This Privacy Policy describes how we collect, use, store and protect personal information of those who use our Service.
Altiora SpA ("the Company", "we") operates the Zepai platform, accessible at zepai.io. This Privacy Policy describes how we collect, use, store and protect personal information of those who use our Service ("the User"). By using the Service, the User accepts the practices described in this policy.
Information the User provides: name and email address (on registration), payment information (processed directly by Paddle; we do not store card data), and content generated during use: system designs, mission responses, and configurations.
If the User chooses to sign in with Google, we receive from Google only the basic profile information authorized by the User: name, email address, and profile photo. This information is used solely to create and authenticate the account. We do not access any other Google account data, and we do not use this information for advertising purposes.
Information we collect automatically: usage data (pages visited, features used, session time, errors), technical data (IP address, browser type, OS, device identifiers), and data from cookies and similar technologies (see Cookies Policy).
We use collected information to: provide, operate, and improve the Service; process payments and manage subscriptions; send account-related communications (confirmations, security alerts, term changes); send marketing communications only with explicit User consent; analyze Service usage to improve experience and learning methodology; and comply with legal obligations.
We share data with the following third parties, only to the extent necessary to provide the Service:
| Provider | Purpose |
|---|---|
| Google LLC | Authentication via Google Sign-In (OAuth 2.0) |
| Anthropic, PBC | AI processing for evaluations and feedback |
| Paddle.com Market Limited | Payment processing and subscription management |
We do not sell or share personal data with third parties for advertising purposes.
The Service uses cookies and similar technologies for its operation and analysis. For more detail, see our Cookies Policy at zepai.io/cookies.
We retain User data while the account is active. After account cancellation, data is deleted from our active systems within 30 days following the end of the grace period. Some data may be retained longer when required by law (e.g., transaction records).
We implement reasonable technical and organizational measures to protect personal data from unauthorized access, loss, or alteration. However, no system is completely secure. In the event of a security incident affecting personal data, we will notify the User and relevant authorities as required by applicable law.
Depending on your jurisdiction, the User may have the following rights over their personal data: Access, Rectification, Deletion ("right to be forgotten"), Portability, Objection to marketing processing, and Restriction of processing in certain circumstances.
To exercise any of these rights, contact us at contact@zepai.io. We will respond within a maximum of 30 days.
The Service operates from Chile and may transfer data to servers located in other countries (including the United States), where third-party services mentioned above are hosted. These transfers are made with adequate protection guarantees in accordance with applicable law.
The Service is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If we detect that a minor has provided data without consent, we will delete it immediately.
We may update this Privacy Policy periodically. Material changes will be notified to the User by email or through a notice on the platform with at least 15 days advance notice before taking effect.
For privacy inquiries or to exercise your rights: contact@zepai.io
