Privacy Policy
This Privacy Policy describes the privacy practices of Greenbax Inc. d/b/a ZipHQ
("ZipHQ", “Zip”, “Evergreen,” "we", “us” or "our") and how we handle personal
information that we collect through our digital properties that link to this Privacy Policy,
including our website (collectively, the “Service”), as well as through social
media, our marketing activities, and other activities described in this Privacy Policy.
Zip provides a pioneering platform that offers one place for employees to initiate a
purchase or vendor request. This Privacy Policy does not apply to information that we
process on behalf of our enterprise customers while providing the Zip platform to them.
Our use of such information is governed by our agreements with those enterprise
customers. If you have concerns regarding personal information that we process on
behalf of an enterprise customer, please direct your concerns to that enterprise
Our websites, products and services are primarily designed for enterprise organization
and their representatives. We do not offer products or services for use by individuals for
their personal, family or household purposes. Accordingly, we treat all personal
information we collect as pertaining to individuals in their capacities as enterprise
organization representatives and not their individual capacities
Zip may provide additional or supplemental privacy policies for specific products or
services that we offer at the time we collect personal information.
Personal information we collect
How we use your personal information
How we share your personal information
Your choices
Other sites and services
International data transfer
Changes to this Privacy Policy
How to contact us
Personal information we collect
Information you provide to us. Personal information you may provide to us through the
Service or otherwise includes:
Contact data, such as your first and last name, salutation, email address, billing and
mailing addresses, professional title and company name, and phone number.
Demographic Information, such as your city, state, country of residence, and postal
Profile data, such as the username and password that you may set to establish
an online account with us and any other information that you add to your account
Communications data, that we exchange with you, including when you contact
us with questions or feedback, through the Service, social media, or otherwise.
Transactional data, such as information relating to or needed to complete your
orders on or through the Service, including order numbers and transaction
Marketing data, such as your preferences for receiving our marketing
communications and details about your engagement with them.
User-generated content, such as comments, questions, messages, works of
authorship, and other content or information that you generate, transmit, or
otherwise make available on the Service, as well as associated metadata.
Metadata includes information on how, when, where and by whom a piece of
content was collected and how that content has been formatted or edited.
Financial information, such as your financial account numbers or payment card
Payment information needed to complete transactions, including payment card
information or bank account number.
Other data not specifically listed here, which we will use as described in this
Privacy Policy or as otherwise disclosed at the time of collection.
Third-party sources. We may combine personal information we receive from you with
personal information we obtain from other sources, such as:
Public and private sources, such as government agencies, public records,
social media platforms, and other publicly or privately available sources.
Data providers, such as information services and data licensors.
Our affiliate partners, such as our affiliate network provider and publishers,
influencers, and promoters who participate in our paid affiliate programs.
Marketing partners, such as joint marketing partners and event co-sponsors.
Automatic data collection. We, our service providers, and our business partners may
automatically log information about you, your computer or mobile device, and your
interaction over time with the Service, our communications and other online services,
such as:
Device data, such as your computer’s or mobile device’s operating system type
and version, manufacturer and model, browser type, screen resolution, RAM and
disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique
identifiers (including identifiers used for advertising purposes), language settings,
mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and
general location information such as city, state or geographic area.
Online activity data, such as pages or screens you viewed, how long you spent
on a page or screen, the website you visited before browsing to the Service,
navigation paths between pages or screens, information about your activity on a
page or screen, access times and duration of access, and whether you have
opened our marketing emails or clicked links within them.
Cookies and similar technologies. Like many online services, we may use the
following technologies:
Cookies, which are text files that websites store on a visitor‘s device to uniquely
identify the visitor’s browser or to store information or settings in the browser for
the purpose of helping you navigate between pages efficiently, remembering
your preferences, enabling functionality, helping us understand user activity and
patterns, and facilitating analytics and online advertising.
Local storage technologies, like HTML5 and Flash, that provide cookie-
equivalent functionality but can store larger amounts of data, including on your
device outside of your browser in connection with specific applications.
Web beacons, also known as pixel tags or clear GIFs, which are used to
demonstrate that a webpage or email address was accessed or opened, or that
certain content was viewed or clicked.
Session Replay Technologies, we may use third party services provided by
FullStory that employ software code to record users’ interactions with the
Services in a manner that allows us to watch DVR-like replays of those user
sessions. The replays include users’ clicks, mobile app touches, mouse
movements, scrolls [and keystrokes/key touches] during those sessions. These
replays help us diagnose usability problems and identify areas for improvement.
You can learn more about FullStory at
policy and you can opt-out of session recording by FullStory at
Data about others. Users of the Service may have the opportunity to refer other
contacts to us and share their contact information with us. Please do not refer someone
to us or share their contact information with us unless you have their permission to do
How we use your personal information
We may use your personal information for the following purposes or as otherwise
described at the time of collection:
Service delivery. We may use your personal information to:
provide, operate and improve the Service and our business;
establish and maintain your user profile on the Service;
enable security features of the Service, such as by sending you security codes
via email or SMS, and remembering devices from which you have previously
logged in;
communicate with you about the Service, including by sending announcements,
updates, security alerts, and support and administrative messages;
understand your needs and interests, and personalize your experience with the
Service and our communications; and
provide support for the Service, and respond to your requests, questions and
Research and development. We may use your personal information for research and
development purposes, including to analyze and improve the Service and our business.
Marketing and advertising. We, our service providers and our third-party advertising
partners may collect and use your personal information for marketing and advertising
Direct marketing. We may send you Zip-related or other direct marketing
communications as permitted by law. You may opt-out of our marketing
communications as described in the Opt-out of marketing section below.
Compliance and protection. We may use your personal information to:
comply with applicable laws, lawful requests, and legal process, such as to
respond to subpoenas or requests from government authorities;
protect our, your or others’ rights, privacy, safety or property (including by
making and defending legal claims);
audit our internal processes for compliance with legal and contractual
requirements and internal policies;
enforce the terms and conditions that govern the Service; and
prevent, identify, investigate and deter fraudulent, harmful, unauthorized,
unethical or illegal activity, including cyberattacks and identity theft.
With your consent. In some cases, we may specifically ask for your consent to collect,
use or share your personal information, such as when required by law.
To create anonymous, aggregated or de-identified data. We may create
anonymous, aggregated or de-identified data from your personal information and other
individuals whose personal information we collect. We make personal information into
anonymous, aggregated or de-identified data by removing information that makes the
data identifiable to you. We may use this anonymous, aggregated or de-identified data
and share it with third parties for our lawful business purposes, including to analyze and
improve the Service and promote our business.
How we share your personal information
We may share your personal information with the following parties and as otherwise
described in this Privacy Policy or at the time of collection.
Affiliates. Our corporate parent, subsidiaries, and affiliates, for purposes consistent
with this Privacy Policy.
Service providers. Third parties that provide services on our behalf or help us operate
the Service or our business (such as hosting, information technology, customer support,
email delivery, marketing, and website analytics).
Payment processors. Any payment card information you use to make a purchase on
the Service is collected and processed directly by our payment processors, such as
PayPal. PayPal may use your payment data in accordance with its privacy policy,
Third parties designated by you. We may share your personal data with third parties
where you have instructed us or provided your consent to do so.
Business and marketing partners. Third parties with whom we collaborate on joint
activities (such as co-sponsors of contests and promotions), with whom we have
entered into joint marketing relationships or other joint ventures, or who we think may
offer you products or services that you may enjoy.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers and
insurers, where necessary in the course of the professional services that they render to
Authorities and others. Law enforcement, government authorities, and private parties,
as we believe in good faith to be necessary or appropriate for the compliance and
protection purposes described above.
