Privacy Policy

This Privacy Policy explains how Zettaz collects, uses, and protects information when you use Zettaz Tours & Charters.

By using the service, you agree to this Policy. If you do not agree, do not use the service.

2.1 Account and business information

• Name, email, and phone number
• Company name, country, timezone, and currency preferences
• Billing and subscription details when you subscribe
• Staff invitations and role assignments

2.2 Operator content

As you use the workspace, you may store:

• Reservations, guest and passenger details, and stay information
• Pickup, manifest, waiver, and boarding records
• Payment, partner, and operational notes
• Documents and files you upload

2.3 Technical information

• IP address, device, and browser data
• Authentication and session logs
• Usage and diagnostic events needed to run and secure the service

• Service delivery: provide reservations, ops, and account features
• Account & billing: authenticate users, manage trials and subscriptions
• Communications: send verification, security, and service messages
• Security: detect abuse, prevent fraud, and protect tenants
• Improvement: understand product usage in aggregate
• Legal compliance: meet applicable legal obligations

We do not sell your personal information. We may share information with:

4.1 Service providers

Trusted processors (for example hosting, email delivery, and payment providers) who process data on our instructions.

4.2 Legal requirements

When required by law or to protect rights, safety, or security.

4.3 Business transfers

In a merger or acquisition, subject to continued privacy protections.

We use administrative, technical, and organizational measures such as encryption in transit, access controls, tenant isolation, and monitoring. No system is perfectly secure; please protect your credentials and devices.

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Contact us to make a request. We may need to verify your identity and will respond as required by applicable law.

We retain account and operational data for as long as your workspace is active and as needed for legal, security, and billing records. After cancellation, data may be retained for a limited period for recovery or compliance, then deleted or anonymized according to our retention practices.

If you store guest or passenger personal data, you act as the controller of that data. You must have a lawful basis to collect and process it and must configure retention and access appropriately for your operations.

We may process information in countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Policy and will revise the “Last updated” date. Continued use after changes take effect means you accept the updated Policy.

Privacy questions: support@zettaz.com