Privacy Policy

Last updated: 2026-07-19

Who we are

Zozo (the “Service”) is operated by Ryan Graham (“we”, “us”, “our”), based in Ontario, Canada, which is the controller of the personal data described in this policy. Our Privacy Officer is accountable for the practices described here and can be reached at support@zozohq.com for any privacy question or to exercise the rights below. Our postal address is available on request.

What we collect, and why

We collect only what we need to run the Service and bill for it:

• Contact/waitlist data — if you join a waitlist or contact us, we collect your email address (and anything else you choose to send) so we can respond to you and, if you asked to hear from us, tell you when access opens up.
• Account data — once you sign up, your name, email address, and the workspaces/organizations you belong to, so we can operate your account.
• Billing data — your subscription status and invoice history. Your payment card details are collected and stored by our payment processor, Stripe, not by us (see below).
• Service data — the runs, threads, and events your use of the Service generates, which we process solely to provide, secure, and support the Service.

Our legal bases for this processing are performance of our contract with you (running your account and the Service), our legitimate interest in operating and securing the Service, compliance with legal obligations (e.g. tax records), and, where applicable, your consent (e.g. optional waitlist emails). We keep account and billing data for as long as your account is active and afterward only as long as needed to meet legal, tax, or dispute-resolution obligations.

Stripe as our payment processor

We use Stripe, Inc. to process payments and manage subscriptions. Stripe collects and processes your payment card details directly; we never see or store full card numbers. Stripe acts as an independent processor (and, for some purposes, an independent controller) of that data under its own privacy policy, available at stripe.com/privacy.

Your rights (GDPR/UK GDPR)

If you are in the EEA, UK, or a jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request erasure of your data, subject to legal retention needs;
• Restrict or object to certain processing;
• Receive a portable copy of the data you provided to us;
• Withdraw consent at any time where processing is based on consent; and
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email support@zozohq.com. We respond to verified requests within the timeframe required by applicable law.

We do not sell or share your data

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We only share data with processors (like Stripe) who act on our behalf to provide the Service, under contracts that restrict them to that purpose.

No tracking cookies

This site and the Service do not use advertising or tracking cookies. Any cookies we set are strictly necessary — for example, to keep you signed in — and are never used to track you across other sites.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where required by law we will notify you directly.

Contact

Privacy Officer, Zozo
Ontario, Canada (postal address on request)
support@zozohq.com