Privacy Policy

1. Who we are

YouZipp is a digital ecosystem accessible through youzipp.com, its subdomains, applications, and other associated platforms.

The ecosystem may include services related to organization, productivity, communication, artificial intelligence, content and image processing, commerce, information, opportunities, and other digital functionality.

Available services may vary depending on country, language, region, and the development stage of each product.

2. Scope of this Policy

This Policy applies to personal data processing carried out in connection with YouZipp services.

It may apply to registered users, visitors, customers, individuals interacting with platform features, and users who authorize integrations with third-party services.

Certain services may provide additional privacy notices where necessary.

3. Data we may collect

Depending on the service used, YouZipp may collect different categories of information.

3.1. Account and contact information

This may include:

• name;
• email address;
• account information;
• language and preferences;
• other information voluntarily provided by the user.

3.2. Authentication information

Where applicable, information related to account creation and authentication may be processed.

Passwords should be stored using appropriate technical protection mechanisms and should not be stored in plain text.

Where users authenticate through third-party services, YouZipp may receive identifiers necessary to enable access.

3.3. Technical information

This may include:

• IP address;
• browser type;
• operating system;
• device type;
• access date and time;
• pages or features accessed;
• technical identifiers necessary for platform operation and security.

3.4. Usage data

YouZipp may collect information relating to how users interact with the services, including features used, actions performed, settings, and service performance.

3.5. User-provided content

Some services may allow users to provide or upload:

• text;
• prompts;
• images;
• files;
• tasks;
• organizational information;
• messages;
• other content required to provide the requested functionality.

The content processed will depend on the particular service used.

3.6. Payment-related information

Where paid services are purchased, information relating to the transaction, selected plan, payment status, amounts, and relevant administrative data may be processed.

Full payment card or payment method details may be processed directly by specialized payment providers rather than stored in full by YouZipp.

4. How we use data

Data may be used to:

• provide and operate services;
• create and manage accounts;
• authenticate users;
• perform requested functions;
• save preferences and settings;
• process user-provided content;
• provide support;
• process payments and subscriptions;
• prevent fraud and abuse;
• protect platform security;
• identify technical problems;
• improve performance and usability;
• comply with legal obligations;
• communicate important service-related information.

Where permitted by applicable law, certain information may also be used for statistical analysis and product improvement.

5. Legal bases for processing

Where Brazilian data protection law applies, personal data processing will follow the legal bases established under the Brazilian General Data Protection Law — LGPD.

Depending on the circumstances, processing may take place for reasons including:

• performance of a contract or steps related to a service requested by the user;
• compliance with legal or regulatory obligations;
• exercise of legal rights;
• fraud prevention and security;
• legitimate interests, where applicable;
• user consent, where required.

The applicable legal basis will depend on the specific purpose of processing.

6. Cookies and similar technologies

YouZipp may use cookies, local storage, and similar technologies to support platform operation.

These technologies may be used to:

• maintain sessions;
• identify preferences;
• remember language and settings;
• improve security;
• measure performance;
• understand, in aggregate, how services are used.

Strictly necessary cookies may be used to provide essential functionality.

Where required by applicable law, additional categories of cookies will depend on user choices or consent.

7. Advertising

Certain areas of YouZipp may display advertising, sponsored content, or commercial links.

The use of cookies, identifiers, or other advertising-related technologies will be subject to this Policy and the rules of the relevant providers.

Where applicable, users may be able to control certain advertising personalization options through tools made available by those providers.

8. Sharing of data

YouZipp does not sell users' personal data.

Data may be shared where necessary to operate the services, including with:

• hosting and infrastructure providers;
• database services;
• authentication providers;
• payment processors;
• email providers;
• artificial intelligence providers;
• storage services;
• security services;
• integration platforms selected or used by the user;
• public authorities where legally required.

Third parties receive only the information necessary to perform their respective functions, subject to applicable contracts, policies, and legal requirements.

9. Artificial intelligence providers

Certain YouZipp features may use AI models or services operated by third parties.

When a user uses such a feature, content necessary to perform the requested operation may be transmitted to the relevant technology provider.

YouZipp will seek to use appropriate providers and limit sharing to what is necessary to provide the requested functionality.

The data transmitted will depend on the service used and the user's action.

10. Third-party integrations

YouZipp may allow users to connect their accounts to external services.

Such integrations should access only the information necessary for functionality authorized by the user.

