Privacy Policy

Your privacy is important to us. Learn how we protect your data.

Document Status

Last Updated: November 10, 2025

Current Version

Table of Contents

1. Introduction

At Zapic, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and share data when you use our AI-powered social media automation services.

Our platform leverages artificial intelligence and advanced automation technologies to help users efficiently manage and optimize their social media presence. As part of this process, we may collect certain information to enhance functionality, personalize user experiences, and improve overall service performance.

By using the Zapic Social Automation Platform, you acknowledge and agree to the data practices outlined in this Privacy Policy. We encourage you to read it carefully and contact us if you have any questions or concerns regarding your privacy rights.

1.1. Data Controller

The entity responsible for determining the purposes and means of processing personal data under this Privacy Policy is:

Zapic (services provided by self-employed professionals established in Spain)
Contact email: contact@zapic.ai

Zapic acts as the data controller within the scope of the provision of its digital services. If you have any questions regarding how we process your personal data, you can contact us via the email address above.

2. Information We Collect

To provide and enhance our social media automation services, we collect the following types of information:

2.1. Account Information:

  • Basic profile details, including your name, email address, phone, and username.
  • Other information voluntarily provided by the user.
  • Business-related information, such as company name and website URL, if voluntarily provided.

2.2. Usage Information:

  • Interactions with our platform, including features used and preferences set.
  • Social media content, scheduling preferences, and automation settings.
  • Performance analytics and engagement metrics to optimize automation and improve recommendations.
  • We may also store technical data, such as device type, operating system, IP address, browser type, and connection details, to ensure security and platform functionality.

2.3. Children's Data

Our services are intended for users over 18 years old. We do not knowingly collect or process data from minors. If we become aware that a minor's data has been collected, we will delete it immediately.

3. Social Media Platform Data

When you connect your social media accounts to the Zapic Social Automation Platform, we collect and process certain data from these platforms to enhance automation, analytics, and optimization features.

It is crucial to note that we do not store your social media passwords. Authentication is handled through OAuth, a secure industry-standard protocol that grants us permission to interact with your accounts without requiring direct access to your login credentials.

All data accessed is handled in compliance with each platform's API policies and used strictly to enhance automation features. We never access private messages or sensitive account information beyond what is explicitly authorized by you.

3.1. Profile information from connected social media accounts

  • Public profile details, including your name, profile picture, username, and biography (if applicable).
  • Account ID and authentication tokens (securely managed and used solely for API access).
  • Account settings and linked pages/business profiles (if applicable).
  • Follower and connection related data, such as follower count and basic engagement history (as permitted by platforms policies).

3.2. Post engagement metrics

  • Interactions such as likes, comments, shares, and reactions on published content.
  • Click-through rates (CTR), impressions, and reach for posts, stories, or ads.
  • Performance comparisons between automated and manually posted content.
  • Engagement trends over time to optimize scheduling and content strategy.

3.3. Audience insights as provided by the platforms

  • Demographic data (age range, gender distribution, geographic location—when provided by the platform).
  • Peak engagement times and audience activity patterns.
  • Interest-based insights to refine targeting strategies.
  • Follower growth trends, including new follows/unfollows.

4. How We Use Your Information

We collect and process your information to operate, enhance, and improve our AI-powered social media automation services.

The specific purposes include:

4.1. Service Operation

  • Providing and maintaining our automation platform.
  • Processing and executing your scheduled social media actions.
  • Analyzing content performance and generating insights.
  • Offering technical support and customer assistance.

4.2. Platform Integration

  • Securely connecting with social media platforms on your behalf via OAuth authentication (we do not store passwords).
  • Scheduling, automating, and publishing content across multiple platforms.
  • Managing automated interactions, such as engagement responses and scheduled updates.
  • Providing analytics and reporting on your social media activity.

4.3. Service Improvement

  • Enhancing automation features through AI and machine learning.
  • Developing new functionalities based on user needs and feedback.
  • Improving user experience, efficiency, and platform usability.
  • Identifying and resolving technical issues to ensure smooth performance.

4.4. Information Sharing

We share certain data only as necessary to provide our services while ensuring compliance with platform policies and data protection regulations.

We may share relevant data with third-party vendors who support our services, including:

  • Cloud hosting providers (for secure storage and platform operation).
  • Analytics services (to improve automation and performance insights).
  • Customer support tools (to assist with inquiries and troubleshooting).
  • Payment processors (for subscription billing and transactions).

4.5. Social Media Platforms

We share data with connected social media platforms only to the extent required for requested functionalities, following their respective terms and privacy policies.

