Privacy Policy

This Privacy Policy describes how Zapfeed (“the Service”), operated by Applifyer, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713 (“We”, “Us”, or “Our”), collects, uses, and discloses your information when you use the Service, available at https://zapfeed.io and its subdomains and connected custom domains. By using the Service you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal data. When you create an account we collect your email address, and (if you sign in with Google) your name and profile picture. We request only the scopes needed to authenticate you and provide the Service.

Feedback content. Posts, comments, votes, and attachments you or your users submit are stored to operate feedback boards, roadmaps, and help articles. Some content can be submitted anonymously; in that case we may store an anonymous identifier, email (if provided), IP address, and user agent to prevent duplicate votes and abuse.

Usage data. Our private, self-hosted product analytics records page paths without query strings or URL fragments, referrers, campaign parameters, device/browser categories, country-level location, and Web Vitals. It does not attach account IDs, emails, typed feedback, or attachment names to analytics events. Separate security and operational logs may include IP address, user agent, timestamps, and diagnostic data.

How We Use Your Information

• To provide, operate, and maintain the Service and your organization’s workspace.
• To authenticate you and manage your account and team memberships.
• To send transactional and notification emails (e.g. new posts, comments, and status changes).
• To process subscriptions and payments through our payment processor.
• To detect, prevent, and address abuse, fraud, and security issues.
• To understand aggregate product usage and improve the Service.
• To comply with legal obligations.

Google API Services User Data Policy

When you sign in with Google we request only your basic profile information (name, email address, and profile picture) to authenticate you and provide core functionality. We do not use this data for advertising, do not sell it, and do not share it except as needed to provide the Service or as required by law. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing Your Information

We do not sell your personal data. We may share information with:

• Service providers that process data on our behalf, including our cloud hosting, email delivery (Resend), file storage (Cloudflare R2), and payment processing (Stripe). Product analytics and error tracking run on infrastructure we control rather than a third-party analytics account.
• Your organization.Content you post to an organization’s boards is visible to that organization’s team and, where boards are public, to visitors.
• Business transfers, in connection with a merger, financing, acquisition, or sale of assets.
• Legal requirements, when required to comply with the law or protect our rights.

Cookies

We use strictly necessary cookies to keep you signed in and remember your active organization. You can instruct your browser to refuse cookies, but some parts of the Service may not function properly. Our product analytics is cookie-free, honors browser Do Not Track, excludes query strings and URL fragments, and has session replay and heatmaps disabled.

Data Retention

We retain your personal data only as long as necessary to provide the Service and for legitimate legal, accounting, or reporting purposes. Feedback content is retained for as long as your organization keeps it or until deletion is requested.

Your Rights & Deleting Your Data

You may access, correct, or delete the personal information you have provided at any time from your account, or by contacting us. We will honor deletion requests except where retention is required by law.

Security

We use commercially reasonable measures to protect your data, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

International Transfers

The primary Service and our private analytics and error-tracking systems run in Microsoft Azure’s Germany West Central region. Some listed service providers may process data in other countries under their applicable contractual safeguards.

Children’s Privacy

The Service is not directed to anyone under 13, and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date.

Contact

Questions about this policy? Contact us at support@applifyer.com.