Privacy Policy
Last Updated: February 1, 2026
Introduction
Welcome to Zapledger ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing and accounting software service at zapledger.com (the "Service").
By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
1. Information We Collect
1.1 Information You Provide to Us
Account Information
When you create a Zapledger account, we collect:
- Full name
- Email address
- Password (encrypted)
- Business name
- Business address
- Phone number
- Payment information (processed securely through third-party payment processors)
Profile Information
You may choose to provide additional information:
- Business logo
- Tax identification number
- Bank account details (for payment instructions)
- Preferred currency
- Custom invoice templates and branding
Invoice and Client Data
When you use our Service, you provide:
- Client names and contact information
- Invoice details (services, amounts, dates)
- Payment records
- Notes and communications
- Uploaded documents and files
Communications
When you contact us for support or feedback:
- Email correspondence
- Support ticket information
- Chat messages
- Survey responses
1.2 Information We Collect Automatically
Usage Information
- Pages and features you access
- Time and duration of visits
- Click patterns and navigation paths
- Invoice creation and sending patterns
- Payment tracking activities
Device Information
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Screen resolution
- Time zone settings
Cookies and Similar Technologies
We use cookies, web beacons, and similar tracking technologies to:
- Remember your preferences
- Authenticate your account
- Analyze usage patterns
- Improve our Service
- Provide personalized content
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service.
1.3 Information from Third Parties
Payment Processors
When you upgrade to a paid plan, payment information is processed by third-party providers (such as Stripe). We receive confirmation of successful payments but do not store full credit card details.
Integration Partners
If you connect third-party services (such as accounting software, payment platforms, or cloud storage), we may receive information from those services according to their privacy policies and your authorization.
2. How We Use Your Information
To Provide Our Service
- Create and manage your account
- Process and fulfill your requests
- Generate invoices and track payments
- Store and organize your financial data
- Provide customer support
- Send transactional emails
To Improve Our Service
- Analyze usage patterns and trends
- Conduct research and development
- Test new features and functionality
- Fix bugs and technical issues
- Enhance user experience
To Communicate with You
- Send important updates about the Service
- Respond to your inquiries and support requests
- Send administrative messages
- Provide tips and best practices (with consent)
- Send marketing communications (opt-out available)
To Ensure Security
- Detect and prevent fraud and abuse
- Verify your identity
- Monitor and analyze security threats
- Enforce our Terms of Service
- Comply with legal obligations
3. How We Share Your Information
We do not sell, rent, or trade your personal information.
We share your information only in the following limited circumstances:
With Your Consent
When you explicitly authorize us to do so, such as when you connect third-party integrations, share invoices with clients, or export data to other platforms.
Service Providers
We work with trusted third-party service providers:
- Cloud hosting providers (DigitalOcean)
- Payment processors (Stripe)
- Email service providers
- Analytics services
- Customer support tools
Legal Requirements
We may disclose your information if required by law or in response to valid legal processes, government requests, or to protect our rights and the safety of our users.
4. Data Storage and Security
Security Measures
Encryption
- SSL/TLS encryption for data in transit
- Industry-standard password hashing
- Encryption at rest for sensitive data
Access Controls
- Multi-factor authentication available
- Role-based access controls
- Regular security audits
Infrastructure
- Firewall protection
- Intrusion detection systems
- Regular security updates
Monitoring
- Continuous monitoring
- Automated threat detection
- Incident response protocols
Data Retention
- Active account data: Retained while account is active
- Deleted account data: Deleted within 30 days
- Financial transaction records: Retained for 7 years for tax/legal compliance
- Support communications: Retained for 3 years
- Usage logs: Retained for 90 days
5. Your Rights and Choices
Access and Portability
Access your information through your account dashboard. Export your invoice data, client information, and financial records in common formats (CSV, PDF, Excel) at any time.
Correction and Deletion
Update or correct your account information at any time. Request deletion of your account and all associated data will be permanently deleted within 30 days.
Marketing Communications
Opt out of marketing emails at any time by clicking "unsubscribe" or updating your email preferences. Note: You cannot opt out of transactional emails necessary for the Service.
Cookie Controls
Control cookies through your browser settings. You can block all cookies, block third-party cookies only, or delete cookies after each session.
Additional Rights (EU/UK Users - GDPR)
- Right to Restriction: Request restriction of processing in certain circumstances
- Right to Object: Object to processing based on our legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
- Right to Lodge a Complaint: Lodge a complaint with your local data protection authority
California Privacy Rights (CCPA)
- Right to Know: Request information about personal data we collect, use, and disclose
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: We do not sell personal information
- Right to Non-Discrimination: We will not discriminate for exercising your rights
6. International Data Transfers
Zapledger is based in the United States. If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.
For users in the European Union, we rely on:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions where applicable
- Other lawful transfer mechanisms as appropriate
7. Children's Privacy
Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information as quickly as possible.
8. Third-Party Links and Services
Our Service may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to third-party services.
Third-party services we currently integrate with:
- Payment processors (Stripe)
- Cloud storage providers
- Analytics services
- Social media platforms (LinkedIn, X/Twitter, Instagram)
9. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will:
- Notify you via email (to the address associated with your account)
- Post a notice on our website
- Update the "Last Updated" date at the top of this Privacy Policy
Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email: privacy@zapledger.com
Response Time: We will respond to your inquiry within 30 days.
Data Protection Officer (EU/UK Users): dpo@zapledger.com
Summary of Key Points
Information We Collect
- Account details (name, email, business info)
- Invoice and client data you create
- Usage information and device data
- Payment information (processed by third parties)
How We Protect It
- Encryption in transit and at rest
- Secure servers and infrastructure
- Access controls and monitoring
- Regular security audits
Your Rights
- Access and export your data
- Correct or delete your information
- Opt out of marketing
- Control cookies
We Never
- Sell your personal information
- Share your data without consent
- Collect information from children under 16
Questions? Contact us at privacy@zapledger.com
By using Zapledger, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy was last updated on February 1, 2026 and is effective immediately.