Privacy policy

Last updated: 2026-09-01

This page explains what data ZazaDSP collects, why, and how you can control it. We keep this to what the service actually needs: no ad trackers, no data broking.

1. Who controls your data

Leonardo Izzo, sole trader (autónomo) based in Spain, operating ZazaDSP. Contact: support@zazadsp.com. As an EU-based controller, GDPR applies to everything below regardless of where you connect from.

2. What we collect

Only what running the service requires:

  • Account data: your email, username and a securely stored password we can never see or recover
  • Order and license data: which products you own, when a license was issued, and the machine code your license is tied to (used for support, never for tracking)
  • Session data: proof that you're signed in, stored in a form that's useless to anyone else even if our systems were compromised
  • Security logs: your IP address and the time of login attempts and password-reset requests, kept briefly to block abuse and then deleted

3. What we don't collect

We never see or store your payment card details. Lemon Squeezy handles payment entirely on their side. We don't run advertising trackers, and we don't currently run any analytics on the public site. If we add analytics in the future it will be Umami, a privacy-first tool that doesn't use cookies and cannot identify you personally.

4. Why we process it

To create and run your account, issue and let you re-download your licenses, send the transactional emails a purchase or account action requires, and keep the service reasonably safe from abuse. We don't use your data for anything beyond that: no profiling, no third-party marketing.

5. Who we share it with

We don't sell or trade your data. It only reaches two processors, strictly to run the service:

  • Lemon Squeezy: processes your payment and acts as merchant of record when the store has payments enabled
  • Resend: delivers our transactional emails (verification, password reset, order/license notices)

6. Where it lives

Your data is stored in a database we operate directly, on infrastructure we control. It's never handed to a third-party analytics or marketing platform.

7. Your rights

You can update your name, email, or password at any time from Account → Settings, and download a copy of everything tied to your account from the same page. You can also delete your account and personal data yourself, at any time, from there. Deleting immediately removes your personal details. Past orders keep only the minimal, anonymized record needed for accounting, and any license already issued remains valid offline, since it lives on your machine and isn't tied to our ability to identify you. For anything not covered by those self-service options (rectification, objection, or any other GDPR request), write to support@zazadsp.com.

8. Changes to this policy

We may update this policy as the service evolves (for example, when payments go live or if analytics are added). The date at the top of this page always reflects the current version.