Security

Zone7 Technologies Inc (“Zone7”) and related companies InPlay Ltd and Zone7 Inc respect your right to privacy. Your ability to make informed choices about the uses of your information is important to us. This privacy policy details how we collect, use and store information and data that we receive. If you have any comments or questions about our privacy policies, please contact us at info@cezsiw.dreamhosters.com.

Information We Collect

Zone7 provides technology for inclusion within certain third party applications, devices and/or services provided by partners with whom we have entered into agreements. We collect information provided by such partners and/or their applications, devices and/or services. Such information can include an end user’s names, email, address, date of birth and other contact information. We also collect such information regarding an end user’s movement, heart rate, activities and exercise, whether as tracked by a third party device or as inputted and/or voluntarily provided by an end user. In addition, through our website, we collect usage data. Such date includes information with regards to your location, browser and actions performed on the website. All such information is called Personal Information. You are not required by law to provide us with any such information, but by using third party applications, devices and/or services you agree to provide us with such information.

How We Use Information

We will not share your Personal Information with third parties without your explicit permission, except when required by law, regulation, subpoena or court order or as otherwise expressly set forth herein. We may use Personal Information and other information internally – for example, to improve our products, algorithms, intellectual property and systems.

Correcting or Updating your Information

Zone7 allows you to view the information you provided and to alter any data, inaccuracies or errors. To request such access, or correct, update, or amend your Personal Information please contact us at the following e-mail address or postal address.

E-mail address: info@cezsiw.dreamhosters.com

Postal Address: 550 California Ave, Suite 1, Palo Alto, California, 94303

If you wish to request that we no longer use your information, please contact us at the e-mail address or the postal address listed above. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Comments and Questions

If you have any comments or questions about our privacy policy, please contact us at info@cezsiw.dreamhosters.com

Security

Compliance

Zone7 is becoming SOC 2 certified to meet AICPA’s Trust Service Principles. Zone7 adheres to
relevant privacy practices which can be viewed here: https://zone7.ai/privacy-policy/

Operational Security

Zone7’s infrastructure is protected by numerous layers of defense, known in the information security industry as a “defense-in-depth” strategy. Our security architecture includes:

● Distributed Denial-of-Service (DDoS) mitigation
● Encryption of data in transit and at rest
● Intrusion Detection and Prevention Systems
● Penetration Testing
● Vulnerability Management

We pay special attention to the OWASP Top 10 and have tailored our development processes
to identify and mitigate these issues. Zone7 also uses state-of-the-art technology combined with a full suite of information security policies to ensure our corporate environment is protected.

Security team

Every employee at Zone7, from office operations to our CEO, is dedicated to security and
protecting our customer data in all that we do.

Zone7 has a formal information security program in place. This program is overseen by trained and certified security practitioners. As part of this program Zone7 has adopted a number of
policies and procedures:

● Code of Conduct
● Information Security Policy (Acceptable Use Policy)
● Information Security Roles and Responsibilities
● Asset Management Policy
● Access Control Policy
● Data Management Policy
● Operations Security Policy
● Human Resource Security Policy
● Physical Security Policy
● Risk Management Policy
● Third-Party Management Policy
● Cryptography Policy
● Business Continuity and Disaster Recovery Plan
● Incident Response Plan
● Secure Development Policy

We also have an Information Security governance structure in place with Senior Management support which meets periodically to review security-related initiatives at the product, infrastructure, and company level. All of our C-level executives are actively involved in maintaining and reviewing the information security program.

Backups and redundancy

Zone7’s infrastructure is engineered for redundancy and round-the-clock availability. We also conduct daily, encrypted backups of all data stored in the Zone7 app.

Our databases are also replicated in real-time to geographically disparate data centers for Disaster Recovery purposes.

Security training

At Zone7, we view security not just as a core component of our technology, but also as a cornerstone of our company culture. All Zone7 employees receive security training both as a new hire and annually thereafter. Communication channels for any security issues or questions are always open for our employees and customers.