Privacy Policy
Last updated: 8 May 2025
Ninzap ("Ninzap," "we," "us," or "our") operates the Social Scheduler web application, chat‑bot integrations, and related services available at ninzap.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you use the Service, and describes your rights and choices in relation to that information.
1 Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account Information | Name, display name, email address, password hash, preferred language, time zone. | You provide it when you register or update your profile. |
| Team & Collaboration Data | Team names, invitations, role assignments. | You provide it or it is generated when you use collaboration features. |
| Content & Media | Text, images, videos, links, thumbnails, scheduled timestamps, target social accounts. | You upload or create it while using the Service. |
| Social‑Platform Credentials | OAuth access tokens, page IDs, profile IDs. | Collected through Facebook, Instagram, TikTok, Zalo OAuth or equivalent flows, with your explicit permission. |
| Payment & Billing | Subscription plan, invoices, last 4 digits of card, billing address. Full card data is processed and stored by Stripe; Ninzap never stores your complete payment details. | Stripe (our payment processor) forwards limited billing metadata to us. |
| Usage Data | Log files, device type, browser, IP address, pages viewed, referrer, time spent, error messages. | Collected automatically via server logs, cookies, and similar technologies. |
| Support & Communications | Help‑desk tickets, emails, chat messages, survey responses. | You provide it when you contact us. |
We do not knowingly collect personal data from children under 13 (or older, if applicable law sets a higher minimum age).
2 How We Use Information
We process the information described above to:
- Provide and maintain the Service — authenticate you, schedule your posts, store media, and deliver content to social platforms at the times you request.
- Process payments — manage subscriptions, issue invoices, handle failed payments, and detect fraud.
- Improve and personalize the Service — develop new features, fix bugs, analyze usage trends, and tailor content to your language or time zone.
- Communicate with you — send transactional emails, security alerts, onboarding guides, and (with your consent where required) newsletters or promotional messages.
- Comply with legal obligations — tax, accounting, reporting, court orders, and regulatory requirements.
- Protect the Service and our users — enforce our Terms of Service, prevent spam, abuse, and security incidents.
2.1 Legal Bases (EEA/UK users)
If you reside in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:
| Purpose | Legal basis |
|---|---|
| Provide, secure, and bill for the Service | Performance of a contract |
| Improve the Service, prevent abuse | Legitimate interest |
| Marketing communications, non‑essential cookies | Consent |
| Compliance, dispute resolution | Legal obligation |
3 Cookies & Tracking Technologies
We use first‑ and third‑party cookies, local storage, and web beacons to remember your login session, keep track of in‑app state, measure campaign performance, and analyze site traffic. You can manage cookies in your browser settings; disabling them may affect core functionality.
4 How We Share Information
We do not sell your personal information. We share it only as necessary:
- Service Providers. Hosting (e.g., AWS), database, email delivery, analytics, error monitoring (e.g., Sentry), and payment processing (Stripe). These providers are bound by confidentiality and data‑processing agreements.
- Social Platforms. We transmit your scheduled content and associated metadata to Facebook, Instagram, TikTok, and Zalo using their official APIs, strictly as you instruct.
- Business Transfers. If we merge, acquire, or transfer assets, your information may be transferred as part of that transaction, subject to this Policy.
- Legal & Safety. We may disclose information if required by law or to protect the rights, property, or safety of Ninzap, our users, or the public.
5 International Data Transfers
We store and process data on servers that may be located outside your country. Where required, we rely on Standard Contractual Clauses or comparable safeguards to protect personal data transferred internationally.
6 Data Retention
We retain information for as long as your account is active or as needed to fulfill the purposes in this Policy, unless a longer retention period is required or permitted by law. You may delete posts, media, or your entire account at any time from within the application.
7 Security
We employ industry‑standard safeguards such as HTTPS/TLS in transit, encryption at rest for sensitive fields, least‑privilege access controls, periodic security audits, and continuous monitoring. No Internet transmission or storage system is 100 % secure, so we cannot guarantee absolute security.
8 Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete personal data we hold about you.
- Object to or restrict our processing of your data.
- Withdraw consent at any time (this does not affect prior processing).
- Receive a portable copy of your data.
- Lodge a complaint with your local data‑protection authority.
You can exercise most rights from your account settings. For other requests, email [email protected].
9 Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us personal information, please contact us so we can delete it.
10 Links to Other Sites
Our Service may contain links to third‑party websites or services that we do not control. This Policy does not apply to those sites; please review their privacy statements.
11 Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version and update the "Last updated" date. If changes are material, we will provide additional notice (e.g., by email or in‑app banner) and, where required, obtain your consent.
12 Contact Us
For any questions about this Policy or our data practices, please email [email protected] or write to: Ninzap — Privacy Team, 213 Chu Van An, ward 26, Binh Thanh district, Ho Chi Minh City, Vietnam.