Privacy Policy

Personal Data

Information related to an identified or identifiable natural person.

Sensitive Data

Data about racial origin, religious belief, health data, etc.

Data Subject

The natural person to whom the personal data relates.

Controller

Whoever makes decisions regarding the processing of data (person/company).

Processor

Whoever processes data on behalf of the controller.

Legal Name

Celeiro Digital

Address

celeiro.io

Data Protection Officer (DPO)

privacidade@zekkocrm.com

3.1. Registration Data (ZekkoCRM as Controller)

Identification data (name, email), access data (IP, login) and billing data.

3.2. Your Customers' Data (ZekkoCRM as Processor)

Data you enter about your own customers. You are the controller of this data and responsible for obtaining the necessary consents.

Infrastructure

Cloud hosting (AWS/Google Cloud)

Financial

Payment processors (Stripe/PayPal)

7.1 Data Accessed

Through the optional Gmail integration, ZekkoCRM accesses the following data from your Google account when you authorize the connection: the connected account's email address, message metadata (sender, recipient, subject, date) and the content of emails exchanged with contacts you register in the CRM. We do not access Google Contacts, Calendar, Drive files, or any other data outside the email scope you explicitly authorize at the time of connection.

7.2 Data Usage

We use Gmail data exclusively to: (i) display the history of emails exchanged with each contact directly on the lead or customer screen inside ZekkoCRM; (ii) allow you to send emails to your contacts from within the platform itself, without switching to Gmail; (iii) automatically associate those messages with the corresponding sales opportunity in your pipeline. The purpose is exclusively to provide the integrated communication feature you requested. We do not use this data to train general-purpose AI models, we do not use it for advertising purposes, and we do not analyze it for any purpose unrelated to the CRM's core functionality.

7.3 Data Sharing

We do not sell, rent, or share Google data with third parties for marketing or advertising purposes. Google data is shared only with the following service providers, strictly to enable the technical operation of the platform: cloud infrastructure providers (AWS and/or Google Cloud), responsible for the secure storage of data. No other third party has access to Google data obtained through the Gmail integration. These providers are contractually bound to handle the data with the same level of confidentiality required by ZekkoCRM and applicable law.

7.4 Data Storage & Protection

Google data obtained through the integration is stored on servers with encryption in transit (TLS/SSL) and at rest (AES-256). Internal access to this data is restricted through role-based access control, limited only to the technical staff strictly necessary for platform maintenance. We continuously monitor for unauthorized access and perform periodic security audits. OAuth access tokens are stored encrypted and are never exposed in plain text in logs or externally accessible databases.

7.5 Data Retention & Deletion

Google data is retained while the Gmail integration remains active on your account. If you disconnect the integration in ZekkoCRM settings or revoke access directly at myaccount.google.com/permissions, all associated Google data is automatically deleted from our servers within 30 days. If you cancel your ZekkoCRM account, all data, including Google data, is deleted within 30 days, except where retention is required by legal obligation. You may request immediate, early deletion of this data at any time, without justification, by emailing privacidade@zekkocrm.com. We will respond to the request within 15 calendar days, as provided for under Brazil's LGPD (Law No. 13,709/2018); you may also be entitled to additional rights under applicable law, such as the GDPR.

Full Encryption

Data protected in transit (TLS/SSL) and at rest (AES-256).

Active Monitoring

Continuous monitoring against intrusions and regular system audits.