Zagsendos Privacy Policy

1. Zero-Knowledge Architecture

Our fundamental principle is that **we cannot access your data**. This is technically known as "Zero-Knowledge Architecture." All files are encrypted End-to-End on your browser or device before ever reaching our servers.

• Encryption: All data transfers utilize AES-256 GCM encryption.
• Key Management: Decryption keys are never stored on our servers or disclosed to Zagsendos personnel.
• Metadata: The only information stored on our servers relates to the file's size and transfer lifespan. File names or content are invisible.

2. Types of Information We Collect

We collect only the data strictly necessary for service operation and billing:

2.1. Account Information (For Senders)

Collected solely for billing, service notifications, and legal compliance:

• First Name, Last Name, Email address.
• Billing address and Plan details.

2.2. Usage Data

Anonymous data retained to maintain service continuity and meet regulatory mandates:

• Login/Logout times (Mandatory Audit Logs).
• Successful/Failed transfer attempts.
• IP addresses (Anonymized after service use).

3. GDPR and CCPA Compliance

Zagsendos is committed to fully complying with the strictest privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

• Right of Access: Upon request, we will provide you with all billing and account information (personal data) related to your usage.
• Right to Erasure: Upon account closure, we will promptly delete all personal data, except where legally required to retain records for tax/audit purposes.

4. Security Notice and Certifications

Our systems are regularly audited by third-party security firms and comply with international standards.

• SOC 2 Type II Certified.
• ISO 27001 Compliance.

If you have questions about our Privacy Policy, please contact our Data Protection Officer via the Contact Us page.