Privacy Policy

1. Introduction

Deltazi Digital Marketing ("we", "us", "our") is committed to protecting the personal data of visitors and users of deltazi.com and the DeltaZi platform. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and applicable national law.

Last updated: August 30, 2026

2. Data Controller

The data controller responsible for your personal data is:

• Company: Deltazi Digital Marketing
• Website: deltazi.com
• Email: info@deltazi.com

3. Data We Collect

3.1 Data you provide

• Name, email address, phone number (via contact forms, demo requests, or account registration)
• Business information when you enquire about our digital marketing services
• Messages and support requests submitted through our platform

3.2 Data collected automatically

• IP address, browser type, operating system, and device information
• Pages visited, session duration, and referral sources
• Cookies and similar technologies (see our Cookie Policy)

4. Connected Mailboxes

The DeltaZi platform lets you connect an email account you already own — Gmail, Yahoo Mail, AOL, iCloud Mail, or Outlook/Hotmail — so that you can read, organise, and send your mail from inside your DeltaZi dashboard alongside any mailbox we host for you. Connecting a mailbox is entirely optional, is always initiated by you, and is described separately below because it involves your email content rather than your contact details.

4.1 What we access

Once you connect a mailbox, and only for as long as it stays connected, we access it on your behalf in order to display and operate it:

• Your folder or label list, and the number of messages in each
• Message headers (sender, recipients, subject, date) and message contents, including attachments, for the messages you open or list
• The ability to send messages, save drafts, and change message state (read/unread, flagged, moved, archived, deleted) when you perform those actions
• Your email address and display name on that account, which we re-check periodically to confirm the connection still works and still belongs to the address you connected

4.2 What we store, and what we do not

We do not keep a copy of your mailbox. Message contents and attachments are fetched from your provider when you view them and are not written to our databases. What we do retain is limited to:

• The connection record — the email address, display name, connection status, and the encrypted credential or access token needed to reach the mailbox
• Audit metadata — that a message was sent or permanently deleted, by which user and when. This never includes message content
• New-mail notifications — to show the alert in your dashboard, we store the sender and subject line of the arriving message. These are visible only to your organisation and are deleted with your account

4.3 How we use it — and what we never do

Data from a connected mailbox is used only to provide the mail features you see in your dashboard: listing, reading, searching, composing, sending, organising, and notifying you of new mail. We do not:

• sell, rent, or transfer your mail data to any third party
• use it to build advertising or user-targeting segments
• use it to profile you or personalise content
• use it for monetisation or email engagement tracking
• use it to train machine-learning or AI models
• use it for any purpose that is not directly part of the mail functionality you are using

4.4 Credentials and security

App-specific passwords and OAuth tokens are encrypted at rest using AES-256-GCM and are never displayed back to you or to our staff after you enter them. Connections are made over TLS only. Access is scoped to the single mailbox you connected, and each organisation's mailboxes are isolated from every other organisation's.

4.5 Disconnecting and deletion

You can disconnect a mailbox at any time from Settings → Mailboxes in your dashboard. Disconnecting immediately deletes the stored credential and ends all access; because we hold no copy of your mail, nothing of your mailbox remains with us afterwards. Your mail itself is untouched and stays with your provider. You can additionally revoke our access from your provider's own account settings — by deleting the app password (Yahoo, AOL, iCloud) or removing the application (Google, Microsoft) — and we recommend doing so if you no longer use the connection. See also our Data Deletion Policy.

4.6 Your provider's own terms

A connected mailbox remains governed by your agreement with that provider. We act as a processor of that mail on your instructions, and we comply with the developer terms and API policies of each provider whose service you connect.

5. Purposes of Processing

• Responding to enquiries and providing our SaaS and digital marketing services
• Account management and platform functionality
• Improving our website, products, and user experience
• Analytics and performance measurement (with consent where required)
• Compliance with legal obligations

6. Legal Basis

• Consent (Art. 6(1)(a)): Marketing communications, non-essential cookies
• Contract (Art. 6(1)(b)): Providing services you have requested
• Legitimate interest (Art. 6(1)(f)): Platform security, fraud prevention, service improvement
• Legal obligation (Art. 6(1)(c)): Tax, accounting, and regulatory requirements

7. Data Sharing

We do not sell your personal data. We may share data with:

• Hosting and infrastructure providers (Hetzner Online GmbH, Germany — EU)
• Analytics and communication tools (only with appropriate consent or contractual safeguards)
• Public authorities when required by law

8. Data Retention

• Contact form submissions: 12 months after resolution
• Account data: for the duration of the service relationship plus applicable legal retention periods
• Analytics data: as described in our Cookie Policy

9. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You may also withdraw consent at any time. To exercise your rights, contact info@deltazi.com or see our Data Deletion Policy.

10. Security

We implement SSL/TLS encryption, access controls, regular backups, and EU-hosted infrastructure to protect your data.

11. Supervisory Authority

If you believe your rights have not been respected, you may lodge a complaint with your local data protection authority.