1. Controller Identity and Authority

Controller: ZapPost AI LLC, EIN 41-4219308, located at 30 N Gould St, Ste R, Wyoming, USA. All requests (DPO) should be sent to: [email protected]

2. Personal Data Collected and Processed

• Account data: Name, Email, Phone and Language.
• Business (Persona): Target audience, niche, descriptions.
• Logs and Infrastructure: Interaction history, prompts and local IP.

3. Restrictions and Sensitive Data (Health/Minors)

We do NOT collect or accept sensitive data or bulk information from children under 18. ATTENTION: If your niche is the medical field, you must not inject named lists of your real patients into the system “prompt” (as this will flow to the OpenAI API).

4. Purposes and Legal Bases

We use your data for the following purposes:

• Contractual Execution: Operating your account, managing subscription and providing access to the SaaS platform.
• Legitimate Interest: Forwarding “Business Contexts” for API consumption against external models (No active modeling/re-training).
• Legal Obligation: Log retention under applicable regulations.

5. Subprocessors and Third Parties

The platform depends on and shares data with rigorously audited providers: OpenAI (Generative AI API without training), Supabase and Hetzner (Cloud database AWS sa-east-1 and EU), Cloudflare (Global WAF) and Gateways (Hotmart/Eduzz/Stripe for payments).

6. International Transfer Flow

By using the Platform, you unequivocally consent that contextual metadata (prompts) crosses borders to parent labs in the USA (OpenAI/Anthropic), safeguarded by standard contractual clauses and “Zero Data Retention” mode.

7. Data Subject Rights

Under the GDPR and Brazilian LGPD (Art. 18), you have full rights to: access your data; rectify inaccuracies; request definitive deletion; demand portability. Via the Support portal ([email protected]).

8. Response Times and SLAs

Your deletion request will be evaluated by our support center within a strict maximum period of 15 calendar days (Brazilian customers) and up to 30 days in the EU.

9. Retention

We retain IPs for the non-transferable period of 6 months determined by art. 15 of the Brazilian Internet Civil Framework (Marco Civil da Internet) for civil and police prevention.

10. Cookies and Encryption

We transmit everything via TLS/HTTPS encryption and JWT Auth (Supabase RLS Security). We only use Meta Cookies (Pixel) restricted to acquisition on the clean commercial landing page.