Privacy policy
Who we are
Zapzei is a browser extension that turns a contact spreadsheet into a send list. This policy explains how [LEGAL NAME], registered under CNPJ [CNPJ], with its address at [ADDRESS], the controller of your account data, handles personal data when you use Zapzei, the extension and this website.
Our data protection officer is [DATA PROTECTION OFFICER], reachable at [email protected].
What we collect
- Your account: name, email, mobile number, country, state and city, given at sign-up. Your password is stored only as a one-way hash. If you sign in with Google or Microsoft, we receive the name and email of that account.
- Your spreadsheets and lists: the files you import and the contacts in them (names, phone numbers and the other columns you choose to keep), and the message you write for each list.
- Send records: the status of each contact (pending, sent, skipped) and the date and time of each click on Send.
- Devices: a random identifier for each installation of the extension, used for the limit of two active devices per account.
- Payments: the payment identifier, amount, method, status and date. Card and Pix details are handled by Stripe; we never see your full card number.
- Product usage: events we pick by hand, such as a list being imported or the Send button being clicked, with your account identifier. Never the names, phone numbers or messages of your contacts.
- Technical records: operating logs carry internal identifiers only, never phone numbers, names, message text, file contents, passwords or payment data.
What we never do
- We never read, store or sync your WhatsApp messages or conversations.
- Zapzei never sends anything on its own. Each message is sent by you: your click opens WhatsApp with the conversation and the text ready, in your own account.
- We never sell personal data, show ads or use your contacts for marketing, analytics or any other product.
- We record no screen sessions and capture no clicks beyond the events listed above.
Why we collect it
Zapzei has a single purpose: turning your spreadsheets into send lists and keeping track of who already got your message. We use your data only for that:
- to create and secure your account, and to provide the lists, the send status and the sync between your devices (performance of a contract, LGPD art. 7, V);
- to apply the usage limits and the 30-day unlock, and to process payments (performance of a contract, and legal obligation for tax records, art. 7, II);
- to improve the product with usage events and to prevent abuse (legitimate interest, art. 7, IX), always limited to the data listed above;
- to write to you about your account, such as email confirmation, password reset and a list being ready.
Before collecting anything, the extension shows what it collects and asks for your agreement.
The contacts in your spreadsheets
You decide which contacts to import and to message. For that data, Zapzei acts on your behalf (as an operator, in LGPD terms): we store it and show it back to you, and nothing else. You are responsible for having a legal basis to message those people, such as their consent or an existing relationship.
How we protect it
- Everything travels encrypted (HTTPS).
- The files you import are kept in a private storage bucket with server-side encryption, reachable only through short-lived links issued to you.
- Your lists are visible only to your account. Our team opens them only at your request, for security or to comply with the law, and every such access is recorded.
How long we keep it
| Data | Kept for |
|---|---|
| Original imported file | 90 days after the import, or until you delete the list, whichever comes first |
| Lists, contacts and send status | While your account exists; deleted with the list or with the account |
| Send records (date and time of each click on Send) | 13 months, for the usage limits and aggregated statistics |
| Account and profile | Until you ask for deletion; deleted within 30 days of the request |
| Payment records | For as long as tax law requires |
Your rights
Under the LGPD (art. 18) you can, at any time and free of charge:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- ask for anonymization, blocking or deletion of unnecessary or excessive data;
- receive a copy of your data, including your lists, in a portable format;
- know who we share your data with;
- withdraw a consent you gave, and delete your account and everything in it.
To exercise any of these rights, write to [email protected] from the email of your account. We answer within 15 days. You can also complain to the Brazilian data protection authority (ANPD).
Chrome Web Store Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Read how we apply it in our Limited Use statement.
Age
Zapzei is meant for people aged 18 or over. We do not knowingly collect data from children or teenagers.
Changes to this policy
When this policy changes, we update the date at the top of the page. If a change affects how we use your data, we tell you in the extension or by email before it takes effect.
How to reach us
Questions about privacy or your data: [email protected].