Zonewell privacy policy
Last updated: October 3, 2026
Zonewell is made by Great Work LLC, 651 N Broad St, Suite 206, Middletown, DE 19709, USA ("we"). This policy covers the Zonewell app for your CRM's app marketplace and the pages at hl.greatwork.company/zonewell.
What we collect
When you install Zonewell on a business account, your CRM gives us access tokens for the permissions you approve. With them we read, for that business account only:
- Contacts: name, street address, city, state, postal code, country, tags, assigned user and contact id.
- Opportunities: name, pipeline, stage, status, value, assigned user and the linked contact id.
- Users: names and ids, to show the "assigned to" filter.
- The business account's own address, as the starting point for distances.
When you open Zonewell, your CRM shares a signed record of who you are (user id, name, email, role and business account id). We use it to confirm you are signed in. We do not store your email.
We do not read or store contact emails, phone numbers, notes, messages, conversations or payment details.
Why we use it
Only to draw your map, find which contacts are inside your service areas, answer the Zonewell workflow actions, and bill address lookups under your plan. We do not sell data, use it for advertising, or train models on it.
Where it goes
- Geocoding. To turn an address into map coordinates we send the address text (no name or other contact details) to our geocoding service, which uses Geocodio (Dotsquare LLC, USA) as its provider. Results are cached so the same address is not looked up twice.
- Map tiles. The map background loads from OpenFreeMap and the map software from unpkg.com. Your browser requests them directly; they see your IP address but no CRM data.
- Your CRM. When you use Tag all, or an action set to save results, we write tags and the four Zonewell contact fields back to your CRM.
We use no other subprocessors. Our server is a DigitalOcean machine in New York, USA.
How it is protected
Access tokens, contact names, addresses, tags, coordinates, service areas and settings are encrypted at rest with AES-256-GCM. All traffic uses HTTPS. Requests from your CRM are checked: webhooks by their digital signature, the map page by your CRM's signed user record, workflow actions by a secret key.
How long we keep it
As long as Zonewell is installed. When you uninstall it, or click Disconnect inside the app, we delete the access tokens and every contact, opportunity, service area and setting for that business account right away. We keep a usage ledger (counts of address lookups per month, with no personal data) for billing records. Server logs that may contain IP addresses are kept for up to 14 days.
Your rights
You can see what Zonewell shows at any time inside the app, export area contact lists as CSV, and delete everything by uninstalling. For access, correction or deletion requests under GDPR, UK GDPR or CCPA, email hello@greatwork.company. If you are a contact of one of our customers, contact that business first; we act on their instructions as a processor.
Changes
We will post changes here and update the date above. Material changes are announced in the app.
Contact
hello@greatwork.company. We reply within one business day.