Privacy Policy

1. Information We Collect

We collect the following types of information when you use ZendZap:

1.1 Information You Provide

• Full name, email address, and date of birth during account registration
• Timezone and location preferences
• Flight details (airline, flight number, dates, origin, and destination)
• Chat messages exchanged with other users on the platform
• Files and photos uploaded to the platform (package photos, profile photos)
• Payment information (processed securely by our payment provider)

1.2 Information Collected Automatically

• Device information and browser type
• IP address and approximate location
• Usage patterns and interaction data within the platform
• Cookies and local storage data (see Section 8)

2. How We Use Information

We use the information we collect to:

• Create and manage your account
• Facilitate connections between Senders and Travelers
• Process payments and manage transactions
• Send transactional notifications (booking confirmations, delivery updates)
• Improve and personalize the Service
• Ensure platform safety and prevent fraud
• Comply with legal obligations
• Communicate service updates and changes

3. Data Sharing

We share your information only in the following circumstances:

• With connected users: When you are matched with a Sender or Traveler, we share limited information (name, profile photo, and relevant flight or package details) necessary for coordination.
• With service providers: We share data with third-party services that help us operate the platform (see Section 4).
• For legal compliance: We may disclose information when required by law, court order, or government request.
• For safety: We may share information to prevent fraud, abuse, or threats to safety.

We do not sell your personal information to third parties.

4. Third-Party Services

We use the following third-party services to operate ZendZap:

• Stripe - Payment processing. Stripe processes and stores payment information in accordance with PCI-DSS standards.
• SendGrid - Email delivery for transactional emails (booking confirmations, notifications, password resets).
• Amazon Web Services (AWS) - Cloud infrastructure and file storage for uploaded content.
• Sentry - Error monitoring and performance tracking to improve application reliability.

Each third-party service has its own privacy policy governing the use of your data. We encourage you to review their respective policies.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. After account deletion, we may retain certain data for up to 90 days to comply with legal obligations, resolve disputes, and enforce our agreements. Anonymized and aggregated data may be retained indefinitely for analytics purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 General Rights

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a portable, machine-readable format.
• Objection: Object to certain processing of your personal data.

6.2 GDPR Rights (European Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing and to lodge a complaint with your local data protection authority.

6.3 CCPA Rights (California Residents)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of your personal information. We do not sell personal information. To exercise any of these rights, contact us at [email protected].

7. Security Measures

We implement industry-standard security measures to protect your personal information, including encryption of data in transit (TLS/SSL), secure storage of passwords using hashing algorithms, regular security audits, and access controls limiting employee access to personal data. While we strive to protect your information, no method of electronic transmission or storage is 100% secure.

8. Cookies and Local Storage

ZendZap uses cookies and browser local storage to:

• Maintain your authentication session
• Store user preferences (timezone, display settings)
• Analyze platform usage for improvements

You can control cookie settings through your browser preferences. Disabling cookies may limit your ability to use certain features of the Service.

9. Children's Privacy

ZendZap is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected] and we will promptly delete the information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the platform. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: