Privacy Policy
Last modified: · GDPR Articles 13 & 14 Disclosures
1. Scope and Roles
Zeeply AI Ltd (“we”, “us”, or “our”) is committed to safeguarding personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the UK Data Protection Act 2018.
When We Act as Data Controller
For account registration, billing information, user profiles, and operational platform analytics of our direct customers.
When We Act as Data Processor
For prospect lists, lead records, and email contents uploaded or synced by our customers into their workspaces.
2. Lawful Bases for Processing
Processing required to provision your workspace, deliver autonomous AI features, and fulfill service agreements.
Platform telemetry, fraud prevention, spam abuse mitigation, and B2B commercial communications within reasonable prospect expectations.
Maintaining financial audit logs, tax invoicing, and honoring statutory GDPR Article 17 erasure requests.
3. Verified Sub-Processors
We partner with industry-leading infrastructure providers under strict Data Processing Agreements and EU Standard Contractual Clauses:
| Sub-Processor | Purpose | Location | Data Safeguard |
|---|---|---|---|
| Neon Inc. | Serverless Relational Database | EU West (London/Frankfurt) | AES-256 Encryption at rest & TLS 1.3 |
| Anthropic PBC | Claude AI Conversational Reasoning | United States | Zero-Data-Retention Enterprise DPA |
| Resend Inc. | Transactional & Alert Notifications | United States / Global CDN | Standard Contractual Clauses (SCCs) |
| Stripe Inc. | Payment & Subscription Invoicing | United States / EU | PCI-DSS Level 1 Certified |
| Vercel Inc. | Edge Compute & Application Hosting | Global Edge Network | SOC 2 Type II Certified |
4. Article 17 Right to Erasure & Suppression
Zeeply provides automated self-serve compliance tools. When a prospect requests data erasure or suppression:
- Their contact details and email message history are purged from active campaign cadences.
- A cryptographic SHA-256 suppression hash is recorded to guarantee they are never re-imported or re-contacted across any mailbox.
- A verifiable Article 17 Certificate of Erasure is generated for statutory audit logs.
5. Data Protection Officer (DPO) Contact
If you have questions regarding data rights, Subject Access Requests (SARs), or wish to exercise statutory privacy entitlements, you may reach our appointed Data Protection Officer directly:
Data Protection Officer
Zeeply AI Ltd · Compliance & Governance Team
Email: dpo@zeeply.com
Statutory response SLA: 30 days maximum.