Privacy policy

1. Who is responsible for your data

Nexelion, Inc., a company incorporated in the state of Florida (United States), with employer identification number (EIN) 41-2376509, operator of ZiGo (usezigo.app). Contact: privacidad@usezigo.app.

Our role changes depending on which data we mean, and the difference matters:

• We are the controller of your ZiGo account data: who signs up, with what email, what plan, what is billed, what access logs it leaves. We handle those by our own decision, to provide the service and comply with the law.
• We are the processor of everything you record inside your instance: your customers, your suppliers, your employees, your sales. There you are the controller; we only host and process them following your instructions.

2. What data we handle and what for

• Account data — name, email, phone, company, tax identifier and country. To create your account, provision your instance and communicate with you. Basis: performance of the contract.
• Billing data — amount, description, country and payment reference. Your card details are handled directly by the gateways: we never see or store them. Basis: contract and legal obligations.
• Technical usage data — access logs, IP addresses, errors and performance metrics. To keep the service secure, detect abuse and diagnose failures. Basis: legitimate interest in the security and stability of the platform.
• Support communications — what you write to the assistant or to our team. To help you and keep a record of the case. Basis: performance of the contract.
• The content of your instance — only as processor, per point 1.

We do not sell personal data, we do not share it for commercial purposes, we do not do advertising profiling and we do not take automated decisions with legal effects on anyone.

3. What we do NOT do with your business data

The information living in your instance is used for nothing other than providing the service. We do not sell it, we do not share it with third parties for commercial purposes, we do not analyse it to build products and we do not use it to train artificial intelligence models, neither ours nor anyone else's.

4. The support assistant

Support in your dashboard runs on a language model hosted in Amazon Bedrock. To answer you it receives whatever account context is needed —your plan, your instance status, your modules— and whatever you write to it. That content is processed to generate the answer and is not used to train the model. If you would rather not share something with the assistant, do not write it in the chat: you can ask for a human to take the case.

5. Who we share data with

Only with the providers needed to operate, each under its own data processing agreement:

We may also disclose data when required by a competent authority, and transfer it in the context of a merger or sale of assets, telling you first. If we change provider or add a new one, this table is updated.

6. International transfers

Your instance and your backups are hosted on Amazon Web Services, in the United States region. If you live in a country whose rules restrict international transfers, sending data to our providers relies on your informed consent when signing up and on each provider's contractual clauses. If you need your data to sit in another jurisdiction, write to us before signing up: we do not offer that today.

7. Security

Every customer runs on an isolated instance and database, with network access restricted between instances and encryption in transit. Our staff's access to customer data is limited to what is needed to operate and support, and is logged.

No system is infallible. If a security breach affects your personal data, we will notify you without undue delay and tell you what happened, what it affects and what we are doing.

8. How long we keep data

• Automatic daily backups of your instance: 35 days.
• On-demand copies you generate from your dashboard: 5 days.
• Final copy, generated when your instance is deleted so you can download it: 90 days, and then permanently deleted.
• Account data: while the account is active and up to 30 days after archiving on cancellation.
• Billing data: for as long as applicable tax rules require.
• Technical access logs: up to 12 months, for security and audit.

9. Your rights

You can access your personal data, rectify it, request its deletion, object to certain processing, restrict it and ask for a copy in a portable format, by writing to privacidad@usezigo.app from your account email. We will reply within 30 calendar days at most.

If your request concerns data inside a customer's instance —for example, if you are a client or employee of a company that uses ZiGo— that company is the controller: we will refer you to them and assist them in answering you.

We apply whichever data protection rules cover you, among others the LFPDPPP in Mexico, Law 1581 in Colombia, the LGPD in Brazil, Law 25,326 in Argentina, Law 19,628 in Chile, Law 29,733 in Peru, Law 18,331 in Uruguay and Law 8968 in Costa Rica. You may lodge a complaint with your country's supervisory authority.

Nexelion, Inc. is a Florida (United States) company, so US federal and state rules on data protection and commercial communications also apply to it.

10. Minors

ZiGo is a service for businesses and is not directed at minors. We do not knowingly collect data from minors as account holders. If we find an account created this way, we will close it and delete the data.

11. Cookies and local storage

We use browser storage only for necessary functions: keeping your session, remembering your language and preserving your sign-up progress. We use no advertising cookies, no third-party analytics and no cross-site trackers. That is why you will not see a banner in ZiGo asking for consent to track you: there is nothing to consent to.

We do count how many visits reach each step of the site — the home page, the quote, the payment — so we can tell whether what we do works. That count is anonymous by construction: we store no IP address of yours, no identifier of yours and no record of where you came from. We only add one to a counter for the day. So as not to count you twice, your browser notes which steps it already counted in that tab; that note disappears when you close it and is never sent to us.

12. Emails we send you

We write to you about operations: your instance being provisioned, renewal notices, sign-in links and security alerts. Those emails cannot be switched off while you have an active account, because they are part of the service. Any commercial mailing is separate and you can unsubscribe from the message itself.

13. Languages

We publish this policy in Spanish, English, French and Portuguese. Each version carries the same weight: the one that applies to you is the language in which you signed up.

14. Changes to this policy

If we change it we will notify you by email, and the version in force will always be on this page, with its update date.

15. Contact

privacidad@usezigo.app for anything about personal data; legal@usezigo.app for everything else.