ZAU

1. Introduction

ZAU Data ("ZAU", "we", "our", "us") provides a data analytics platform that allows users ("you", "your") to connect multiple data sources and generate dashboards with aggregated and combined metrics.

This Privacy Policy explains how we collect, use, store, and protect your personal and business data when you use our website and platform.

ZAU Data is owned and operated by Alandra Studio, Unipessoal Lda., which is the legal entity responsible for processing your data as described in this policy.

This Privacy Policy should be read together with our Terms of Service, Data Processing Agreement (DPA), and Compliance Statement, which provide additional details about our data protection obligations and practices.

2. Data We Collect

We collect the following types of information:

Account Information: Name, email, company name, and password.
Connected Data Source Information: Authentication tokens, account IDs, and metadata from linked APIs (e.g., Shopify, Google Ads, Meta (Facebook) Ads).
Source Records (Processed on Your Behalf): When you connect a data source, we retrieve and store records from that platform — including order, product, and customer records (such as customer identifiers, location, and marketing-consent status). Where these records contain personal data of your own customers, you act as the data controller and ZAU acts as your processor, as set out in our Data Processing Agreement (DPA).
Usage Data: Logs, analytics, and diagnostic data about your activity in the platform.
Cookies and Tracking Data: To improve site performance and measure usage.

We retrieve and store source data only to the extent necessary to model and generate the aggregated metrics and dashboards you request. We do not sell this data or use it for advertising.

3. How We Use Your Data

We process your data to:

Authenticate users and maintain secure access.
Retrieve and model data from connected platforms.
Provide aggregated and combined metrics.
Improve the ZAU platform and user experience.
Communicate updates, technical notices, or service information.

We do not sell or share your data with third parties for marketing purposes.

4. Data Storage and Security

All data connections use OAuth 2.0 for secure access.
Tokens are encrypted at rest and in transit.
ZAU infrastructure is hosted on Google Cloud Platform, currently in the European Union, with continuous monitoring. Hosting regions may change over time or at a customer's request; any cross-border processing is covered in Section 8 (International Data Transfers).
Access to user data is restricted to authorized personnel only.

5. Data Retention

We retain your data for as long as your account remains active or as required by law.

Specific retention timelines and deletion procedures are described in our Data Processing Agreement (DPA).

6. Your Rights (GDPR / CCPA)

Depending on your location, you have the right to:

Access and request a copy of your data.
Request correction or deletion of personal data.
Withdraw consent for data processing.
File a complaint with your local data protection authority.

To exercise these rights, contact us at legal@zaudata.com.

7. Third-Party APIs

When connecting your data sources, ZAU uses official APIs under each platform’s policies:

Google Ads API: Accesses advertising performance data via OAuth 2.0.
Google Privacy Policy
Meta (Facebook) Marketing API: Advertising data retrieved via OAuth 2.0 under Meta’s Platform Terms.
Shopify: Store, order, product, and customer data retrieved under Shopify’s API License and Terms of Use.

We use official APIs under each platform’s policies and access only the scopes necessary to deliver analytics.

8. International Data Transfers

Data may be transferred and processed outside your country of residence but always under data protection safeguards (e.g., EU Standard Contractual Clauses).

9. Updates

We may update this policy periodically. The latest version will always be available on our website.

10. Contact

For privacy or data protection inquiries, contact:

📧 legal@zaudata.com