Data Processing Agreement
Understanding how Zaplane Insights processes, stores, and protects your advertising data with enterprise-grade security.
Data Processing Overview
This Data Processing Agreement ("DPA") describes how Zaplane Insights ("we," "us," or "our") processes personal data and advertising data on behalf of our customers ("you" or "Customer") in connection with our AI-powered advertising optimization platform.
We are committed to protecting your data and maintaining compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy regulations.
Types of Data We Process
Account Data
- • Account credentials and authentication tokens
- • User profile information (name, email, company)
- • Billing and subscription details
- • Team member access permissions
Campaign Data
- • Ad campaign performance metrics
- • Budget allocation and spend data
- • Keyword and targeting information
- • Creative assets and ad copy (metadata only)
Analytics Data
- • Aggregated performance statistics
- • Conversion tracking data
- • Attribution models and customer journey data
- • Platform usage and interaction analytics
Processing Purposes
AI-Powered Optimization
Analyze campaign performance to generate intelligent recommendations for budget allocation, bid optimization, and audience targeting.
Cross-Platform Attribution
Track and analyze customer journeys across multiple advertising platforms to provide unified reporting and attribution insights.
Performance Monitoring
Continuously monitor campaign performance and alert you to significant changes or optimization opportunities.
Reporting and Analytics
Generate custom reports, dashboards, and data exports to support your marketing decision-making processes.
Security & Protection Measures
Encryption & Security
- • AES-256 encryption for data at rest
- • TLS 1.3 encryption for data in transit
- • SOC 2 Type II certified infrastructure
- • Regular security audits and penetration testing
- • Zero-trust network architecture
- • Multi-factor authentication required
Access Controls
- • Role-based access control (RBAC)
- • Principle of least privilege
- • Regular access reviews and audits
- • Secure OAuth 2.0 integrations
- • API rate limiting and monitoring
- • Comprehensive audit logging
Data Retention & Deletion
Retention Periods
- • Active Account Data: Retained while your account is active and for 90 days after cancellation
- • Performance Data: Retained for up to 3 years for trend analysis and AI model improvement
- • Billing Records: Retained for 7 years as required by applicable tax and accounting laws
- • Security Logs: Retained for 1 year for security monitoring and compliance purposes
Data Deletion Rights
You can request deletion of your data at any time. Upon account cancellation, we will delete your personal data within 90 days, except where retention is required by law. Campaign performance data may be retained in aggregated, anonymized form for AI model training and platform improvement purposes.
International Data Transfers
Your data is primarily processed and stored in secure data centers located in the United States. We may transfer data internationally to provide our services, but only with appropriate safeguards in place:
- • Standard Contractual Clauses (SCCs) approved by the European Commission
- • Adequacy decisions where available
- • Additional security measures beyond legal requirements
- • Regular compliance assessments and updates
Your Data Rights
Access & Portability
- • Request copies of your data
- • Export data in common formats
- • API access for data portability
Control & Correction
- • Update or correct your information
- • Restrict certain processing activities
- • Object to automated decision-making
Contact Us: To exercise your data rights or ask questions about our data processing, contact our Data Protection Officer at support@zaplane.io
Questions About Data Processing?
Our privacy and security team is here to help. Contact us with any questions about how we process and protect your data.
This Data Processing Agreement is effective as of January 1, 2024 and may be updated periodically. We will notify you of any material changes via email and through our platform.