Effective Date: 01. August 2025
Last Updated: 01. August 2025 


Welcome to Zack (“we”, “us”, or “our”). Your trust is important to us. This Data Privacy Policy explains how we collect, use, protect, and share your personal data when you use our task management application, website, and associated services (collectively, the “Service”).
We are committed to protecting your personal data and your rights under:
• The EU General Data Protection Regulation (GDPR),
• The Swiss Federal Act on Data Protection (revDSG),
• The California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and other applicable international privacy regulations.

 

1. Who We Are

Data Controller
ZIEL AG
Bleicherweg 10, 8002 Zürich Switzerland
Email: support@zakapp.space

 

2. Scope of This Policy 


This policy applies to all users of the Service, regardless of location, and covers:
• Personal data you provide,
• Data collected automatically,
• Your rights,
• Our practices for handling anonymized data,
• Data sharing, transfers, and security. 


 

 

3. What Personal Data We Collect 


We collect the following categories of data:
a. Account & Identification Data, among other:
• Name or username
• Email address
• Password (encrypted)
• Authentication tokens (for login or integrations)
b. Usage & Task Data, among other:
• Tasks, projects, lists, notes, and attachments you create
• Task metadata (due dates, labels, priorities)
• Tags or categories you assign
• Collaboration history
c. Device & Technical Data, among other:
• IP address
• Device type and OS version
• Browser type
• Language and time zone
• Error logs and diagnostic info
d. Subscription & Payment Data, among other:
• Billing address
• Subscription type and status
• Transaction ID (handled via secure third-party providers; we do not store credit card numbers)
e. Communications, among other:
• Your messages to our support team
• Responses to surveys or feedback prompts
• Opt-in marketing preferences
We do not intentionally collect sensitive personal data (e.g., race, religion, political opinions). If you voluntarily include such data in a task or note, it is your responsibility to ensure appropriateness. 


 

4. How We Use Your Data 


We only use your data as allowed by law and in a transparent manner. Typical uses include:
Purpose: Provide and maintain the Service Legal Basis: Contractual necessity Purpose: Authenticate users and secure the platform
Legal Basis: Legitimate interest
Purpose: Process subscriptions and payments
Legal Basis: Contractual necessity
Purpose: Send transactional notifications (e.g., reminders, updates)
Legal Basis: Legitimate interest
Purpose: Provide support and improve customer experience
Legal Basis: Legitimate interest
Purpose: Analyze usage patterns for product improvements
Legal Basis: Legitimate interest
Purpose: Send marketing communications (with consent only)
Legal Basis: Consent
Purpose: Comply with legal or regulatory obligations
Legal Basis: Legal obligation

You can withdraw consent at any time through your settings or by contacting us.

5. Sharing of Your Personal Data

We do not sell your personal data.
We share it only with:
• Hosting providers (e.g., AWS, Google Cloud)
• Payment processors (e.g., Stripe, Apple Pay)
• Support tools (e.g., Zendesk, Intercom)
• Analytics platforms (if consented to)
• Legal authorities when legally required
Each partner is contractually bound to maintain strict confidentiality and security.

 

6. Use and Sharing of Anonymized or Aggregated Data

We may use anonymized or aggregated data – which cannot be linked to any individual – for:
• Product analytics and feature optimization
• Productivity and behavior research
• Business insights and benchmarking
• Licensing or selling to trusted third parties (e.g., researchers, technology providers) Examples include:
• Average task completion times
• Popular features used per company size
• Anonymous engagement heatmaps 

We ensure that this data is:
• Fully anonymized using industry-standard techniques,
• Not subject to re-identification,
• Outside the scope of personal data laws such as GDPR and CPRA,
• Used strictly for non-personal analysis or insights.
We do not share or sell identifiable or pseudonymized data without your explicit, prior consent.
 

7. International Data Transfers

If you are located in the EU/EEA, UK, or Switzerland, your data may be transferred to and
processed in countries outside your jurisdiction (e.g., the U.S.). We ensure adequate protection by:
• Executing Standard Contractual Clauses (SCCs),
• Conducting transfer impact assessments,
• Applying data minimization and encryption protocols.

 

8. Data Retention

We retain your personal data only as long as necessary to:
• Deliver the Service,
• Fulfill contractual or legal obligations,
• Resolve disputes or enforce our rights.
Upon account deletion, your personal data will be anonymized or securely deleted within 30 days, unless longer retention is required by law.

You may export your data before account deletion via our app or upon request.

 

9. Your Privacy Rights

Depending on your jurisdiction, you may exercise the following rights:
Right: Access
Description: Get a copy of your personal data
Right: Rectification
Description: Correct inaccurate or incomplete data
Right: Erasure
Description: Request deletion of your data (“right to be forgotten”)
Right: Restriction
Description: Limit how your data is processed
Right: Objection
Description: Object to processing for certain purposes
Right: Data Portability
Description: Receive your data in a transferable format
Right: Withdraw Consent
Description: Withdraw consent for marketing or other purposes
Right: Non-Discrimination
Description: You will not be denied service for exercising your rights (CPRA)

To exercise any right, email us at support@zackapp.space. We will respond within the time limits required by law (typically 30 days).
If you're dissatisfied, you may file a complaint with your local data protection authority.
 

 

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:
• Enable essential functionality (e.g., login sessions),
• Analyze usage (e.g., page visits, time on page),
• Improve our service quality.
We ask for your consent for non-essential cookies. You can adjust your preferences via our cookie banner or your browser settings at any time.

 

11. Data Security

We employ state-of-the-art security controls to protect your data, including:
• End-to-end encryption (TLS/HTTPS and AES-256 at rest)
• Strict internal access controls
• Periodic penetration testing and vulnerability scanning
Despite our efforts, no system can be guaranteed 100% secure. We encourage you to use strong passwords and enable available security features.

 

12. International Transfers

Your data may be transferred to and processed in countries outside your own, including those that may not offer the same level of data protection. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

 

12. Children’s Privacy

Our Service is not intended for children under 16 (or the age of digital consent in your country). We do not knowingly collect data from minors. If we become aware of such collection, we will delete it promptly.
 

​

13. Third-Party Services and Links

We may link to or integrate with third-party tools (e.g., Google Calendar, Slack). This Privacy Policy does not apply to them. Please refer to the respective privacy policies of these services.

 

14. Changes to This Policy

We may update this Privacy Policy periodically. If we make significant changes, we will notify you via email or in-app alerts.
You should review this policy regularly. Continued use of the Service after changes become effective constitutes your acceptance.

 

15. Contact Us

If you have questions about this policy or your personal data, contact us at:
Email: support@zakapp.space
Postal Address: ZIEL AG, Bleicherweg 10, 8002 Zürich, Switzerland