Privacy policy
Last updated: 29 July 2026
Who is responsible
Zakora is published by A.S.A. Security SA, rue Faider 1C, 1060 Bruxelles, Belgique, company number BE 0432.646.526. For any question about your data: info@zakora.eu.
Two roles overlap, and the distinction matters. For your account data — your address, your name — we are the controller. For the content your team puts into the app — notes, messages, documents — your organisation decides, and we act only on its instructions, as a processor.
What we record
Your account. Email address, name, photo if you add one, language and notification preferences. There is no password: you sign in through a link sent to your address.
What you put in. Notes, messages, tasks, documents, photos, voice recordings and their transcripts, price requests. This content belongs to your organisation and stays visible to its members.
The bare technical minimum. A device identifier if you turn on notifications, and our hosts' access logs, kept for thirty days for security.
What we do not do
No advertising. No advertising trackers, no analytics tools, neither on the website nor in the app. Your content is never sold, never passed on, and never used to train artificial intelligence models.
Your location is never transmitted. If you turn on place suggestions, your phone itself compares its position with the places your organisation has declared, and only the result appears on screen. The coordinates never leave the device and are stored nowhere.
Who else has access
Our technical providers, each for one precise task and nothing more:
| Provider | Role | Processing location |
|---|---|---|
| Supabase | Database, files and sign-in | European Union (Frankfurt) |
| Anthropic | AI-written summaries and corrections | United States |
| OpenAI | Transcription of voice messages | United States |
| Brevo | Invitation and service emails | European Union (France) |
| Vercel | Application hosting | European Union (Frankfurt) |
| OVHcloud | Website hosting and mail | European Union (France) |
| Apple, Google | Notification delivery | United States |
Transfers to the United States are covered by the European Commission's standard contractual clauses. Voice messages sent for transcription and excerpts sent for summarisation are not retained by these providers beyond the processing itself, nor used to train their models.
For how long
Your content stays as long as your organisation uses Zakora: that is the point of the service — a memory that does not disappear when someone leaves.
If you delete your account from the app, your name, address and photo are erased immediately and you can no longer sign in. What you wrote remains in the team's memory, attributed to "Deleted user". If your organisation terminates, all of its data is deleted within thirty days.
Your rights
You may request access to your data, its correction, its erasure, its portability in a readable format, or object to a processing operation. Write to info@zakora.eu: we answer within one month.
If our answer does not satisfy you, you may lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.
Security
Traffic is encrypted in transit (HTTPS) and data at rest is encrypted by our host. The separation between organisations is enforced by the database itself, on every single query: a programming mistake alone would not be enough to leak one organisation's data to another.