicable MSA, Customer's use of Services functionality, and as required by applicable law. ZOM is a processor of Service Data and Customer is the controller.
ZOM uses Information in furtherance of our legitimate interests in operating our Services, Websites, and business.
Google Workspace Data Use
Zom AI is a financial advisory intelligence platform for registered investment advisers and wealth-management teams. The app brings client context, documents, communications, calendars, portfolio data, and workflow history into one advisor-controlled workspace so teams can research, prepare, follow up, and supervise advisory work more efficiently.
When a customer connects Google Workspace, Zom requests access only to support the advisory workflows that customer enables. Zom uses that data to retrieve relevant context, generate advisor-reviewed work product, maintain auditability, and help the firm complete client-service tasks inside Zom.
Authorized Google sources
- Gmail: Zom reads advisor-authorized email metadata and message content to help prepare client follow-ups, surface prior conversations, and draft compliant communications for advisor review.
- Google Calendar: Zom uses authorized calendar event details to understand upcoming meetings, prepare agendas, and connect meeting activity to the right household or advisory workflow.
- Google Drive: Zom accesses authorized Drive content to find approved client documents, investment policy statements, meeting notes, and other materials advisors ask Zom to use.
Customer controls and AI use
- Google Workspace connections are optional and controlled by each customer.
- Connected Google user data is used only to provide requested Zom product workflows.
- Connected Google user data is not sold, used for advertising, or used to train AI models.
- Access can be disconnected by the customer, and privacy requests can be sent to privacy@zomtech.com.
Specific Use Cases
- Provide, update, maintain and protect our Services
- Support research, analysis, and advisor work-product features
- Comply with applicable law and legal process
- Communicate with you about Services
- Develop and provide additional features
- Investigate and prevent security issues
Data Retention
Uploaded documents and related customer content are retained to provide the Services unless and until a deletion request is submitted through the Settings page. After a verified request is received, ZOM will delete or anonymize the requested data subject to any legal, regulatory, or contractual retention obligations.
Until requested
Documents retained until a deletion request is submitted in Settings
365
Days application log data retained
3
Years applicant data retained
04 · Your rights
Control over your data.
Depending on where you live, you may have statutory rights to access, correct, or delete your personal data.
Statutory Rights
Individuals located in certain US States such as California, Virginia, and countries including the European Economic Area, Switzerland, and the United Kingdom have certain statutory rights in relation to their personal data.
Subject to any exemptions provided by law, you may have the right to request access to Information (in a portable form or otherwise), as well as to seek to update, delete or correct this Information.
Exercise Your Rights
Requests to delete uploaded documents can be submitted through the Settings page in the ZOM product. Other privacy rights requests, or requests from users who cannot access the Settings page, may be sent via email at:
05 · Data deletion
Deletion and right to erasure.
You can request deletion of your personal data and uploaded documents at any time, subject to verification and lawful retention obligations.
Your Right to Request Deletion
Subject to applicable law, individuals have the right to request the deletion or erasure of their personal data and uploaded documents held by Zom Technologies LLC (“ZOM”), including rights provided under the General Data Protection Regulation (“GDPR”) Article 17 and applicable U.S. state privacy laws such as the California Consumer Privacy Act (“CCPA”).
How to Submit a Request
Requests to delete personal data and uploaded documents should be submitted through the Settings page in the ZOM product. If you cannot access the Settings page, you may contact ZOM’s Data Privacy Officer at:
To protect user privacy and security, ZOM may require verification of identity prior to processing any deletion request.
Deletion Process
Upon receipt and verification of a valid deletion request submitted through Settings or to the Privacy Officer, ZOM will:
- Review the request for applicability and legal or contractual retention obligations
- Identify all systems where the requester’s personal data and uploaded documents are stored, including application databases, account records, and integrated services
- Delete or anonymize personal data that is not subject to lawful retention requirements
- Ensure deletion actions are logged internally for compliance and audit purposes
Where personal data cannot be deleted due to legal, regulatory, or contractual obligations, such data will be restricted from further processing and retained only as required by law.
Response Time (SLA)
ZOM will respond to verified data deletion requests within 30 days, or such shorter period as required by applicable law. If additional time is required due to the complexity of the request, ZOM will notify the requester accordingly.
Confirmation
Once a deletion request has been completed, ZOM will provide written confirmation to the requester.
Questions about this policy?
Talk to our privacy team.
Please feel free to contact ZOM if you have any questions about this Privacy Policy or ZOM's practices, or if you are seeking to exercise any of your statutory rights.