--- title: "Privacy Policy" description: "Privacy Policy — last updated November 9, 2026" canonicalUrl: "https://zuplo.com/legal/privacy-policy" pageType: "legal" lastUpdated: "November 9, 2026" --- This Privacy Policy explains how Zuplo, Inc. ("Zuplo", "we", "us", or "our") collects, uses, and shares personal information when you visit our websites, create or use a Zuplo account, use our documentation, command-line tools, or AI assistant features, or otherwise interact with us. It also explains the choices and rights you have. Zuplo, Inc. is located at 600 1st Avenue Suite 330 PMB 29897, Seattle, Washington 98104-2246, USA. For personal information covered by this policy, Zuplo, Inc. is the controller (or "business" under U.S. state privacy laws). ## Scope This policy covers personal information that Zuplo controls, including information about visitors to zuplo.com and our other websites, people who sign up for or use a Zuplo account, people who use our documentation and AI assistant features, and people who contact us or whom we contact about our products. It does not cover data that our customers send through the Zuplo Cloud Service, such as API requests and responses, AI prompts and outputs, MCP traffic, request logs, or data in a customer's Developer Portal ("Customer Content"). We process Customer Content on behalf of our customers, as a processor or service provider, under our [Terms of Service](/legal/terms), our [Data Processing Agreement](/legal/dpa), or the customer's signed agreement with us. If you are an end user of one of our customers' APIs or Developer Portals, please contact that customer about how they handle your information. ## Information we collect ### Information you give us - **Account information**, such as your name, email address, company name, and login credentials, when you create an account or are invited to one. - **Billing information**, such as billing contact details and payment method. Payment card details are collected and stored by our payment processor, not by Zuplo. - **Communications**, such as the messages, chat conversations, support requests, and feedback you send us, and the information you give when you book a call, register for an event, or subscribe to updates. If you meet with us by video or phone, we may record and transcribe the meeting where permitted by law and with notice to participants. - **AI assistant content**, such as the questions and instructions you submit to Zuplo's AI assistant features (for example, the assistant in the Zuplo portal, the AI chatbot in our documentation, and our documentation MCP server) and the responses they generate. See [AI assistant features](#ai-assistant-features) below. ### Information collected automatically - **Usage Data**, such as your IP address, approximate location derived from your IP address, browser and device type, pages you visit, links you click, referring URLs, and the date and time of your visit. - **Product usage data**, such as which features you use, configuration and deployment events, request counts, and performance and error information about your use of the Cloud Service. Our product analytics may include recordings of your interactions with our websites and the Zuplo portal. - **Command-line tool telemetry.** The Zuplo command-line tools send usage and error information to us. You can turn this off by setting the `ZUPLO_DO_NOT_TRACK` environment variable. - **Cookies and similar technologies.** See [Cookies and analytics](#cookies-and-analytics) below. ### Information from other sources - **Sign-in providers.** If you sign in with a third-party account such as GitHub or Google, or through your organization's single sign-on provider, we receive the profile information that provider shares, such as your name, email address, and username. - **Visitor identification services.** We use third-party visitor identification services that use your IP address and other online identifiers to tell us the company that a visitor to our websites likely works for and, in some cases, the visitor's name and business contact information. - **Business and marketing sources.** We may receive or look up business contact information, such as name, job title, company, work email, and professional profile links, from data enrichment providers, partners, event organizers, and publicly available sources. ## How we use information We use personal information to: - provide, operate, maintain, secure, and support the Cloud Service and our websites; - create and manage accounts, process payments, and send transactional messages such as receipts, security alerts, and service notices; - respond to your questions and support requests; - provide our AI assistant features; - understand how our websites and products are used so we can improve them; - identify companies and people who may be interested in Zuplo, and send product updates, newsletters, and marketing messages, which you can opt out of at any time; - measure and improve our advertising and marketing campaigns; - detect, investigate, and prevent fraud, abuse, security incidents, and violations of our terms; and - comply with legal obligations, resolve disputes, and enforce our agreements. We do not use Customer Content to train artificial intelligence or machine learning models. If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for these uses are: performing our contract with you; our legitimate interests in running, securing, improving, and marketing our business; complying with legal obligations; and your consent where we ask for it, such as for non-essential cookies. Providing account and billing information is necessary to create an account; other information is optional. ## AI assistant features Zuplo's AI assistant features use large language models provided by third-party model providers to answer questions and help you work with Zuplo. The model providers we use are listed with our other subprocessors at [trust.zuplo.com/subprocessors](https://trust.zuplo.com/subprocessors). When you use an AI assistant feature, we send the content you submit to the model provider. In the Zuplo portal, the assistant may also send information it retrieves from your account to answer you, such as project files, configuration, request logs, and analytics. We keep AI assistant conversations and related records to provide the feature (including remembering earlier parts of a conversation), to support you, to keep the feature secure, and to understand how it is used. We do not use this content to train AI models, and we require our model providers not to use it to train their models. Don't submit sensitive personal information to AI assistant features. ## How we share information We share personal information only as follows: - **Service providers.** We share information with vendors that help us run our business, such as cloud hosting, authentication, payment processing, email and in-product notifications, customer support chat, product analytics, AI model providers, and monitoring providers. They may use it only to provide services to us. Our current list of subprocessors is available at [trust.zuplo.com/subprocessors](https://trust.zuplo.com/subprocessors). - **Advertising, analytics, and visitor identification partners.** When you visit our websites, partners that provide advertising measurement, analytics, and visitor identification services may collect information about your browsing through cookies, pixels, and similar technologies. See [Cookies and analytics](#cookies-and-analytics) and [U.S. state privacy rights](#us-state-privacy-rights). - **Your organization.