Users may be able to revoke permissions through the external service or through available YouZipp settings.

Each external service is also governed by its own privacy policies and terms.

11. Use of Google API data

Certain YouZipp services, including features of Zipp Organizer, may request permission to access data from Google services.

Access will occur only after user authorization and will be limited to permissions necessary to perform features explicitly requested by the user.

YouZipp's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information obtained through Google APIs will not be used for purposes incompatible with the functionality authorized by the user.

Where applicable, users may revoke YouZipp's access through the security settings of their Google account.

12. Data storage

Data may be stored on YouZipp infrastructure or with contracted infrastructure providers.

The physical location of servers may vary depending on the service and provider used.

Data will be retained for as long as necessary to:

• provide the service;
• maintain an active account;
• comply with legal obligations;
• resolve disputes;
• prevent fraud;
• exercise legal rights;
• protect system security and integrity.

Where data is no longer required or lawfully retained, it may be deleted or anonymized, subject to applicable legal exceptions.

13. International data transfers

Certain technology providers used by YouZipp may operate infrastructure outside Brazil.

As a result, some information may be processed or stored in other countries.

Where applicable, YouZipp will adopt mechanisms consistent with applicable data protection laws for such transfers.

14. Security

YouZipp adopts technical and administrative measures intended to protect personal data against:

• unauthorized access;
• loss;
• destruction;
• improper modification;
• unauthorized disclosure;
• other inappropriate forms of processing.

Measures may include access controls, authentication, encryption where appropriate, security logs, infrastructure protections, and secure development practices.

However, no internet-connected system can provide an absolute guarantee against security incidents.

15. Security incidents

If a security incident involving personal data occurs, YouZipp will assess its nature, impact, and associated risks.

Where required by applicable law, affected individuals and competent authorities may be notified.

16. Children's data

YouZipp services are not specifically designed to intentionally collect personal data from children.

Where use by minors requires consent, authorization, or supervision from parents or legal guardians under applicable law, those requirements must be observed.

If YouZipp identifies inappropriate processing of children's data, steps may be taken to restrict or delete such information.

17. Data subject rights

Where the LGPD applies, individuals may exercise rights relating to the processing of their personal data, subject to applicable legal conditions.

These rights may include:

• confirmation that processing occurs;
• access to personal data;
• correction of incomplete, inaccurate, or outdated information;
• anonymization, blocking, or deletion of unnecessary or unlawfully processed data;
• data portability, where applicable;
• information regarding data sharing;
• information regarding the consequences of withholding consent;
• withdrawal of consent;
• objection to processing, where applicable;
• review of certain automated decisions where provided by law.

The exercise of certain rights may be subject to legal limitations or requirements.

18. Data deletion and account closure

Users may request deletion of their account and associated personal data where applicable.

Certain information may remain stored where necessary to comply with legal obligations, prevent fraud, exercise legal rights, or for other purposes permitted by applicable law.

19. Automated decision-making

Certain services may use automated processing to provide results, recommendations, classifications, or other functionality.

Where a decision based solely on automated processing of personal data affects an individual's interests, rights provided under applicable law will be observed.

20. Technical and security logs

YouZipp may retain technical logs necessary for security, abuse prevention, incident investigation, service operation, and compliance with legal obligations.

Such logs may include information related to access and activities performed on the platform.

21. Email communications

YouZipp may use users' email addresses for:

• authentication;
• account recovery;
• security alerts;
• information relating to subscribed services;
• important service updates;
• support.

Promotional communications, where used, will be subject to user preferences and applicable law.

22. Links to external websites

YouZipp services may contain links to external websites, services, or platforms.

YouZipp does not control the privacy practices of those third parties.

Users should review the relevant privacy policies before providing information on external services.

23. Changes to this Policy

This Privacy Policy may be updated periodically to reflect changes in:

• services;
• laws and regulations;
• technologies;
• providers;
• internal data processing practices.

The current version will remain available on this page.

Where significant changes require specific notice, YouZipp may use appropriate channels to notify users.

24. Applicable law

Personal data will be processed in accordance with applicable law.

For users and operations subject to Brazilian law, this includes the Brazilian General Data Protection Law — LGPD and other applicable regulations.

25. Privacy contact

For questions, requests, or exercise of privacy and data protection rights, users may contact:

info@youzipp.com

YouZipp may request additional information where necessary to verify the identity of the requesting individual and protect personal data against fraudulent requests.