Scope of This Policy This Privacy Policy applies to: • Visitors to our website at https://www.zenvoice.ai (the “Website”); and • Personal information processed by Zenvoice in the course of providing services to our customers (the “Services”). Zenvoice provides its Services exclusively to businesses and organizations. We do not offer consumer-facing services.

Zenvoice’s Role as a Data Processor Zenvoice operates as a data processor (or “service provider”), not as a data controller, with respect to customer data processed through the Services. • All invoice, billing, timekeeper, matter, and related data processed by Zenvoice is provided by our customers or their authorized representatives (e.g., outside counsel). • Our customers determine the purposes and means of processing such data. • Customers are responsible for providing appropriate privacy notices and obtaining any required consents from data subjects. Zenvoice processes customer data solely in accordance with customer instructions and applicable agreements.

Information We Collect A. Information Collected Through the Website We may collect limited information from visitors to our Website, including: • Contact information (such as name, company name, email address) when you voluntarily submit inquiries or request information; • Basic technical information, such as IP address, browser type, and device information, collected automatically through standard web technologies (e.g., cookies, server logs). B. Customer Data Processed Through the Services In providing the Services, Zenvoice may process personal information contained within customer-provided datasets, such as: • Names and professional contact details of legal professionals; • Invoice and billing records; • Matter-related metadata. Zenvoice does not determine the content of this data and does not use it for independent purposes.

How We Use Information We use information only for the following purposes: • To operate, maintain, and provide the Website and Services; • To respond to inquiries and communicate with customers and prospective customers; • To secure, monitor, and improve our systems; • To comply with legal obligations and enforce our agreements. Zenvoice does not use customer data for advertising, marketing, or profiling purposes.

Data Sharing and Disclosure We do not sell personal information. We may share information only in the following circumstances: • Service Providers / Subprocessors: With trusted vendors who assist us in operating our business and Services (e.g., cloud hosting, secure file transfer, monitoring), under contractual obligations to protect the data and use it solely for service delivery. • Legal Requirements: Where required to comply with applicable law, regulation, or legal process. • Business Transactions: In connection with a merger, acquisition, or similar transaction, subject to appropriate confidentiality protections. A list of subprocessors may be provided upon request.

Data Security Zenvoice implements administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption, monitoring, and least-privilege practices appropriate to the nature of the data processed.

Data Retention Zenvoice retains personal information only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law or contractual obligations. Customer data is retained and deleted in accordance with customer instructions and applicable agreements.

International Data Transfers Zenvoice may process information in the United States or other locations where its service providers operate. Where required, Zenvoice implements appropriate safeguards for international data transfers.

Your Privacy Rights To the extent applicable under law (such as GDPR or CCPA/CPRA): • Requests relating to customer data should be directed to the relevant customer (the data controller). • Requests relating to information collected directly by Zenvoice (e.g., Website inquiries) may be submitted using the contact details below.

Cookies and Tracking Technologies The Zenvoice Website uses limited cookies and similar technologies for basic functionality, security, and analytics. You may control cookies through your browser settings.

Children’s Information Zenvoice does not knowingly collect personal information from children under the age of 13, and our Services are not directed to children.

Changes to This Privacy Policy We may update this Privacy Policy from time to time. The “Last Updated” date above indicates when changes were most recently made. Material changes will be posted on the Website.

Contact Us If you have questions about this Privacy Policy or Zenvoice’s data practices, please contact: