Privacy Policy
1. Who we are and what this covers
Fourth Zodiac Inc. (“Fourth Zodiac”, “we”) is a US company headquartered in Greensboro, North Carolina. This Privacy Policy explains how we handle personal information through fourthzodiac.com, the client portal, FZ WMS, the Team Hub, the CRM, our apps and our open API. Contact: info@fourthzodiac.com. Personal information of buyers that we handle for our clients is covered in section 9 and in the Data Processing Terms.
2. What we collect
(a) Account data: name, email, phone, company, job title, role, work location, profile picture, and language and display settings. (b) Sign-in and security data: password (stored only in hashed form by our authentication provider), two-step verification settings, sign-in times, IP address, browser and device information, and a device fingerprint used to detect suspicious sign-ins. (c) Activity records: pages opened and actions taken in the Software, with action IDs and timestamps, and error reports. (d) Communications: requests, messages, emails, Lark messages, feedback including photos, videos and screenshots you upload, and inquiries sent through our website. (e) Business data: products, inventory, inbounds, orders, invoices and payment records. (f) Staff work data: scans, picks, packs and other warehouse actions with times and quantities, schedules and workload. (g) Agreement records: which documents you accepted, which version, when, and from which IP address and browser. We do not ask for sensitive personal information such as government ID numbers, biometric, health or financial account data through the Software; please do not upload it.
3. How we use it
We use personal information to: provide and run our services and the Software; sign you in and keep accounts secure; communicate with you, including service notices and announcements; answer requests, including with AI assistance; prepare invoices and collect payment; manage staff work, including access, workload planning, productivity measurement and piece-based bonus calculation; find and fix problems and improve performance; meet legal duties such as customs, tax and recordkeeping; and enforce our agreements.
4. Legal bases
Where a law requires a legal basis, we rely on: what is necessary to conclude or perform a contract with you or your company; what is necessary for human-resources management under lawful labor rules and contracts; compliance with legal obligations; your consent where consent is required; and, where applicable, our legitimate interest in keeping the Software secure.
5. Who we share it with
We share personal information only as needed: with service providers who work for us under written terms (hosting and database: Supabase and Vercel; AI processing: Anthropic; messaging and email: Lark and Google; servers: Vultr; warehouse software: ShipOut during our transition to FZ WMS); with carriers and logistics partners such as USPS, UPS and FedEx, which need recipient details to deliver packages; with our partner licensed customs broker; with marketplaces and store platforms when a client tells us to; with professional advisers; with authorities when the law requires; and with a successor if our business is merged or sold. We do not sell personal information and do not share it for cross-context behavioral advertising.
6. Where it is stored and international transfers
Our systems are in the United States (our main database is in the US-West region, Oregon). If you use the Software from outside the United States, including from mainland China, your personal information is transferred to and processed in the United States, where data-protection laws may differ from those where you live.
7. How long we keep it
We keep personal information only as long as needed for the purposes above: account data for as long as the login is active and then for as long as needed to close out the relationship, resolve disputes and keep records the law requires; activity and security records for as long as needed for security and troubleshooting. Some records must be kept longer by law, for example US customs import records (generally five years) and tax and accounting records. Records under a legal hold are kept until the hold ends. Then we delete or de-identify the information.
8. Security
We protect personal information with encryption in transit, role- and permission-based access, row-level security in our database, two-step verification, action-ID logging and least-privilege staff access. No system is perfectly secure. If a security incident affects your personal information, we will notify you and authorities as the law requires.
9. Buyer data we handle for clients
When a client sends us orders, we receive personal information of the client’s buyers, such as name, address, phone and sometimes email. We handle it on the client’s instructions as its service provider (processor), under the Data Processing Terms, and only to fulfil, ship, track and handle returns of the client’s orders. Buyers who want to exercise privacy rights should contact the seller they bought from; we help our clients respond, including to marketplace deletion requests.
10. Your rights
Depending on where you live, you may have the right to: know what we hold and get a copy; correct it; delete it; restrict or object to processing; receive it in a portable format; withdraw consent (this does not affect processing before the withdrawal); ask us to explain our processing rules; and not be treated differently for exercising these rights. To make a request, email info@fourthzodiac.com from the email on your login. We will verify your identity and answer within the time the law requires. You may also complain to a data-protection authority.
11. California notice
In the last 12 months we collected these categories of personal information for the purposes in section 3: identifiers (name, email, phone, IP address); professional or employment information; commercial information (orders and invoices); internet or other electronic activity (activity records); and sensitive personal information limited to account login credentials, which we use only to sign you in and keep accounts secure. Retention is described in section 7. We have not sold or shared personal information as those terms are defined in the California Consumer Privacy Act, and we do not disclose personal information to third parties for their direct marketing. California residents, including our California staff, may exercise rights under section 10 directly or through an authorized agent.
12. Cookies and browser storage
We use only the browser storage our sites need to work: your sign-in session, language and display settings, and security signals used to detect suspicious sign-ins. We measure which pages are used and how fast they load, with our own tools. We do not use advertising cookies or third-party ad trackers. Because we do not sell or share personal information, Do Not Track signals do not change what we do; we treat a Global Privacy Control signal as a request to opt out of any sale or sharing.
13. Children
Our services are for businesses and their staff, not for children. We do not knowingly collect personal information of anyone under 16. If you think we have, contact us and we will delete it.
14. Changes
We will post any change here with a new “updated” date. If a change is material, we will ask you to read and accept the new version at your next sign-in.
15. Contact
Fourth Zodiac Inc., Greensboro, North Carolina, USA. Email: info@fourthzodiac.com. Requests may be written in English or Chinese; our Chinese-speaking staff will respond to requests in Chinese.