** If you use Zuplo through an account owned by your employer or another organization, that organization's administrators can see your account information and activity in that account. - **Legal and safety.** We may disclose information if we believe it is required by law or legal process, or necessary to protect the rights, property, or safety of Zuplo, our customers, or others. - **Business transfers.** If Zuplo is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a different privacy policy. - **With your consent.** We may share information for other purposes with your consent. We do not sell personal information for money. ## Cookies and analytics We use cookies and similar technologies to keep you signed in, remember your preferences, understand how our websites are used, and measure our marketing. We use product analytics and tag management tools, including PostHog and Google Tag Manager, for these purposes. If you visit our websites from the European Economic Area, the United Kingdom, Switzerland, or Brazil, we ask for your consent before setting non-essential cookies. Elsewhere, analytics and marketing cookies are on by default, unless your browser sends a Global Privacy Control signal, which we treat as an opt-out of marketing cookies and of selling and sharing. Wherever you are, you can change your choices at any time with the **Your Privacy Choices** link in the footer of our website. You can also set your browser to refuse cookies, but some parts of our websites may not work without them. ## U.S. state privacy rights This section applies to residents of California and other U.S. states with comprehensive privacy laws, and supplements the rest of this policy. **Categories we collect.** In the past 12 months, we have collected the following categories of personal information, from the sources and for the purposes described above: | Category | Examples | | ---------------------------------------------- | ------------------------------------------------------------------------------------------- | | Identifiers | Name, email address, username, IP address, account and cookie identifiers | | Customer records and commercial information | Billing contact details, plan and purchase history | | Internet or other electronic network activity | Pages visited, links clicked, product usage, interaction recordings, command-line telemetry | | Approximate geolocation | Location derived from IP address | | Audio, electronic, or similar information | Recorded meetings, chat and support conversations, AI assistant conversations | | Professional or employment-related information | Company, job title, and business contact information | | Inferences | The company you likely work for and your likely interest in our products | | Sensitive personal information | Account login credentials | We disclose each of these categories for business purposes to the service providers and other recipients described in [How we share information](#how-we-share-information). We use sensitive personal information only to provide and secure your account, not to infer characteristics about you. **Selling and sharing.** We do not sell personal information for money. However, our use of advertising, analytics, and visitor identification partners on our websites may be considered "selling" or "sharing" personal information (for cross-context behavioral advertising) under some U.S. state laws. The categories involved are identifiers, internet or other electronic network activity, approximate geolocation, professional information, and inferences. You can opt out by enabling Global Privacy Control in your browser, by turning off **Marketing** cookies in **Your Privacy Choices** and by emailing [support@zuplo.com](mailto:support@zuplo.com) with the subject "Do Not Sell or Share". We do not knowingly sell or share the personal information of anyone under 16. **Retention.** We keep each category of personal information for the periods described in [Retention](#retention). **Your rights.** Depending on your state, you may have the right to know what personal information we have collected about you and how we use and disclose it; to access, correct, or delete it; to receive a copy in a portable format; and to opt out of selling, sharing, or targeted advertising. To exercise these rights, see [Your rights and choices](#your-rights-and-choices). If we deny your request, you may appeal by replying to our response; if your appeal is denied, you may contact your state attorney general. ## Retention We keep personal information for as long as your account is active and as needed to provide our services, and afterward as needed for the purposes described in this policy, including to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements. When we no longer need it, we delete or de-identify it, or, if that is not practical, we keep it secure and limit its use. ## Security We use administrative, technical, and physical safeguards designed to protect personal information. Zuplo is SOC 2 Type II audited, and more information is available at [trust.zuplo.com](https://trust.zuplo.com). No method of transmission or storage is completely secure, so we cannot guarantee absolute security. ## International transfers Zuplo is based in the United States, and our primary data stores are in the United States. To run our services efficiently, we and our service providers process, cache, and replicate personal information in other countries, including where our global network and service providers operate. When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. ## Your rights and choices Depending on where you live, you may have the right to: - access the personal information we hold about you; - correct inaccurate or incomplete information; - delete your personal information; - receive a copy of your information in a portable format; - object to or restrict certain processing, including processing for direct marketing; - opt out of targeted advertising, or of the "sale" or "sharing" of personal information as those terms are defined under some U.S. state laws; and - withdraw your consent, where we rely on consent, without affecting processing that happened before you withdrew it. To exercise these rights, email [support@zuplo.com](mailto:support@zuplo.com), which we monitor for privacy requests from anyone, whatever plan they are on. We may need to verify your identity before we respond. You can also use an authorized agent where the law allows it. We will not discriminate against you for exercising your rights. You can unsubscribe from marketing emails using the link in any such email. If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to complain to your local data protection authority. ## Children Our services are not directed to children under 16, and we do not knowingly collect personal information from them. You must be at least 18 years old to create a Zuplo account. If you believe a child has given us personal information, contact us and we will delete it. ## Links to other websites Our websites may link to websites we do not operate. We are not responsible for their privacy practices, and we encourage you to read their privacy policies. ## Changes to this policy We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. If we make material changes, we will notify you by email or with a notice in the product before they take effect. ## Contact us If you have questions about this Privacy Policy, email [support@zuplo.com](mailto:support@zuplo.com) or write to Zuplo, Inc., 600 1st Avenue Suite 330 PMB 29897, Seattle, Washington 98104-2246, USA.