Privacy Policy & Personal Data Processing

The controller of the personal data collected through zevraz.com is Juan Pablo Valenzuela, a natural person, with a commercial address in Santiago, Chile, operating commercially under the trade name ZEVRAZ.

For general inquiries or to exercise your rights over your personal data, you can write to: hello@zevraz.com

Technical inquiries about our products and services can also be directed to Iván Sangueza (Director of Technology Infrastructure), who is part of the ZEVRAZ operating team. Iván is not the legal controller of personal data processing; that responsibility rests exclusively with Juan Pablo Valenzuela as stated in this point.

a) Data you give us directly

When you book a call with us through Google Calendar (the «Book a call» link), we collect your name and email address, plus the event's own information (booked date and time). This happens inside the Google Calendar platform, which is also subject to Google's privacy policy.

If you write to us directly at hello@zevraz.com, we collect the data you choose to include in that email (name, email and the content of your message).

b) Data we collect automatically

As you browse zevraz.com we use the following analytics and measurement tools, which may collect your IP address, device and browser type, pages visited, time spent browsing and traffic source:

• Google Analytics
• Mixpanel — records browsing events anonymously; we do not associate these events with your name or email.
• Vercel Analytics — performance and usage metrics for the site, provided by our hosting provider.

• Manage and confirm the meeting you booked.
• Follow up commercially regarding ZEVRAZ services.
• Understand how the website is used, in order to improve it.
• Respond to your inquiries when you write to us.

We do not use your data to sell it to third parties or for purposes other than those described here.

We process your data on the basis of:

• Legitimate commercial interest — to manage meetings and follow up on contact requests.
• Your consent — for the use of cookies and non-essential analytics technologies (see section 7).

We share data only with the providers that allow us to operate the site and manage commercial contact:

Because these providers are located outside Chile, this involves an international transfer of data. We only work with providers that have their own internationally recognized security measures and privacy policies.

We do not sell or rent your data to third parties for advertising purposes.

We use cookies and similar technologies (local storage, session identifiers) associated with Google Analytics, Mixpanel and Vercel Analytics to understand site usage. You can block or delete these cookies from your browser settings; some site functions may be affected if you disable them.

You may exercise your rights at any time to:

• Access — know what data we hold about you.
• Rectification — correct incorrect or outdated data.
• Cancellation/Deletion — request the deletion of your data.
• Objection — object to a specific use of your data.
• Portability — request your data in a reusable format.

To exercise any of these rights, write to us at hello@zevraz.com. We will respond within a reasonable time in accordance with applicable law.

We apply reasonable security measures, appropriate to the nature of the data we process, to protect your information against unauthorized access, loss or misuse. No system is infallible; if we detect a breach affecting your data, we will notify you as required by law.

zevraz.com is aimed at businesses and is not designed to be used by minors. We do not intentionally collect data from anyone under 18 years of age.

If you apply for a role at zevraz.com/careers, we process the data you give us to assess your application: your CV, contact details, your answer to the challenge (written or audio), the links you share, your availability and which site you came from.

• Use of AI — we use the Gemini API (Google) to read your CV and fill in the form, and to prepare a summary and a suggested fit for the role. It's only an aid: a person on the team always makes the decision. We instruct it to ignore anything unrelated to the work, such as age, gender, nationality or photos.
• Where it's stored — in a private Notion database that only the Zevra team involved in hiring can access.
• How long — 12 months from your application, so we can consider you for other roles. You can ask us to delete it sooner by emailing hello@zevraz.com.
• Legal basis — your consent, given when you send the application and withdrawable at any time.

We may update this policy when our practices or applicable law change. The «last updated» date at the top of this document indicates the current version.

When ZEVRAZ builds or operates an artificial intelligence agent, an automation or a technology pack (such as the «Packs PYME») for a client, we process the personal data of that business's end customers on behalf of and following the instructions of our client. In that relationship, ZEVRAZ acts as the data processor, and our client is the controller of their own end customers' data.

Depending on the service contracted by each client, this may include: name, contact details (email, phone, WhatsApp), conversation history with an AI agent, order or transaction data, or other information the client decides to integrate into their system. The exact detail of what is processed and for what purpose is specified in the commercial agreement with each client.

• We only process this data according to our client's instructions, for the purposes of their business.
• We do not use this data for ZEVRAZ's own purposes, nor combine it with other databases, nor sell it.
• When a client's contract ends, we delete or return the data processed on their behalf, unless there is a legal obligation to keep it.

Depending on the service, we may rely on technology infrastructure providers (for example, third-party language models, messaging platforms such as WhatsApp, automation tools, or the client's own CRM). These providers are detailed in the specific agreement with each client.

As of the date of this policy, ZEVRAZ does not operate agents or automations that process sensitive data (for example, health data). If in the future a client requires that type of processing, we will apply reinforced security measures and additional impact assessments before starting that service.

If you have questions about how your data is used when interacting with an AI agent or system built by ZEVRAZ, you should refer to the privacy policy of the business you interacted with — it is that business that decides how your data is used. ZEVRAZ, as a technology provider, has no direct relationship with you nor contacts you independently.