Zaphar

Legal

Privacy Policy

Effective September 2, 2026. This Privacy Policy ("Policy") explains how Pevail LLC ("Pevail," "we," "us," or "our") handles personal data in connection with the Zaphar application and related services (collectively, the "Service"). It applies to users of the Service worldwide ("you" or "User").

1. Information we collect

We may collect the following categories of personal data in connection with the Service:

  • Account information: information used to create and manage an account, such as your name, email address, login credentials, and preferences.
  • Information you provide: receipts, images or files, transaction records, budgets, goals, lists, and other information you choose to enter or save in the Service.
  • Connected financial information: if you choose to connect a bank or card account, information made available through that connection, such as account details, balances, and transactions. We do not receive or store your online banking credentials.
  • Usage and technical information: information about how you use the Service, including device and browser information, IP address, approximate location, and similar technical information.
  • Communications: information you provide when you contact us, along with information needed to send account, security, and other Service-related messages.

2. How we use information

We may use personal data to:

  • Provide, operate, maintain, and improve the Service.
  • Organize information you provide and offer features such as categorization, summaries, and spending insights.
  • Support connected financial accounts, where that feature is available and you choose to use it.
  • Send account, security, and Service-related communications.
  • Protect the Service, our users, and others, including by detecting and addressing fraud, abuse, and security issues.
  • Comply with applicable law and enforce our agreements.

Some features may use automated tools to organize information or generate suggestions. These tools are intended to support the Service and are not used to make decisions about your legal rights or eligibility to use the Service.

We do not sell or share personal data for cross-context behavioral advertising, and we do not use financial data to serve third-party advertising.

3. Cookies and similar technologies

We and the providers that support the Service may use cookies and similar technologies for account access, preferences, security, and basic analytics. You can control cookies through your browser settings, although disabling them may affect some functionality. These technologies are not used to serve third-party advertising.

4. When we share information

We may share personal data with service providers that help us provide and protect the Service. These providers may support:

  • Financial account connections.
  • Application hosting, cloud infrastructure, and data storage.
  • Automated processing and Service features.
  • Analytics, communications, security, and support.

Service providers may process personal data only as needed to perform services for us and under appropriate restrictions. We may also disclose information when required by law, to protect the rights or safety of the Service and its users, or in connection with a merger, acquisition, financing, or sale of assets.

5. Data retention and deletion

We retain account and financial information for as long as your account remains active or as needed to provide the Service. When you delete your account through the Service or request deletion in writing at privacy@zaphar.app , we will permanently delete your personal data, including receipts, transactions, and connected account information, within thirty (30) days, subject to the exceptions below.

We may retain limited information when required by law, reasonably necessary to resolve a dispute, prevent fraud or abuse, protect security, enforce our agreements, or until it is removed through ordinary backup-retention processes.

6. Your rights

Depending on where you live and subject to applicable law, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal data. You may also be able to object to or restrict certain processing, withdraw consent where applicable, opt out of certain uses or disclosures, or complain to a privacy or supervisory authority.

California residents may also have rights to know what personal data is collected and how it is used or disclosed, to correct or delete personal data, to opt out of its sale or sharing, and to limit certain uses of sensitive personal information.

To exercise a privacy right, contact us at privacy@zaphar.app. We may take reasonable steps to verify your identity and will respond within the timeframe required by applicable law. We will not discriminate against you for exercising a privacy right.

7. Children's privacy

The Service is not directed to, and may not be used by, individuals under thirteen (13) years of age. We do not knowingly collect personal data from children under 13. If we learn that we have collected such information, we will delete it promptly. Please contact privacy@zaphar.app if you believe a child has provided personal data to us.

8. Data security

We use reasonable technical and organizational safeguards designed to protect personal data from unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International data transfers

Personal data may be processed or stored in the United States and other jurisdictions. Where required by applicable law, we use appropriate safeguards for international data transfers.

10. Changes to this Policy

We may update this Policy from time to time. We will update the effective date above and provide additional notice of material changes when required or appropriate.

11. Contact

Pevail LLC
Attn: Privacy
Email: privacy@zaphar.app