ZASTIFY← Back homeInformation we process
We process the minimum information needed to operate the service: your email address for sign-in, your device-generated Zastify ID, the display name and profile details you choose, public encryption keys and encrypted account-key backups, pairing requests, session and security records, and operational metadata such as message sender, recipient, time, type, delivery state, and encrypted payload size.
Messages, media, and calls
Message text, media, file metadata inside the encrypted envelope, and call-signaling payloads are encrypted by the app. The service stores or relays ciphertext. Voice and video media uses WebRTC and is encrypted in transit by the WebRTC protocol; when a relay is required, the relay forwards encrypted media. Call records may include participants, call type, status, duration, and time.
How we use information
- Authenticate you and protect your account.
- Deliver pairing requests, encrypted messages, media, receipts, and call signals.
- Maintain reliability, prevent abuse, diagnose failures, and secure the service.
- Send release information when you voluntarily join the early-access list.
Sharing
We do not sell personal information or build advertising profiles. Information may be processed by infrastructure and email providers that help us operate Zastify, under appropriate service terms. We may disclose limited information when legally required or necessary to protect users and the service.
Retention and deletion
We retain account and service records only while reasonably needed to provide and secure Zastify, meet legal obligations, and resolve disputes. Expired OTPs, sessions, and call signals are short-lived or eligible for cleanup. You may request account deletion by emailing privacy@zastify.in. We will verify the request before deleting or de-identifying eligible account data.
Security and limitations
We use encryption, access controls, rate limits, and hashed authentication records. No service can guarantee absolute security. Endpoint compromise, an unlocked device, screenshots, recipients, device backups, and notification previews can expose information outside the encrypted transport.
Children
Zastify is not directed to children under 13, or the higher minimum age required in their country. We do not knowingly collect data from children below the applicable age.
International processing
Your information may be processed in countries other than where you live. Where required, we use appropriate protections for international transfers.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information. Contact us to exercise a right. You may also complain to your local data-protection authority.
Changes and contact
We may update this policy as Zastify evolves. Material changes will be posted here with a new effective date. Questions and privacy requests can be sent to privacy@zastify.in.