Privacy Policy

Last updated: 22 July 2026

Ziga Data is a tool for turning messy lead information into rows in a Google Sheet you own. This policy explains what we collect, why, and what we do not do. It covers the website at zigadata.com and the application at app.zigadata.com.

Ziga Data is operated by CapEO Labs. If you have a question about anything here, write to hello@zigadata.com.

What we access in your Google account

When you connect your Google account, Ziga Data asks for these permissions and nothing else:

• openid, userinfo.email, and userinfo.profile so we can sign you in and know which account a lead belongs to.
• drive.file so we can write rows to the specific Google Sheet you create through Ziga Data or pick with the Google file picker.

We never ask for permission to read your Gmail, your calendar, or your contacts.

What we store

• Your account. Your email address, your Google account identifier, and the date you signed up. If you signed up with a password, we store a hash of it, never the password itself.
• Your Google connection. The access and refresh tokens Google issues so we can write to your sheet without asking you to sign in every time. These are encrypted at rest with AES-256-GCM before they touch our database.
• The leads you submit. The text or image you paste or upload, the fields extracted from it, and whether you confirmed or discarded it.
• Your destination. The identifier of the Google Sheet you connected, so we know where to write.

How long we keep it

The raw material you submit is deleted on a schedule. Once a lead has been confirmed or discarded, we keep the full original text and any uploaded image for 14 days, then permanently delete them. What remains after that is the extracted fields and a short excerpt, so your history stays readable.

Account records are kept for as long as you have an account. When you delete your account, we delete your account record, your stored Google tokens, and your submission history.

Who else sees your data

We do not sell your data, we do not rent it, and we do not share it for advertising. We use a small number of service providers to run the product:

• OpenAI processes the text and images you submit in order to extract the fields. According to OpenAI's API data usage policy, content sent through the API is not used to train their models.
• Google receives the rows you confirm, because they are written to your own Google Sheet in your own Google account.
• Our hosting provider Hetzner (Germany) runs the servers and stores the database.

We may disclose data if we are legally required to. If that happens and we are permitted to tell you, we will.

Rows written to your sheet

Once a row is written to your Google Sheet, it lives in your Google account and is governed by your agreement with Google, not by this policy. You can edit or delete it there at any time. Deleting your Ziga Data account does not remove rows we already wrote to your sheet, because that sheet is yours.

Limited Use disclosure

Ziga Data's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you asked for, we do not transfer it except as described above, we do not use it for advertising, and we do not allow humans to read it except with your explicit permission, for security purposes, to comply with applicable law, or where the data is aggregated and anonymized.

Your rights and choices

Depending on where you live, including under the Nigeria Data Protection Act and, for users in the EEA or UK, the GDPR, you have the right to access the personal data we hold about you, correct it, delete it, object to or restrict how we use it, receive a copy in a portable format, and withdraw consent you have given. You also have the right to complain to your local data protection authority. We respond to verified requests within the period required by applicable law, and in any case within 30 days.

• Disconnect Google. Revoke Ziga Data's access at any time from your Google account permissions page. We stop being able to write to your sheet immediately.
• See or export your data. Your confirmed leads are already in your own spreadsheet. For anything else we hold, write to us and we will send it to you.
• Correct your data. Write to us and we will fix anything inaccurate.
• Delete your data. Write to hello@zigadata.com and we will delete your account and everything attached to it.

Where your data is processed

Ziga Data is operated from Nigeria. Our servers and database are hosted in Germany. Backups are stored with Cloudflare, and the text and images you submit are processed by OpenAI in the United States. Using Ziga Data means your information may be transferred to and processed in these countries, which may have different data protection laws than your own. We take reasonable steps to protect it wherever it is processed.

Security

Traffic to and from Ziga Data is encrypted in transit. Google OAuth tokens are encrypted at rest. Access to production systems is limited to the people who operate the service. No system is perfectly secure, and we will not pretend otherwise, but we will tell you promptly if something happens that affects your data.

Children

Ziga Data is not intended for anyone under 16, and we do not knowingly collect data from them.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell account holders by email before the change takes effect.

Contact

Questions, requests, or complaints: hello@zigadata.com.