Privacy Policy

Last updated: September 17, 2026

ClientZapp is operated by Zamorins Solutions Inc. (Iowa — US) — “we”, “us”. This policy explains what we collect, why, how long we keep it, and what you can ask us to do about it. It covers the ClientZapp website and application.

1. Two kinds of data

The distinction matters throughout this policy:

Account data — information about you as a ClientZapp user: your name, work email, job title, phone, timezone, workspace, role and sign-in history. We are the controller of this data.
Customer data — the client records, contacts, deals, tasks, quotations, files and notes you put into your workspace. It is yours. We are a processor: we hold and process it on your instructions, and we do not decide what goes into it.

2. What we collect

When you use the application

Account data, as listed above.
Customer data that you or your colleagues enter, import or upload.
Technical records needed to run and secure the service: IP address, browser and device type, timestamps, and a log of security-relevant actions such as sign-ins and permission changes.

When you visit this website

Standard web server logs (IP address, page requested, referrer, user agent, timestamp), kept for a short period for security and troubleshooting.
Nothing else. There is no advertising pixel, no third-party analytics script and no tracking cookie on these pages. See the Cookie Policy.

When you email us

Your message and address, kept so we can answer you and refer back to the conversation.

3. Why we use it

To provide the service — store your records, send quotation links, raise follow-up alerts, deliver your digest.
To keep accounts secure — authenticate sign-ins, detect abuse, rate-limit, and audit administrative access.
To support you — answer your questions and investigate faults you report.
To bill you — process subscriptions through our payment processor.
To meet legal obligations — tax, accounting and lawful requests.

We do not sell personal data. We do not share it with advertisers. We do not use your customer data to train AI models — ours or anyone else's.

4. Email we send

ClientZapp sends transactional email only: invitations, password resets, quotation links, overdue follow-up alerts and the daily digest. Each of the notification emails can be switched off — overdue alerts by a workspace Admin, the digest by each person on their own profile. We do not send marketing email to the contacts in your workspace, ever.

5. Quotation links

When you send a quotation, the recipient gets a private link. Opening it records the time of the open and increments a count, which is shown to you in your workspace. That is the whole of it: we do not identify the reader, we do not place a cookie on their device for tracking, and we do not follow them anywhere else. If a recipient asks us to remove that record, ask us and we will.

6. Who we share data with

Only the service providers needed to run ClientZapp, each under contract and each limited to what they need:

Cloud hosting, database and object storage — United States regions.
Email delivery — to send the transactional messages above.
Payment processing — card details go to the processor and are never stored by us.
AI model provider — only when you request an AI summary or draft, and only the text needed for that request.

We may also disclose data if the law requires it. Where we can lawfully tell you first, we will. If our business is ever transferred, your data would move with it under this same policy, and you would be told before it happened.

7. Where it is stored

In United States data centres. If you are outside the United States and use ClientZapp, you are sending your data there; where a transfer mechanism is legally required for that, we rely on standard contractual clauses.

8. How long we keep it

While your workspace is active — customer data is kept until you delete it.
Archived records — kept and restorable until permanently deleted by an Owner.
After cancellation — your data stays available to export for 30 days, then is scheduled for deletion and removed from live systems within a further 30 days.
Backups — deleted data persists in encrypted backups for up to 35 days before those backups roll off.
Security and billing records — kept as long as the law requires, typically seven years for financial records.

Ask us to delete sooner and we will, subject to those legal retention rules.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, and to receive a copy in a portable format. Much of this you can do yourself: edit your profile, export your records, archive or delete data in the application.

For anything else, email [email protected] with “Privacy” in the subject. We answer within 30 days. We will not charge you for exercising a right, and we will not treat you differently for it.

If the request concerns customer data in someone else's workspace — for example, you are a contact in a ClientZapp user's client list — we will pass it to that workspace, who is the controller of that record, and help them act on it.

10. Security

Encryption in transit and at rest, workspace isolation enforced at the database query, role-based access control, and audited internal access. The detail is on the security page. No system is perfect; if we ever suffer a breach affecting your data, we will tell you promptly and tell you what we know.

11. Children

ClientZapp is a business tool and is not directed at anyone under 16. We do not knowingly collect data from children. If you believe we have, tell us and we will delete it.

12. Changes

We will post any change here and update the date at the top. If a change materially affects your rights, we will email workspace Owners before it takes effect.

13. Contact

Zamorins Solutions Inc., Iowa — US
[email protected]