Website privacy notice

1. Scope and controller

This notice applies to zappapps.io, including its language versions, public product pages, visible help links, and news. SECURITY INSIGHTS S.R.L. is the controller. Processing within Propivio and Kitrivio is described in each product’s privacy notice.

2. Website delivery and server logs

When a page is requested, the hosting infrastructure necessarily processes technical request data such as IP address, date and time, requested URL, referrer if transmitted, user agent, response status and transferred volume. This is required to deliver, protect and troubleshoot the website.

Processing is based on performance of the requested communication and our legitimate interests in a secure, stable service. Access is limited to authorised operators and hosting providers. Log data is retained only as long as operational security, incident analysis and applicable law require.

3. Language selection

Language links open the corresponding URL, and the domain root remains English. Public pages neither store nor read a language for automatic redirects. An older value may remain in the browser and can be removed.

4. Email contact

Contact links open your email application. If you write to us, we process the address, message, attachments and related metadata you provide to answer the request and handle any follow-up. The relevant email providers also process the communication.

The legal basis is taking steps at your request, performing a contract where relevant, compliance with legal duties, or our legitimate interest in responding. Messages are deleted when the matter and applicable retention duties permit.

5. No tracking or embedded third parties

The current website does not use analytics, advertising, profiling, social widgets, external fonts, maps, embedded videos, newsletter forms, contact forms, automated crash reporting or performance-monitoring scripts. News pages use the same technical website delivery described above.

6. External and store links

A transfer to another provider starts only when you follow an external link. App stores, email services and linked websites are responsible for their own processing. Store links are displayed only where a verified destination has been configured.

7. Recipients and international transfers

Data may be available to hosting and email service providers acting as processors or independent providers, and to authorities where legally required. If a provider processes data outside the EEA, we require an applicable adequacy decision, appropriate safeguards or another lawful transfer mechanism.

8. Retention and your choices

We use purpose-specific retention criteria: technical necessity and security for logs, and resolution and legal duties for correspondence. Providing technical request data is necessary to load the site; email contact is voluntary. There is no automated decision-making or profiling.

9. Your rights

Subject to the legal conditions, you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent for future processing where consent applies. Contact our privacy address to exercise a right. You may also complain to the Romanian data protection authority (ANSPDCP) or your local supervisory authority.

10. Social media and WhatsApp links

The website contains ordinary external links to TikTok, Instagram, X and, once configured, WhatsApp Business and LinkedIn. No feed, widget, tracking pixel or chat script from these providers is embedded. Merely opening zappapps.io therefore does not establish a connection to them through these links.

A connection starts only after you activate a link. The destination provider then processes technical request data and any information you choose to submit under its own privacy terms. Do not send passwords, payment information or confidential documents through WhatsApp.

11. Changes

We update this notice when the website, providers or legal requirements change. The date at the top identifies the current published version.