Privacy Policy

Zaiko is the data controller for the personal data processed through this Service. For any privacy request, contact us at contact@zaiko-agent.com.

Your sign-in and checkout are handled by Crossmint, enterprise-grade infrastructure already trusted by companies such as Mastercard, Microsoft and Adidas. Crossmint is SOC 2 Type II certified and GDPR compliant.

Concretely: Zaiko never sees or stores your full card details. The sensitive parts of payment are secured by Crossmint and Stripe, regulated and audited providers, so you do not have to worry about them.

• Account data: your email address (via Crossmint sign-in) and your account identifier.
• Payment card: the card you add once for purchases, vaulted securely by Crossmint (we never see the full card number).
• Shipping address: the delivery details you save for purchases.
• Activity data: your shopping requests, the agent's proposals, your orders and a journal of actions.
• Billing data: handled by Stripe; we receive limited information such as subscription status (we never store full card numbers).
• Technical data: basic logs needed to run and secure the Service.

• To provide the Service (run the agent, place orders, manage your account): performance of our contract with you.
• To process subscriptions and payments: performance of the contract and legal obligations.
• To secure the Service and prevent abuse: our legitimate interest.
• To send optional notifications: your consent, which you can withdraw at any time.

We share data only as needed with providers that help us run Zaiko:

• Crossmint, authentication, card vaulting and checkout.
• Stripe, subscription billing.
• Hetzner, application hosting.
• Infrastructure providers used solely to host and operate the service.

Some of these providers are located outside the European Union (for example in the United States). When that is the case, transfers rely on appropriate safeguards such as the providers' standard contractual clauses.

We keep your data for as long as your account is active, and then only as long as needed for legal, accounting or security reasons. You can ask us to delete your account and associated data.

Under the GDPR you can access, correct, delete, export or restrict the processing of your data, and object to certain uses. To exercise these rights, write to contact@zaiko-agent.com. You can also lodge a complaint with the French data protection authority (CNIL).

We use only what is necessary to keep you signed in and to remember your preferences (including browser local storage). We do not use advertising trackers.

We may update this policy. If the changes are significant, we will make them visible in the app or by email.