Privacy Policy
Updated: 2026-10-13 · ZUMIP PayGuard
MAZA PRODUCTION is an independent operator (natural person) and is not presented as a registered company. Hosting provider: ITGLOBAL.COM · Email provider: resend · Payment processor: dalink
Who operates ZUMIP
The service is operated by MAZA PRODUCTION (ZUMIP), operating from Kazakhstan. Privacy requests: [email protected]. The hosting country is Canada. These details identify the operator of account data; business customers generally determine how their own client and invoice data is used.
What information we process
We store your name, email, password hash, company and billing status; the clients, contacts, invoice amounts, due dates, links and reminder content you enter; security and sign-in attempt information. We do not store payment-card details. CSV, XLSX and PDF uploads are parsed in memory and are not retained as original uploaded files.
Purposes and legal grounds
We use account details to provide the contracted service, protect accounts and prevent abuse; invoice and recipient data is processed on the business customer’s instructions. Where applicable, the legal bases are performance of contract and legitimate interests in security. Optional analytics or marketing would require a separate appropriate legal basis and, where required, opt-in consent. Neither is enabled in this package.
Recipients and transfers
Account data is stored on the hosting provider ITGLOBAL. Outgoing email is delivered through Resend, which processes message content and recipient addresses. Paid subscription payments are handled by the checkout provider DaLiLink. We do not sell personal information.
Retention and security
Active account and invoice records remain until deleted by the account owner or required by law. Account deletion removes the account and its clients, invoices and reminders from the active database. Signed sessions, password hashing, tenant isolation and CSRF protections reduce risks but cannot eliminate them. Some records may be retained where law requires.
Your rights and customer records
Depending on applicable law, you may request access, correction, export, erasure, restriction, objection or withdrawal of consent where used. Use the Settings page or contact [email protected]. For personal information submitted by a business customer about their own clients, contact that business first; we assist with lawful requests.
International visitors and children
Service is intended for businesses and persons aged 18 or older, not children. Data is processed under the laws applicable to the operator, including data-protection rules such as the GDPR, UK GDPR or LGPD where they apply.
Updated: 2026-10-13. [email protected]