Trust & security

Zipix is built to support business communications, client activity, billing workflows, and related business records. Protecting that information is an important part of how we design and operate the Services.

This Trust & Security statement describes the security and privacy principles Zipix applies to the Services. It is intended to provide transparent information about our approach without claiming certifications, controls, or guarantees that Zipix has not independently established.

Zipix uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse.

Information transmitted between Zipix applications and supported backend services is protected using secure transport mechanisms where supported by the applicable service and infrastructure. Sensitive information is handled through access-controlled systems and service providers selected to support the operation of Zipix.

No internet, telecommunications, application, or storage system can be guaranteed to be completely secure. Zipix therefore treats security as an ongoing operational responsibility rather than a one-time feature.

Zipix relies on telecommunications and messaging infrastructure to provide business calling and text messaging. Calls, messages, phone-number provisioning, routing, delivery, registration, and related functions may be processed by telecommunications providers, mobile carriers, messaging registries, and other service providers.

Communications may be automatically processed, filtered, or monitored by Zipix or applicable providers when reasonably necessary for routing, delivery, spam and fraud detection, abuse prevention, troubleshooting, security, and telecommunications compliance.

Carrier networks and recipient devices are outside Zipix control. Accordingly, Zipix does not represent that ordinary telephone or SMS communications are end-to-end encrypted across every carrier and endpoint.

Business texting in the United States is subject to carrier, registry, telecommunications-provider, industry, and legal requirements. Zipix supports a separate texting-activation and registration process so that messaging eligibility can be established before business texting is enabled.

Registration may require business identity, authorized representative, business or tax identification, address, website, use-case, consent-method, and related information. Required information may be transmitted to telecommunications providers, carriers, messaging registries, verification providers, industry compliance organizations, and governmental or regulatory authorities where required.

Approval is determined in part by third parties and is not guaranteed. Messaging may be restricted or suspended when required by a carrier, provider, registry, compliance requirement, or applicable law.

Zipix is designed to support centralized records of messaging consent and suppression, including consent status, method, source, timestamp, opt-out status, and re-consent events where applicable.

Zipix users remain responsible for obtaining legally sufficient consent for their communications. Zipix may process recognized opt-out requests and maintain suppression information so messaging paths can consistently honor recipient choices.

Mobile phone numbers, text messaging originator opt-in data, and messaging consent information are not sold, rented, transferred, or shared with third parties or affiliates for their own marketing or promotional purposes.

Business messaging can involve third-party registration, verification, carrier, registry, and ongoing compliance costs. When Zipix charges a one-time texting registration or activation fee or a recurring messaging-compliance fee, applicable Zipix charges are presented to the user before authorization or submission where reasonably practicable.

Certain third-party charges may change as carrier, registry, telecommunications, or compliance requirements evolve. Payment of a registration or review fee does not guarantee approval, and fees already incurred in connection with a submitted registration may be non-refundable as described in the Zipix Terms of Service.

Zipix aims to explain what these charges support rather than hiding messaging-compliance costs inside unrelated product pricing.

Zipix uses account authentication and verification controls appropriate to the features being provided. Users are responsible for protecting their credentials, securing devices used to access Zipix, and promptly reporting suspected unauthorized access.
‍
Access to internal systems and production information should be limited to authorized persons with a legitimate operational need. Zipix may use third-party authentication, infrastructure, monitoring, and security services as part of its security architecture.

As the platform evolves, Zipix may add or strengthen authentication, access-control, session-management, administrative, and audit capabilities.

Zipix may use specialized third-party payment processors to process subscription charges and other payment-related transactions. Payment-card credentials may be collected and processed directly by those providers rather than stored by Zipix.

Zipix receives only the payment and transaction information reasonably necessary to administer accounts, verify transactions, maintain billing records, and provide payment-related functionality.

Third-party payment providers maintain their own security programs, certifications, privacy policies, and terms.

Zipix seeks to collect and retain information reasonably necessary to provide, secure, support, bill for, and improve the Services and to satisfy applicable legal, tax, accounting, telecommunications, carrier, fraud-prevention, dispute-resolution, and compliance requirements.

Retention periods may vary by data type and purpose. Certain records, including billing records, messaging-registration records, consent and suppression records, security information, and audit records, may need to be retained after other account information is removed.

Additional information about retention and privacy rights is provided in the Zipix Privacy Policy.

Security is shared. Zipix users should keep devices and applications updated, use device-lock and authentication features, protect account credentials, verify recipients before sending sensitive information, restrict access to authorized personnel, and promptly remove access for persons who no longer require it.

Users are also responsible for complying with professional, contractual, regulatory, privacy, recording, and communications obligations applicable to their own businesses.

For security-related questions, contact: support@zipix.app

For legal and privacy questions, contact: legal@zipix.app

Please do not include passwords, payment-card credentials, or other unnecessary sensitive information in an initial security report.