Privacy Policy

1. Introduction

Welcome to Zippy. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-native task management service.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, password)
• Profile information (optional profile photo, preferences)
• Task data (tasks, descriptions, comments, attachments)
• Workspace information (workspace name, member invitations)
• Communication data (messages from email, Slack, WhatsApp integrations)

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (features used, pages visited, time spent on platform)
• Log data (access times, errors, performance data)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Zippy service
• Process your messages and automatically extract tasks using AI
• Improve and personalize your experience
• Send you notifications, updates, and support messages
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Analyze usage patterns to improve our service
• Comply with legal obligations

4. AI Processing and Data Usage

Zippy uses artificial intelligence to process your messages and automatically extract tasks. This includes:

• Analyzing message content to identify actionable tasks
• Extracting key information (deadlines, assignees, priorities)
• Generating task summaries and suggestions
• Providing sentiment analysis and entity recognition

We use Gemini's API for AI processing. Your data is processed according to Gemini's data usage policies and is not used to train their models. We implement encryption and security measures to protect your data during processing.

5. Third-Party Integrations

Zippy integrates with third-party services to provide our functionality:

• Email: We access your email with your explicit permission to capture task-related messages
• Slack: We connect to your Slack workspace to monitor channels and direct messages
• WhatsApp: We integrate with WhatsApp Business API to receive messages
• Supabase: We use Supabase for secure data storage and authentication
• Gemini: We use Gemini's API for AI-powered task extraction and analysis

These integrations only access data you explicitly authorize and are governed by their respective privacy policies.

6. Data Sharing and Disclosure

We may share your information:

• Within Your Workspace: With other members of your workspace as necessary for collaboration
• Service Providers: With trusted third-party service providers who assist in operating our service
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

7. Data Security

We implement appropriate technical and organizational security measures to protect your data:

• Encryption of data in transit and at rest
• Row Level Security (RLS) policies for data access control
• Regular security audits and vulnerability assessments
• Secure authentication and access controls
• Regular backups and disaster recovery procedures

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal purposes.

9. Your Privacy Rights

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete personal data
• Delete your personal data (subject to legal requirements)
• Object to or restrict the processing of your data
• Withdraw consent for data processing
• Data portability (receive your data in a structured format)
• Opt-out of marketing communications

To exercise these rights, please contact us at privacy@zippy.com.

10. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings. However, disabling cookies may limit some functionality of the service.

11. Children's Privacy

Zippy is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@zippy.com
• Support: support@zippy.com