Privacy policy
This policy describes the personal data processed by Zenplan, the purposes and your rights under the GDPR.
Data controller
Zenbaia (High 1 Consulting), 54 rue Greneta, 75002 Paris, France. Contact: support@zenbaia.com
Data collected
— Identity: first name, last name, email address. — Business: name, city, country, website URL, Google listing URL, related public information. — Account: password (hashed), language preferences. — Usage: technical logs, navigation events required to deliver the service. — Payment: handled by Stripe; no banking data is stored by Zenbaia.
Purposes and legal bases
— Deliver the service and generate Plans: performance of the contract. — Billing and accounting obligations: legal obligation. — Service communication (transactional emails): performance of the contract. — Product improvement and aggregate statistics: legitimate interest. — Non-essential cookies: consent.
Processors and recipients
— Cloudflare (hosting, USA). — Stripe (payments, Ireland / USA). — Resend (email delivery, USA). — Google (Places API, public sources). — AI model providers (Anthropic, OpenAI) for Plan generation. All transfers outside the EU are governed by Standard Contractual Clauses.
Retention
— Account: duration of the contractual relationship + 3 years after last use. — Invoices: 10 years (legal obligation). — Technical logs: 12 months maximum.
Your rights
You have the right of access, rectification, erasure, portability, objection and restriction. To exercise them: support@zenbaia.com. You may also lodge a complaint with the French CNIL (www.cnil.fr).
Security
Data is encrypted in transit (TLS) and at rest; access is logged and restricted to authorized personnel.
Cookies
See the Cookie Policy for details of the cookies used and consent management.
Last updated: July 9, 2026