In accordance with the Personal Data Protection Law (ZZPL) of the Republic of Serbia and the General Data Protection Regulation (GDPR), we inform you how we collect and process your data.
Data controller
Sixpack Dizajn Studio
Hrizantema 8d, 11000 Belgrade, Republic of Serbia
Tax ID: 105368192
Contact: hello@zaputio.com
What we collect and why
Data we process
👤
Account dataUsername, email address, and password (stored hashed, if you use one). Purpose: authentication and account management. Legal basis: performance of the service contract.
🔐
Google sign-inIf you sign in with a Google account, we receive your email address and basic profile information from Google. Purpose: passwordless authentication. Legal basis: user consent.
✈️
Trip dataPlans, itineraries, activities, locations, and notes you enter yourself. Purpose: providing the app's functionality. Legal basis: performance of the contract.
✦
AI assistant conversationsMessages you exchange with the Zaputio AI assistant while planning a trip. Purpose: generating and editing itinerary suggestions. Legal basis: performance of the contract.
📷
PhotosImages you upload related to your trips. Compressed and stored on the server. Free plan: max 10 MB. Legal basis: user consent.
📧
Transactional emailsWe use your email address to send the magic sign-in link and registration confirmation. We do not send promotional emails without your explicit consent.
🍪
CookiesNecessary session cookies for sign-in to function, and one persistent cookie that remembers your chosen language on the pre-login pages. We do not use cookies for tracking or advertising.
Your rights
Under ZZPL and GDPR, you have the following rights:
- Right of access — you can request to see the data we hold about you
- Right to rectification — you can request correction of inaccurate data
- Right to erasure — you can request deletion of your account and all data
- Right to data portability — you can request an export of your data
- Right to object — you can object to the processing of your data
- Right to withdraw consent — you can withdraw previously given consent at any time
You can submit requests to: hello@zaputio.com
Data retention period
Your data is kept as long as your account is active. Deleting your account permanently erases all associated data within 30 days.
Complaints
You have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (www.poverenik.rs).
Changes
You will be notified by email of any significant changes to this consent notice. The last update date is shown at the top of the page.