Privacy Policy

Zaza Draft is a product of Zaza Technologies ("Zaza", "we", "us"). We build tools to help teachers write clear, compassionate parent messages and report comments efficiently.

Controller: Zaza Technologies

Contact: help@zazatechnologies.com

This policy applies to zaza-draft.com and related sites/apps, including marketing pages, in-product experiences, and support channels.

Account & identity: name, email, role, school name (optional), language, authentication IDs.

Usage: pages visited, features used, device/browser information, approximate location (from IP).

Content you provide: prompts, text pasted/typed, message templates, saved resources.

Support: messages you send to our help desk, bug reports, feedback.

Payments: handled by our payment provider; we do not store full card details on our servers.

Provide and improve Zaza Draft features.

Personalise the product (e.g., language, recently used templates).

Prevent abuse and ensure safety (rate limits, anomaly detection).

Communicate with you (service emails, updates, support).

Comply with legal obligations and enforce terms.

We rely on one or more of: contract (to deliver the service), legitimate interests (product safety, analytics, improvement), consent (optional marketing and certain cookies), and legal obligation.

To generate and improve writing assistance, we use reputable AI providers and infrastructure partners as processors. We restrict data sharing to what is necessary to provide the service. Examples include:

Model providers (e.g., OpenAI, Anthropic): prompt/response processing.

Hosting & infrastructure (e.g., cloud and CDN providers).

Auth & database (e.g., managed identity, storage, and logging).

Email (e.g., Brevo) for transactional messages.

We do not sell personal data. We use safeguards such as DPAs and, where needed, Standard Contractual Clauses.

We use essential cookies for login and security, and (with consent where required) analytics to understand usage and improve the product. You can manage non-essential cookies via our cookie banner or browser settings.

We may share data with subprocessors under contract, professional advisers, or if required by law. When data is transferred outside the UK/EU, we rely on approved safeguards (e.g., SCCs).

We keep personal data for as long as necessary to provide the service and meet legal, accounting, or reporting requirements. You can request deletion of your account data (see Your rights).

We use industry-standard security measures, encryption in transit, access controls, and regular reviews. No method is 100% secure; please keep your credentials confidential.

Under UK/EU GDPR you can request access, correction, deletion, restriction, portability, and object to certain processing. You can also withdraw consent where we rely on consent.

Contact help@zazatechnologies.com to exercise rights. You may lodge a complaint with your local data authority.

Zaza Draft is built for educators. It is not directed to children. Please do not submit children's personal data.

We may update this policy. We will post changes here and adjust the "Last updated" date.

Questions or requests: help@zazatechnologies.com