Privacy Policy — Zora7 Suite

Product owner: Zora7 Suite.

Commercial name: Zora7 / Zora7 Suite.

Privacy and data email: privacy.zora7@gmail.com.

Technical support email: suport.zora7@gmail.com.

Customer care email: sac.zora7@gmail.com.

Website: https://zora7.com.

If required by applicable local law, additional identification details may be provided upon request through the official channels above.

This policy covers data processed when you access the zora7.com website, create an account, sign in to or use the Zora7 Suite app, start a free trial, subscribe, restore purchases or manage a subscription, use app modules, including free, premium, security and backup features, contact support, customer care or privacy channels, or request account and/or data deletion.

This policy applies to both the Zora7 Suite application and the zora7.com website. In the event of conflict between this policy and promotional materials, this policy prevails.

This policy does not replace the terms, privacy policies or notices of third parties that process data independently, such as Google Play, RevenueCat and Supabase. However, it explains transparently how these services participate in Zora7 operations.

Depending on how you use Zora7, we may collect or receive categories such as account and authentication data, including name, email address, internal user identifier, login and session information, and technical identifiers related to the account.

We may also collect or receive subscription, billing and in-app purchase data, such as subscription status, subscribed plan, product identifiers, purchase history, renewal, expiration, trial, restore or cancellation history, and technical identifiers needed to validate entitlement and access.

We may collect app usage and interaction data, such as modules accessed, actions performed, preferences, settings, and feature access status, for example free, premium and cloud backup eligibility.

Where applicable, we may process backup, security and account integrity data, including data needed for local backup, cloud backup when eligible, security settings, records related to PIN, authentication and account protection mechanisms, as well as account and data deletion requests.

We may also collect technical, device and diagnostic data, such as device type, operating system, app version, language, approximate time zone, technical identifiers needed for operation, and performance, failure, error and diagnostic data when processed by our infrastructure or contracted providers.

If you contact us, we may collect your name, email, message content, attachments and support history.

When you browse zora7.com, we may collect visited pages, language, basic navigation data and minimum technical information necessary for website security, performance and operation.

We may use your data to create, maintain and protect your account, authenticate you and allow app usage, enable or restrict features according to your plan, trial, subscription or entitlement, process, validate and restore purchases and subscriptions, enable backup, sync and recovery where applicable, and provide technical support, customer care and responses to requests.

We may also use your data to comply with legal, regulatory, tax, accounting, security and anti-fraud obligations, maintain, fix, monitor, protect and improve Zora7, communicate important changes regarding accounts, subscriptions, security, support and policies, and investigate abuse, misuse, failures, incidents or violations of our terms.

We do not sell your personal data to third parties.

Where required by applicable law, we process personal data based on one or more of the following legal bases: performance of a contract or pre-contractual measures, compliance with legal or regulatory obligations, exercise of rights, legitimate interests where permitted by law and balanced against your rights, and consent where legally required.

The applicable legal basis may vary depending on your country of residence and the nature of the processing activity.

We may share data with essential infrastructure and operations providers that help us operate Zora7, such as Google Play / Google for app distribution, in-app purchases, subscriptions, billing, restores and platform requirements, RevenueCat for the technical operation of subscriptions, entitlements, validation and purchase status, Supabase for authentication, backend, database, storage, APIs and related resources, and hosting, email, security, support, monitoring or infrastructure providers where applicable.

These third parties process data according to their own policies and/or applicable agreements.

We may also share data to comply with law, court order, regulatory obligation or valid request from a competent authority, protect our rights, users, systems, property and security, prevent fraud, abuse, intrusion, attacks or illegal activity, or in the event of a merger, acquisition, reorganization, asset sale or similar transaction, as permitted by law.

We do not share data beyond what is necessary for the purposes described in this policy.

Zora7 Suite may offer premium features through subscriptions, including a free trial when available.

Payments may be processed by Google Play.

The technical operation of purchase status, trial, restore, expiration and entitlement may involve RevenueCat.

