Privacy Notice

Who is responsible for your data

Zizzro is the legal seller and operator of this service, and acts as the data controller for the personal data described below. We decide what is collected and why, and we are the point of contact for any request about your data.

What we hold

Zizzro stores the things you put into it: projects, tasks, notes, follow-ups, documents you upload, people you track, calendar events synced from accounts you connect, and optional personal records such as bills, pets, vehicles, medications and journal entries.

We also hold your email address, a display name, your time zone, notification preferences, and a security activity log (such as sign-ins, calendar-link changes, data exports and deletion requests). When you use Zizzro, we also receive technical information such as IP address, browser and device details, approximate location derived from IP, timestamps, diagnostics and feature usage. Support messages and any files you include are also stored so we can respond.

Who can see it

• Only you, by default. Every record is tied to your account and access rules are enforced by the database, not just the screen.
• Household members see only records you have explicitly marked Household or shared with selected members.
• Journal, medications and the credential Vault are always private to you and are never shared with a household.

Why we process it, and our legal basis

• Account details (email, display name, time zone) — to create and run your account. Legal basis: performance of our contract with you.
• Your content (projects, tasks, notes, documents, calendar events and other records) — to provide the service you asked for. Legal basis: performance of our contract.
• Security activity log, device and IP information — to keep accounts safe and prevent fraud and abuse. Legal basis: our legitimate interest in securing the service.
• Support messages — to answer you. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Aggregate usage counts — to improve the product. Legal basis: consent, which you can withdraw at any time from the footer toggle or Settings.
• Billing and subscription records — to provide paid access, reconcile transactions, support customers and meet tax and accounting duties. Legal basis: performance of our contract and legal obligation.
• Optional product communications — to send news or offers only where permitted. Legal basis: consent or our legitimate interests, with an unsubscribe option in every message.

Who we share it with

• Payment processor and Merchant of Record: we share billing-related personal data with Paddle.com Market Ltd, our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing. Paddle collects your payment and billing details directly at checkout and processes them under its own privacy notice.
• Service providers and subprocessors — hosting, database, email delivery and AI features used only when you trigger them. See the Subprocessors page.
• Professional advisers — legal and accounting, where necessary.
• Authorities — only where we are required by law.

We do not sell your personal data or share it with advertisers.

Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, per-account access rules enforced at the database level, optional two-step verification, and a security activity log. More detail is on the Security page.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a portable copy, and to withdraw consent. Contact us and we will respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority. You can also withdraw consent at any time without affecting earlier lawful processing.

International transfers

Our providers may process data outside your country, including outside the UK or EEA. Where required, we use recognised safeguards such as adequacy decisions and Standard Contractual Clauses, together with appropriate technical and organisational protections.

Cookies

We use essential cookies and local storage to keep you signed in, protect sessions and remember your preferences. We do not use advertising cookies. Optional analytics help us understand aggregate product use and can be disabled using the Analytics control in the site footer. You can also control cookies in your browser, although blocking essential storage may prevent sign-in or saved preferences from working.

Retention

• Your account and content are kept while your account is active, or until you delete individual records or the account.
• Deleted accounts are removed immediately from the live system. Encrypted backups are retained for up to 30 days and then overwritten.
• Security activity and notification history are generally kept for up to 12 months.
• Support and transaction records are kept as long as reasonably needed to resolve requests and meet legal, tax, accounting, fraud-prevention and dispute obligations.

Consent for optional features

• Document scanning (OCR). Only runs when you press the button on a document. The page image is sent to our AI provider to read the details, is not used to train models, and no copy is retained by us beyond that request.
• AI-assisted notes and wording. Only runs when you request it. The text or transcript needed for the request is sent to our AI provider and the result requires your review. We do not upload Magic Notes recording audio for AI transcription.
• Connected calendars. Zizzro requests access to read events from calendars you connect and to create an external event only when you explicitly select a connected calendar as its destination. Disconnecting stops future access and removes the stored credentials.
• Analytics. We use aggregate usage counts only. We do not sell data, run advertising trackers, or profile you.

Your controls

In Settings you can download a copy of everything, turn the public calendar link off or regenerate it, control notification categories, and delete your account permanently.

Contact

Email info@zizzro.com or use the Support page for privacy questions or rights requests.