Privacy Policy

Introduction

Zero To Advanced AI, Unipessoal Lda. ("ZAAI", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and our products (Horizon and Pliney).

This policy applies to all users of our platform, website visitors, and anyone who interacts with our services.

Information We Collect

Account Information: When you create an account, we collect your name, email address, company name, phone number, and billing information.

Usage Data: We collect information about how you use our platform, including features accessed, time spent, and interaction patterns.

Business Data: Through our platform integrations, we process your sales data, inventory data, product catalogs, and related business information necessary to provide forecasting services.

Technical Information: We collect IP addresses, browser type, device information, and log data to maintain and improve our services.

Communications: When you contact us, we retain records of your communications including support tickets and emails.

How We Use Your Information

Service Delivery: To provide, maintain, and improve our demand forecasting and inventory optimization services.

Model Training: To train and refine our machine learning models to provide accurate forecasts (your data is never shared with other customers).

Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.

Product Improvement: To analyze usage patterns and improve our platform's functionality and user experience.

Communications: To send you service updates, security alerts, and important account information.

Legal Compliance: To comply with legal obligations and protect our rights and those of our users.

Data Storage and Security

Your data is stored on secure servers in the European Union (Google Cloud Platform, europe-west1 region, Belgium).

We implement industry-standard security measures including encryption in transit (TLS 1.3) and at rest (AES-256).

We maintain a SOC 2 Type II-aligned security posture and comply with GDPR requirements.

Access to your data is restricted to authorized personnel who require it to perform their duties.

We conduct regular security audits and vulnerability assessments.

Enterprise customers may opt for on-premise deployment or private cloud options.

We do not sell your personal data or business data to third parties.

We may share data with: Service providers who assist in delivering our platform (e.g., cloud hosting, payment processing); Legal authorities when required by law or to protect our rights; Professional advisors (lawyers, auditors) under confidentiality obligations.

In the event of a merger or acquisition, your data may be transferred to the acquiring entity.

Sub-processors we use: Google Cloud Platform (cloud hosting, EU, europe-west1, Belgium); Slack (internal new-lead notifications to the team, US, covered by Standard Contractual Clauses; we send only the data you submitted via the contact form); Calendly (demo scheduling, US, covered by Standard Contractual Clauses); Google Analytics (website usage statistics, loaded only after you accept the cookie banner; Google Ireland Ltd. / Google LLC, covered by Standard Contractual Clauses).

If you are in the European Economic Area, you have the following rights:

Access: Request a copy of your personal data.

Rectification: Correct inaccurate or incomplete data.

Erasure: Request deletion of your data (subject to legal obligations).

Restriction: Request limitation of processing in certain circumstances.

Portability: Receive your data in a structured, machine-readable format.

Objection: Object to processing based on legitimate interests.

To exercise these rights, contact us at privacy@zaai.ai.

Data Retention

We retain your data for as long as your account is active or as needed to provide services.

After account termination, we retain data for 90 days for recovery purposes, then permanently delete it.

Financial records are retained for 7 years to comply with tax and accounting regulations.

Anonymized usage statistics may be retained indefinitely for product improvement.

Cookies and Tracking

On zaai.ai we set a small number of first-party cookies. None are used for third-party advertising. Cookies that require your consent (set only after you accept the banner):

zv: visitor identifier (UUID), retained for two years. Lets us recognize repeat visits.

zft: first-touch attribution (campaign source, medium, referrer, landing page), retained for two years. Set once on your first visit and not updated thereafter.

zlt: last-touch attribution (same shape as zft), retained for thirty days. Refreshed when you arrive from a new campaign or referrer.

Google Analytics (_ga and _ga_*): website usage statistics, retained for up to two years. The Google Analytics script is loaded only after you accept; if you reject or dismiss the banner it never loads and sets no cookies.

Strictly necessary cookies, set for all visitors regardless of consent:

zs: transient session identifier (UUID), expires after thirty minutes of inactivity. Groups the page views of a single visit; not used for cross-session tracking.

zc: your cookie-consent choice (accepted or rejected), retained for one year so we can honor it.

_zclass: a technical cookie that expires after sixty seconds, carrying our own bot-versus-browser classification to our first-party page-view beacon. It contains no identifier.

If you reject the consent banner, no consent-gated cookie above is set, Google Analytics never loads, and we collect no cross-session attribution — only the strictly necessary cookies described above. Contact-form submissions still work and are stored on the basis of legitimate interest in responding to your inquiry.

You can manage cookie preferences through the banner on zaai.ai or your browser settings.

International Data Transfers

Your data is primarily stored and processed in the European Union.

If we transfer data outside the EU, we ensure appropriate safeguards through Standard Contractual Clauses or equivalent mechanisms.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the platform.

Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or our data practices, contact us:

Email: privacy@zaai.ai

Address: Zero To Advanced AI, Unipessoal Lda., Candal Park, Fração AL-28, Alameda da Empresa 64, 4400-133 Vila Nova de Gaia, Portugal

Data Protection Officer: dpo@zaai.ai