Privacy Policy

This Privacy Policy explains how Joppa Technologies LLC ("Joppa," "we," "us") collects, uses, and protects information in connection with our website and our product Zora (the "Service"). By using the Service, you agree to this policy.

1. Information we collect

• Account information — your name, email address, and business details you provide when you sign up or onboard.
• Business content — the packages, pricing, communication preferences, client details, and other information you add so the Service can do its job.
• Connected-account data — when you connect Google (Gmail and Calendar), we access the messages, calendar events, and profile information needed to provide the features you enable. See "Google user data" below.
• Payment information — processed by our payment provider (Stripe). We do not store full card numbers.
• Usage and device data — basic logs, IP address, and analytics used to operate, secure, and improve the Service.

2. How we use information

• To provide and operate the Service — reading and organizing your inbox, drafting replies, managing your calendar, sending invoices, and related features.
• To secure the Service, prevent abuse, and debug problems.
• To communicate with you about your account and support requests.
• To improve the Service. We do not use your private content to train third-party foundation models.

3. Google user data

Zora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We access your Gmail and Google Calendar data only to provide and improve user-facing features within the Service.
• We do not transfer or sell this data to third parties except as needed to provide the Service, for security, or to comply with law.
• We do not use Google user data for advertising.
• We do not allow humans to read your data unless we have your consent for specific messages, it is necessary for security or to comply with law, or the data is aggregated and anonymized.

You can disconnect Google access at any time from your account settings or via your Google account permissions.

4. How we share information

We share information only with service providers who help us operate the Service (such as cloud hosting, our database provider, our payment processor, and the AI model provider that powers drafting), each bound to protect it; when required by law; or to protect rights and safety. Content you choose to send to your clients (for example, an invoice link or a client-portal link) is shared with those recipients at your direction.

5. Data retention & security

We retain information for as long as your account is active or as needed to provide the Service and meet legal obligations. We use industry-standard safeguards, including encryption of sensitive credentials and tenant isolation, to protect your data. No method of transmission or storage is perfectly secure, but we work to protect your information.

6. Your choices

You may access, correct, export, or delete your information by contacting us. You may disconnect connected accounts at any time. To request deletion of your account and associated data, email us at the address below.

7. Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect data from children.

8. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you.

9. Contact

Questions about this policy? Email support@joppatech.com.

This document is a general template provided for transparency and should be reviewed by legal counsel before relying on it for compliance.