Privacy Policy
Last updated: September 2026
This policy explains how Zaags, operated by RUDLU Unipessoal Lda (NIPC 516730304, 27A Rua da Bela Vista à Graça, 1170-058 Lisboa, Portugal; operator of zaags.app, zaags.com and related websites), handles your personal data. We are the data controller for your Zaags account. Contact us.
1. What we collect
- Account data: when you sign in with Google we store your email, name and profile picture. We do not receive your Google password.
- Content you create: most of your content (documents, notes, tasks, messages, files, and your website content) is stored in your own Google Drive or, where you enable it, your own database — not on our servers. In Full Privacy mode, AI chats run on our own GPU.
- Usage & billing: credit usage, subscriptions and payments (processed by Stripe — we never see full card numbers), and basic technical logs needed to run and secure the service.
- Connected services: if you connect Google (Gmail, Calendar, Drive, Contacts), a mailbox, Stripe or others, we access only what is needed to provide the feature you asked for, under Google’s API and other providers’ terms.
2. Why we use it (lawful bases)
To provide and secure the service and perform our contract with you; to process payments; to comply with legal obligations; and, with your consent where required, for optional analytics. We do not sell your personal data.
3. Google user data
Zaags’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features you enable, never for advertising, and never sell it.
4. Cookies
We use only the cookies needed to run the site and keep you signed in, plus optional analytics you can decline. Public pages that offer translation set a language cookie when you choose a language.
5. Sharing
We share data only with service providers that help us run Zaags (e.g. Google, Stripe, hosting) under contract, and where required by law. Content you publish on a website is, by its nature, public.
6. Retention
We keep account and billing data for as long as your account is active and as required by law. Content in your own Drive or database is controlled by you; deleting your account removes your Zaags profile data.
7. Your rights
Under the GDPR you can access, correct, delete, restrict or port your personal data, and object to certain processing. Contact us to exercise these rights. You may also complain to the Portuguese supervisory authority (CNPD).
8. Site visitors
When you use a website built with Zaags, that business is the controller of any personal data you give it (e.g. a booking). Zaags processes it on the business’s behalf. Each site carries its own privacy notice.
9. Changes & contact
We may update this policy; material changes will be notified. Questions? Contact us — RUDLU Unipessoal Lda, 27A Rua da Bela Vista à Graça, 1170-058 Lisboa, Portugal.