We may receive information needed to confirm whether your subscription is active, in trial, restored, expired or canceled.

We do not fully store complete card payment details when processing occurs through a third-party store or payment platform. The main financial processing follows the policies of the relevant platform.

We keep data only for as long as necessary to provide the service, maintain the account and its features, comply with contractual, legal, regulatory, tax or security obligations, resolve disputes, prevent fraud and abuse, and allow restoration, auditing, support and operational continuity where justified.

Retention periods may vary depending on the type of data, feature used, account status, legal requirements of the applicable country, and technical, security or rights-defense needs.

When immediate full deletion is not possible, we may anonymize data, block active use, and retain only the minimum required by law, security, auditing or fraud prevention.

If Zora7 allows account creation, you may request deletion of your account and/or data.

You may request deletion within the app in Settings > Security > Delete my account and data, by emailing privacy.zora7@gmail.com, or through official support channels where needed.

We also provide a public page with specific information about the deletion process at: https://zora7.com/en/account-deletion.

Once your request is confirmed, we will take reasonable steps to delete or anonymize personal data associated with your account, deactivate account access where applicable, and stop non-essential processing.

We may retain certain data where necessary to comply with legal obligations, prevent fraud and abuse, exercise or defend rights, and meet accounting, tax, regulatory, technical or security requirements. If any data must be retained after your request, retention will be limited to the minimum required.

We adopt reasonable technical, administrative and organizational measures to protect data against unauthorized access, improper alteration, loss, destruction or improper disclosure.

These measures may include encryption in transit, access controls, authentication, environment segregation, logging, monitoring, and permission and security practice reviews, where applicable.

However, no system is 100% invulnerable. We therefore recommend that you also protect your devices, credentials and access methods.

Zora7 may be accessed by users in different countries, and our providers may operate in different jurisdictions. For this reason, your data may be processed and stored outside your country of residence.

Where required by applicable law, we may adopt appropriate mechanisms to support international transfers of data, such as contractual clauses, technical safeguards or other legally recognized mechanisms.

Depending on the law applicable in your country or region, you may have rights such as confirming whether we process your data, accessing your data, correcting incomplete, inaccurate or outdated data, requesting anonymization, blocking or deletion where applicable, requesting portability where applicable, withdrawing consent where processing depends on it, objecting to certain processing where permitted by law, and filing a complaint with the competent authority.

To exercise privacy-related rights, contact privacy.zora7@gmail.com.

We may request additional information to verify your identity and protect your account before processing requests.

Zora7 is not intentionally directed to children where this is not allowed by applicable law.

If you believe that a child has provided us with personal data in violation of the law, contact privacy.zora7@gmail.com so that we can review and take appropriate action.

Our website or app may contain links or integrations with third-party services. The use of such services is subject to the policies and terms of the respective providers.

We recommend reading, where applicable, the Google Play / Google privacy policy, the RevenueCat privacy policy, the Supabase privacy policy, and the policies of any other external services used together with Zora7.

Information displayed on the app listing in stores and platforms, including sections such as Data Safety and equivalent forms, must reflect the real behavior of the app and its providers and SDKs.

Although this policy is global in nature, certain practices may vary depending on the app version, country, legal requirement, enabled functionality and active integration at the time of use.

Where necessary, additional disclosures may be shown in the app, on the website or in the store.

We may update this Privacy Policy periodically to reflect legal or regulatory changes, product evolution, technical changes, new providers or integrations, and changes in data processing practices.

The most current version will be published at https://zora7.com/en/privacy.

Where required by law or where the change is material, we may adopt additional communication measures.

We may make this policy available in more than one language for user convenience.

If there is any conflict between translations, the Portuguese version prevails unless local law requires otherwise.

For questions, support, customer care, privacy matters, data subject rights or account and data deletion requests, please use the channels below.

Privacy and data: privacy.zora7@gmail.com.

Technical support: suport.zora7@gmail.com.

Customer care: sac.zora7@gmail.com.

Website: https://zora7.com.