Zuvayo
Initializing
Legal
GDPR & Data Processing Agreement
Last updated: February 27, 2026
This Data Processing Agreement (DPA) and GDPR compliance documentation outlines how Zuvayo processes personal data in compliance with the EU General Data Protection Regulation (GDPR).
Data Controller Information
Data Controller:
Zuvayo Inc.
Registered Address:
2261 Market Street #5039, San Francisco, CA 94114
Email:
privacy@zuvayo.com
Data Protection Officer:
privacy@zuvayo.com
Your GDPR Rights
Under the GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of your personal data that we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
Also known as the 'right to be forgotten', you can request deletion of your personal data.
Right to Restrict Processing
You can request restriction of processing your personal data under certain circumstances.
Right to Data Portability
You can request transfer of your data to another organization in a structured, machine-readable format.
Right to Object
You can object to processing of your personal data for specific purposes.
How to Exercise Your Rights
To exercise any of your GDPR rights, you can:
- Platform Settings: Access and download your data directly from your account settings under Privacy & Data.
- Email Request: Send a detailed request to privacy@zuvayo.com
- Response Time: We will respond to your request within 30 days as required by GDPR.
Data Processing Details
Purpose:
Providing influencer marketing platform services, campaign management, and analytics
Legal Basis:
Contract performance (Article 6(1)(b)), Legitimate interests (Article 6(1)(f)), Consent (Article 6(1)(a))
Data Categories:
Contact information, Profile data, Campaign data, Analytics data, Communication records
Retention Period:
Data retained for duration of account plus 7 years for legal compliance, then securely deleted
International Transfers:
Data may be transferred outside EEA with appropriate safeguards (Standard Contractual Clauses)
Subprocessors
We engage the following subprocessors to provide our services:
- Cloud Hosting: AWS (EU data centers)
- Payment Processing: Stripe
- Email Services: SendGrid
- Analytics: PostHog (self-hosted)
- Error Monitoring: Sentry