Zetdo
Start free trial
Legal

Privacy Policy

This Privacy Policy explains how Zetdo handles personal data when you visit our website, create an account, use the Zetdo web or mobile apps, receive Zetdo communications, or interact with a business that uses Zetdo.

Last updated:

Zetdo is owned and operated by RBarbosa Software, CNPJ 32.993.774/0001-57, Caminho das Arvores, 1057, Salvador, Bahia, Brazil - CEP 41.820-790.

For account, billing, website, support, and security data, Zetdo is the controller of your personal data. For client, appointment, quote, sale, product, stock, and message data entered by an account holder about their own customers, Zetdo generally acts as a processor or service provider on behalf of that account holder.

This policy applies to zetdo.com, app.zetdo.com, Zetdo mobile apps, transactional emails, SMS, WhatsApp reminders, support channels, billing flows, and other Zetdo services that link to this policy.

It does not cover websites, apps, payment pages, or communications controlled by third parties. Their own privacy notices apply.

  • Account data: name, email address, phone number, password-authentication records, language, country, company name, role, team membership, and account settings.
  • Business data: companies, customers, contact details, quotes, sales, appointments, services, products, stock, notes, files, custom fields, and related records entered into Zetdo.
  • Messaging data: recipient contact details, channel preferences, message templates, scheduled-send data, opt-out status, delivery status, provider identifiers, and limited message metadata.
  • Billing data: plan, subscription status, billing country, tax or invoice details, payment status, and payment-provider identifiers. Full card numbers are handled by Stripe and are not stored on Zetdo servers.
  • Authentication and security data: Firebase user identifiers, session and token metadata, IP address, user agent, device and browser information, request logs, correlation IDs, audit logs, and abuse-prevention signals.
  • Website and preference data: language preference, region or currency preference, cookie-notice dismissal, and similar essential browser storage.
  • Support and communications data: messages you send us, attachments, feedback, survey responses, and administrative correspondence.
  • Provide, maintain, secure, and improve the Zetdo service.
  • Create and manage accounts, companies, teams, subscriptions, and permissions.
  • Generate quotes, bookings, sales records, customer records, stock changes, reminders, and related business workflows.
  • Send account, security, billing, product, support, email, SMS, and WhatsApp communications.
  • Process payments, invoices, subscription events, taxes, chargebacks, and fraud-prevention checks.
  • Respond to support requests, troubleshoot issues, measure service reliability, and prevent abuse.
  • Comply with legal, accounting, tax, sanctions, regulatory, and law-enforcement obligations.

Where GDPR, UK GDPR, LGPD, or similar laws require a legal basis, we rely on the following bases depending on the context.

  • Contract: to create your account, provide the service, process subscriptions, deliver support, and send necessary service notices.
  • Legitimate interests: to secure the service, prevent fraud and abuse, maintain logs, improve product reliability, and communicate with business users about relevant service updates.
  • Consent: for optional marketing communications, optional non-essential cookies if introduced, and communications where consent is required by law.
  • Legal obligation: for tax, accounting, consumer-protection, regulatory, security, and lawful request obligations.

Zetdo customers may enter personal data about their own clients, staff, suppliers, or other contacts. The account holder is responsible for having a lawful basis to upload and use that data, providing required notices to those individuals, and honoring their rights requests.

When an end customer contacts Zetdo directly about data entered by a Zetdo account holder, we may direct the request to the relevant account holder unless the law requires us to respond directly.

We do not sell personal data. We share personal data only as needed to operate Zetdo, comply with the law, protect rights and safety, or complete a business transaction such as a merger, acquisition, financing, or asset sale.

  • Microsoft Azure: hosting, databases, storage, networking, service bus, backups, secrets management, and infrastructure security.
  • Google Firebase: authentication and identity services for web and mobile sign-in.
  • Stripe: subscription billing, checkout, customer portal, payment processing, invoicing, fraud prevention, and payment-related records.
  • Twilio: SMS and, where configured, WhatsApp delivery, status events, and provider metadata.
  • Meta Platforms Ireland: WhatsApp Cloud API delivery and status events where direct Meta WhatsApp delivery is enabled.
  • Resend: transactional email delivery and status events.
  • Professional advisers, authorities, courts, regulators, or law enforcement where required by law or necessary to protect Zetdo, users, or the public.

Zetdo primarily hosts production application data on Microsoft Azure. Current and planned regions include West Europe and Brazil South, depending on environment, availability, customer region, and product rollout.

Some subprocessors operate globally and may process data outside your country, the EEA, the United Kingdom, or Brazil. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, data processing agreements, adequacy decisions, or equivalent legal mechanisms.

  • Account and company data: retained while the account is active and then deleted or anonymized within a reasonable period after closure unless retention is required by law, security, billing, dispute, or backup obligations.
  • Customer business records: retained according to the account holder configuration and deleted, or provided to the account holder on request, when the account holder closes the account or requests deletion, subject to legal and backup limits.
  • Billing, invoice, tax, and accounting records: retained for the legally required period, generally up to five years or longer where required by applicable law.
  • Security logs, request logs, and operational telemetry: generally retained for up to 90 days unless needed longer for security, fraud, legal, or reliability investigations.
  • Message delivery records and opt-out records: retained while needed to deliver the service, prove delivery, honor opt-outs, prevent abuse, and comply with messaging laws.
  • Backups: retained for a limited backup lifecycle and overwritten according to infrastructure backup schedules.

Zetdo uses essential cookies, local storage, IndexedDB, and similar technologies to remember preferences, keep users signed in, maintain security, support billing flows, and operate the service.

The public website does not currently use advertising trackers or behavioral analytics cookies. If we introduce non-essential cookies or trackers, we will update the Cookie Policy and request consent where required.

We use technical and organizational safeguards designed to protect personal data, including HTTPS/TLS in transit, encryption at rest through Azure services, Firebase authentication, access controls, secrets in Azure Key Vault, managed identities, audit logs, backups, monitoring, and deployment controls.

No internet service can be guaranteed to be 100% secure. If we identify a personal-data incident that legally requires notice, we will notify affected users, account holders, and regulators as required by applicable law.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port your personal data; withdraw consent; opt out of marketing; receive information about sharing; and lodge a complaint with a supervisory authority.

LGPD rights may include confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, information about refusing consent, and revocation of consent.

Send privacy requests to [email protected]. We may need to verify your identity and, when we act as a processor for an account holder, coordinate the request with that account holder. We respond within the period required by applicable law.

Zetdo is a business service intended for adults and businesses. It is not directed to children, and account holders must not use Zetdo to knowingly collect personal data from children unless they have all legally required authority and notices.

We may update this policy when our product, subprocessors, legal obligations, or data practices change. Material changes will be communicated by email, in-app notice, or website notice when appropriate.

Privacy requests: [email protected]. Security reports: [email protected]. General legal questions: [email protected].