📜 Privacy Policy (Datenschutzerklärung)

1. Controller

ZEUZ IT LTD
4 Raven Road, Unit 1C3-838
London, E18 1HB
United Kingdom

2. General Information

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR and UK Data Protection Act 2018) as well as this privacy policy.

Personal data is any information with which you can be personally identified.

3. Collection and Processing of Personal Data

We only process personal data if this is legally permitted or you have consented. This includes in particular:

Data when visiting our website (e.g., IP address, browser, time)
Information when using our SaaS services (account, usage, and log data)
Contact details for support inquiries
Payment and billing data for orders or subscriptions

4. Purposes of Data Processing

We process personal data for the following purposes:

Provision and operation of our web applications and SaaS platforms
User management, subscriptions, invoicing
Customer communication (support, notifications)
Fulfillment of legal obligations (e.g., tax retention)

5. Legal Bases

Processing is carried out on the following legal bases in accordance with Art. 6 GDPR:

a) Consent (e.g., for newsletters or cookie tracking)
b) Performance of a contract or pre-contractual measures (e.g., registration, use of our SaaS)
c) Legal obligation (e.g., tax requirements)
f) Legitimate interest (e.g., IT security, improvement of our services)

6. Hosting and Server Location

Our websites and platforms are hosted by Hostinger International Ltd.
The servers are located in Germany.

Hostinger acts as a processor in accordance with Art. 28 GDPR.
A corresponding Data Processing Agreement (DPA) has been concluded with Hostinger.

7. Databases and Authentication

For data storage and user management, we use Supabase (PostgreSQL, Auth, Storage).
For authentication, we use NextAuth.js.

Supabase acts as a processor within the meaning of Art. 28 GDPR.
All data is stored within the EU.

8. Payment Processing (Stripe)

For payment processing, we use the payment service provider Stripe Payments Europe Ltd,
1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Stripe processes personal data (name, email, billing address, payment information) to carry out payments and for fraud prevention.
Further information can be found in the Stripe privacy policy:
👉 https://stripe.com/privacy

The transmission to Stripe is based on Art. 6 (1) (b) GDPR (performance of a contract).

9. Email Sending

For system emails (e.g., confirmation, password reset, invoices), we use Nodemailer via our own SMTP servers.
There is no transfer to external mass mailing services.

10. Cookies and Analysis Tools

Our websites use cookies to enable basic functions (e.g., login, language settings).
We refrain from using invasive tracking cookies (e.g., Google Analytics, Meta Pixel).

Technically necessary cookies are stored in accordance with Art. 6 (1) (f) GDPR.
You can delete optionally set cookies at any time in your browser settings.

11. Storage Duration

Personal data will be deleted as soon as the purpose of storage no longer applies,
provided there are no statutory retention obligations (e.g., tax periods of up to 10 years).

12. Your Rights

You have the right at any time to:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)
Withdrawal of your consent (Art. 7 (3) GDPR)

Contact: support@zeuz-it.com

13. Data Security

We use SSL/TLS encryption and carry out regular security updates
to protect your data against unauthorized access or loss.

14. AI Chatbot

On our website, we use an AI-powered chatbot to automatically answer visitor inquiries. The chatbot is provided to us by ZEUZ IT LTD (Company No. 16592489), 4 Raven Road, Unit 1C3-838, London E18 1HB, United Kingdom, as a processor.

Data processed: Your chat inputs (free text, potentially personal data if you enter it) as well as technical connection data (e.g. IP address, session ID, timestamp).

Purpose: Automated answering of your questions based on the information we provide, customer communication and support.

Legal basis: We obtain your consent before the chat begins (Art. 6 (1) (a) GDPR). Consent is voluntary and can be withdrawn at any time with effect for the future by no longer using the chat.

Recipients / sub-processors:

ZEUZ IT LTD (Company No. 16592489), 4 Raven Road, Unit 1C3-838, London E18 1HB, United Kingdom — operation of the chatbot (processor).
Mistral AI, Paris/France (EU) — AI language model and knowledge base. Processing takes place within the EU; no training with your data; the conversation is not stored permanently.
Cloudflare — protection of the chat interface (bot/abuse protection, without tracking cookies).
Supabase (Frankfurt/EU) and n8n (Frankfurt/EU) — technical configuration and routing.

Storage duration: No chat histories are stored permanently. Your inputs are processed exclusively to answer you during the current session.

AI transparency (Art. 50 EU AI Act): You are communicating with an artificial intelligence (AI), not a human. Responses may contain errors.

No automated decision-making: The chatbot does not make any automated decisions with legal effect within the meaning of Art. 22 GDPR.

Note: Please do not enter sensitive personal data (e.g. health, financial or ID data) into the chat.

15. Changes to this Privacy Policy

We reserve the right to update this privacy policy if necessary,
especially in the case of new legal requirements or technical changes.

📅 Status: December 2025