Privacy Policy

1. Who We Are

Zaptaa Leads ("Zaptaa Leads," "we," "our," or "us") is a software-as-a-service platform for lead management and sales tooling, available at leads.zaptaa.com and app.zaptaa.com. The platform is owned and operated exclusively by:

All intellectual property rights, trademarks, and platform assets associated with "Zaptaa," "Zaptaa Leads," and the Zaptaa brand are the exclusive property of Woofer LLC.

2. Scope of This Policy

This Privacy Policy describes how Woofer LLC collects, uses, discloses, and protects personal information when you visit our websites, create an account, or use any Zaptaa Leads services (collectively, the "Service"). It applies to all users regardless of location.

Our Service is directed at business professionals and is not intended for children under 13. We do not knowingly collect personal information from anyone under 13 years of age.

3. Information We Collect

3.1 Information You Provide

• Account registration: first name, last name, email address, password, organization name.
• Billing information: name, billing address, and payment method details processed directly by Paddle (our payment processor). We never store raw card numbers.
• Communications: messages or emails you send to our support team.
• Profile data: any additional details you voluntarily add to your account.

3.2 Information We Collect Automatically

• Usage data: pages viewed, features used, actions taken within the platform, session duration.
• Log data: IP address, browser type and version, operating system, referring URL, timestamps.
• Device data: device identifiers, screen resolution, language settings.
• Cookies and similar technologies: see Section 8 below.

3.3 Information from Third Parties

• Paddle: subscription status, transaction IDs, and billing events.
• Supabase: authentication tokens and session metadata as our backend infrastructure provider.

4. How We Use Your Information

We process your personal information for the following purposes and legal bases:

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it only as follows:

• Service providers: Paddle (billing), Supabase (database/auth), and Google (Gemini AI enrichment). Each is bound by a data processing agreement.
• Legal compliance: when required by applicable law, court order, or governmental authority.
• Business transfer: in connection with a merger, acquisition, or sale of all or substantially all of our assets, provided the acquirer agrees to honor this Policy.
• With your consent: for any other purpose you expressly authorize.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account closure:

• Account and usage data is deleted or anonymized within 90 days.
• Billing and transaction records are retained for 7 years to comply with tax and financial regulations.
• Data retained for legal holds is kept only for the duration of any applicable proceeding.

7. Security

We implement industry-standard technical and organizational measures to protect your data, including:

• TLS/SSL encryption for all data in transit.
• Encryption at rest for sensitive database fields.
• Role-based access controls limiting data access to authorized personnel only.
• Regular security reviews.

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we commit to notifying you of any confirmed breach affecting your data in accordance with applicable law.

8. Cookies & Tracking

We use the following categories of cookies:

• Strictly necessary: authentication session tokens — cannot be disabled.
• Functional: remember your preferences (e.g., billing period toggle).
• Analytics: aggregate, anonymized usage data to improve the platform.

You may disable non-essential cookies through your browser settings. Doing so may affect certain platform features.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Portability: receive your data in a structured, machine-readable format.
• Opt-out of marketing: unsubscribe from marketing emails at any time via the link in any email or by contacting us.
• California residents (CCPA): you have the right to know, delete, and opt-out of sale of personal information. We do not sell personal information.
• EEA/UK residents (GDPR): you may lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@zaptaa.com. We will respond within 30 days.

10. International Data Transfers

Woofer LLC is incorporated in Egypt. Our infrastructure (Supabase, Paddle) processes data on servers located in the United States and European Union. By using the Service, you acknowledge that your data may be transferred to and processed in jurisdictions outside your country of residence. We rely on standard contractual clauses and equivalent safeguards for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of the Service after that date constitutes acceptance of the updated Policy.

12. Contact Us