Business transferees. Acquirers and other relevant participants in business
transactions (or negotiations and diligence for such transactions) involving a corporate
divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition
of all or any portion of the business or assets of, or equity interests in, Zip or our
affiliates (including, in connection with a bankruptcy or similar proceedings).
Other users and the public. Your profile and other user-generated content (except for
messages) may be visible to other users of the Service and the public. For example,
other users of the Service or the public may have access to your information if you
chose to make your profile or other personal information available to them through the
Service, such as when you provide comments, reviews, survey responses, or share
other content. This information can be seen, collected and used by others, including
being cached, copied, screen captured or stored elsewhere by others (e.g., search
engines), and we are not responsible for any such use of information.
Your choices
You have the following choices with respect to your personal information.
Access or update your information. If you have registered for an account with us
through the Service, you may review and update certain account information by logging
into the account.
Cookies. Most browsers let you remove or reject cookies. To do this, follow the
instructions in your browser settings. Many browsers accept cookies by default until
you change your settings. Please note that if you set your browser to disable cookies,
the Service may not work properly. For more information about cookies, including how
to see what cookies have been set on your browser and how to manage and delete
them, visit
Advertising choices. You may be able to limit use of your information for interest-
based advertising by:
Browser settings. Blocking third-party cookies in your browser settings.
Privacy browsers/plug-ins. By using privacy browsers or ad-blocking browser
plug-ins that let you block tracking technologies.
Platform settings. Google and Facebook offer opt-out features that let you opt-
out of use of your information for interest-based advertising:
o Google:
o Facebook:
Ad industry tools. Opting out of interest-based ads from companies
participating in the following industry opt-out programs:
o Network Advertising Initiative:
o Digital Advertising Alliance:
o AppChoices mobile app, available at, which will allow you to opt-
out of interest-based ads in mobile apps served by participating members
of the Digital Advertising Alliance.
Mobile settings. Using your mobile device settings to limit use of the advertising
ID associated with your mobile device for interest-based advertising purposes.
You will need to apply these opt-out settings on each device from which you wish to opt-
Do Not Track. Some Internet browsers may be configured to send “Do Not Track”
signals to the online services that you visit. We currently do not respond to “Do Not
Track” or similar signals. To find out more about “Do Not Track,” please visit
Declining to provide information. We need to collect personal information to provide
certain services. If you do not provide the information we identify as required or
mandatory, we may not be able to provide those services.
Other sites and services
The Service may contain links to websites and other online services operated by third
parties. In addition, our content may be integrated into web pages or other online
services that are not associated with us. These links and integrations are not an
endorsement of, or representation that we are affiliated with, any third party. We do not
control websites or online services operated by third parties, and we are not responsible
for their actions. We encourage you to read the privacy policies of the other websites
and mobile applications and online services you use.
We employ a number of technical, organizational and physical safeguards designed to
protect the personal information we collect. However, security risk is inherent in all
internet and information technologies and we cannot guarantee the security of your
personal information.
International data transfer
We are headquartered in the United States and may use service providers that operate
in other countries. Your personal information may be transferred to the United States or
other locations where privacy laws may not be as protective as those in your state,
province, or country.
The Service is not intended for use by children under 13 years of age. If we learn that
we have collected personal information through the Service from a child under 13
without the consent of the child’s parent or guardian as required by law, we will delete it.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material
changes to this Privacy Policy, we will notify you by updating the date of this Privacy
Policy and posting it on the Service. If required by law we will also provide notification of
changes in another way that we believe is reasonably likely to reach you, such as via
email or another manner through the Service. Any modifications to this Privacy Policy
will be effective upon our posting the modified version (or as otherwise indicated at the
time of posting). In all cases, your use of the Service after the effective date of any
modified Privacy Policy indicates your acceptance of the modified Privacy Policy.
How to contact us
Email: [email protected]
Mail: 299 Fremont St, Ste 1206, San Francisco CA 94105