Compliance (GDPR / CCPA)

1. Overview

ZAU Data complies with major global data protection regulations, including:

The platform is operated by Alandra Studio, Unipessoal Lda., which serves as the legal entity accountable for these compliance obligations.

• GDPR – General Data Protection Regulation (EU 2016/679)
• CCPA / CPRA – California Consumer Privacy Act and its amendment
• LGPD – Brazilian General Data Protection Law

This page explains your rights and how we support them.

2. Data Controller & Processor Roles

When you create an account, ZAU acts as the Data Controller for your user profile.

When processing data from your connected sources, ZAU acts as a Data Processor on your behalf, following our Data Processing Agreement.

3. Lawful Basis for Processing

ZAU processes data under the following bases:

• Performance of a contract – to provide the analytics service you requested.
• Consent – when connecting third-party APIs.
• Legitimate interests – improving functionality and preventing fraud.

4. Your Rights Under GDPR

As a data subject, you have the right to:

• Access – Request a copy of your personal data.
• Rectification – Correct incomplete or inaccurate information.
• Erasure (“Right to be Forgotten”) – Request deletion of your personal data.
• Restriction of Processing – Limit how your data is used.
• Data Portability – Obtain your data in a structured format.
• Objection – Object to processing based on legitimate interests.

To exercise these rights, contact legal@zaudata.com. We will respond within 30 days as required by law.

5. Your Rights Under CCPA / CPRA

California residents have the right to:

• Know what personal information is collected, used, or shared.
• Request deletion of their data.
• Opt out of data sale (ZAU does not sell personal information).
• Non-discrimination for exercising privacy rights.

Requests may be submitted to legal@zaudata.com.

6. Data Transfers

When data is transferred outside the EEA or UK, ZAU uses approved safeguards such as Standard Contractual Clauses (SCCs) to ensure equivalent protection.

7. Children’s Data

ZAU is not intended for users under 18 years of age, and we do not knowingly collect data from minors.

8. Supervisory Authority Contact (EU)

If you believe your data protection rights have been violated, you may lodge a complaint with your local supervisory authority or contact:

Comissão Nacional de Proteção de Dados (CNPD) – Portugal

9. Updates

We may update this Compliance Statement from time to time. The latest version will always be available on this page.

10. Contact

For privacy and compliance matters:

📧 legal@zaudata.com