We do not sell, trade, or share your personal information with unauthorized third parties. If you have any concerns about data sharing, please contact us.

This approach applies to all connected social media platforms, and we strictly adhere to each platform's terms, API policies, and data protection requirements. If you have any concerns about how your data is handled, please contact us.

4.6. Legal Basis for Data Processing (GDPR)

We process personal data based on the following legal grounds:

  • Contract performance: to provide and operate the Zapic platform and its features.
  • Legitimate interest: to ensure platform security, prevent fraud, improve functionality, and provide customer support.
  • Consent: for optional features such as marketing communications, analytics cookies, and certain types of social media integrations.
  • Legal obligation: to comply with applicable laws, including tax and consumer protection regulations.

Where processing is based on consent, you may withdraw such consent at any time without affecting the lawfulness of the processing carried out before withdrawal.

4.7. Automated Processing and Use of Artificial Intelligence

Zapic uses artificial intelligence ("AI") models provided through third-party vendors, including OpenRouter, to analyze your content, generate recommendations, and support social media automation features. This may include:

  • Analyzing your posts, engagement metrics, and publishing behavior
  • Suggesting content improvements and scheduling optimizations
  • Assisting in customer support through AI chat functionality
  • Automating certain actions when explicitly enabled by the user

All AI-assisted interactions and messages may be stored securely in our systems to improve the Service, resolve technical issues, and provide user history.

We do not use AI to make decisions that produce legal or similarly significant effects without human oversight.

Cookies and Similar Technologies: We use cookies and similar tracking technologies to improve platform functionality and analytics. For more information about how we use cookies and similar technologies, please refer to our Cookie Policy available on our website. For more details, including how to manage or revoke consent, please review our Cookie Policy.

6. Data Retention

We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with our legal, regulatory, and operational obligations.

We keep your data as long as you maintain an active account with us. If you choose to deactivate or delete your account, we will retain your information only to the extent required for legal compliance or for any legitimate business purposes that may persist after account closure.

We retain your information for the duration necessary to continue offering our automation services, including performance analysis, content scheduling, and interaction management, as well as any ongoing customer support or service-related needs.

We retain your information if necessary for legitimate business interests, including fraud prevention, dispute resolution, data analytics, security purposes, and compliance with contractual obligations.

Once the retention period has ended, or upon your request, we will take appropriate steps to either anonymize, delete, or securely dispose of your personal information, in accordance with our legal obligations and internal data retention policies.

7. International Data Transfers

We may transfer personal data outside the European Economic Area (EEA) when necessary to provide our services. In such cases, we ensure that adequate safeguards are applied, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

You may request a copy of the applicable safeguards by contacting us at contact@zapic.ai.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure data storage systems, regular security assessments, and internal protocols designed to ensure confidentiality, integrity, and availability of the information we process.

Despite our efforts, no security system is completely infallible. In the event of a security breach that could affect your rights and freedoms, we will notify both you and the competent supervisory authority in accordance with applicable data protection law.

9. Your Rights

As a user, you have certain rights regarding your personal information. We are committed to supporting these rights and ensuring transparency and control over your data.

Your rights include:

  • Right to Access Your Personal Information: You have the right to request access to the personal information we hold about you. Upon request, we will provide a summary of your data, including how it has been collected, processed, and shared.
  • Right to Correct Inaccurate Data: If any of the personal information we hold is inaccurate or incomplete, you have the right to request that we correct or update it.
  • Right to Request Deletion of Your Data: You may request the deletion of your personal data at any time. We will honor your request, subject to any legal or regulatory obligations that require us to retain certain data.
  • Right to Opt-Out of Data Sharing for Advertising: You have the right to opt-out of the sharing of your data for advertising purposes.
  • Right to Export Your Data: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent for Processing: If we rely on your consent to process your data, you have the right to withdraw that consent at any time.
  • Right to lodge a complaint: You have the right to file a complaint with the Spanish Data Protection Authority (AEPD) if you believe your rights have not been respected: www.aepd.es

To exercise any of these rights, please contact us through the communication channels provided. We will respond to your requests in accordance with applicable data protection laws.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to us:

Email: contact@zapic.ai

We are committed to addressing your inquiries promptly and ensuring your privacy concerns are handled appropriately.

11. Changes to This Policy

Our Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or other relevant factors. In the event of any significant modifications, we will inform you through one or more of the following methods:

  • Sending a notification to your registered email address
  • Providing an in-platform alert within our services
  • Posting an official announcement on our website

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal data.

By using our Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.