ZeaApps, Inc. ("ZeaApps", "we", "us", or "our") operates the ZeaProcess platform and website at zeaprocess.ai (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

1.1 Information You Provide

Account data: name, work email, company name, job title, and password when you register.
Process content: BPMN diagrams, uploaded SOPs, documents, and other files you create or upload inside the Service.
Communications: messages you send us via email or support channels.
Payment data: billing address and payment-method details processed securely by our payment processor. We do not store raw card numbers.

1.2 Information We Collect Automatically

Usage data: pages visited, features used, click paths, and session duration.
Device & log data: IP address, browser type, operating system, and referring URLs.
Cookies & similar technologies: see our Cookie Policy for details.

2. How We Use Your Information

We use collected information to:

Provide, operate, and improve the Service.
Process transactions and send related confirmations.
Send product updates, security alerts, and support messages.
Send marketing communications where you have opted in (you may opt out at any time).
Monitor and analyze usage to enhance user experience.
Detect, prevent, and address security incidents and abuse.
Meet legal obligations and enforce our Terms of Service.

3. Legal Bases for Processing (GDPR)

Where the GDPR applies, we process personal data on the following legal bases: performance of a contract, legitimate interests (product improvement, security), compliance with legal obligations, and consent where specifically sought.

4. Sharing Your Information

We do not sell your personal data. We may share data with:

Service providers who process data on our behalf (hosting, payment, analytics) under strict data-processing agreements.
Affiliates within the ZeaApps group under the same privacy standards.
Law enforcement or regulators when required by law or to protect rights and safety.
Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate notice to you.

5. Data Retention

We retain your account data for as long as your account is active and for a reasonable period after closure as required by law or legitimate business need. Process content you delete is purged from production systems within 30 days and from backups within 90 days.

6. Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS 1.2+) and at rest, role-based access controls, and regular security reviews. See our Security page for more details.

7. International Transfers

ZeaApps is based in New Jersey, USA. If you access the Service from outside the United States, your data will be transferred to and processed in the USA. We rely on Standard Contractual Clauses for transfers from the EEA/UK.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, restrict or object to processing, and withdraw consent. To exercise these rights, email privacy@zeaapps.com. California residents may exercise rights under the CCPA by contacting us at the same address.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy periodically. Material changes will be notified via email or a prominent notice on our website at least 14 days before taking effect. The effective date at the top of this page indicates when the current version was last updated.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@zeaapps.com
Company: ZeaApps, Inc., New Jersey, USA

Privacy Policy