The data belongs to your company
Your company owns everything in the workspace. We don't sell it, don't use it for advertising and don't build behavior profiles. Want it exported or deleted? Just ask.
Data protection
Your company's data, well kept.
Zizelo handles sensitive information: what the company spends, who has access to what and which accounts are connected. That is why security comes before any new feature. Below, in plain language, is what we do to protect what you trust us with.
Our commitments
Four things you can always count on
We never change your accounts
When you connect Google Workspace, Microsoft 365 or Meta Ads, Zizelo only asks for read access. Licenses, users and campaigns stay exactly as they are.
Each company in its own space
One company's data never shows up for another. This isolation is checked by automated tests on every new version.
Everything is on record
Every change records who made it, when and what changed, including actions by our team. Your company can see and search this history.
Layered protection
From your browser to the backup
Each layer protects one part of the path, so that a single failure doesn't reach your data.
In transit
- Every connection uses HTTPS, and the browser is required to keep it encrypted.
- Fonts are local. Google Analytics only loads with permission, to measure public pages and sign-up.
- The database is not exposed to the internet.
At sign-in
- Sign-up only with a company email and an active CNPJ; everyone else joins by invitation.
- Passwords stored one-way: no one on our team can read them.
- Password recovery with a code valid for 15 minutes and limited attempts.
In the data
- Keys to your accounts encrypted with AES-256 and never shown back.
- Administrator, Specialist and Reader roles, checked on the server for every action.
- Minimal collection: from an imported statement we keep only recurring charges and those of tools in your inventory.
In operations
- Daily database backup, verified and kept for 14 days.
- Every change goes through automated tests before release and rolls back on its own if something fails.
- Public status page, with incidents and maintenance announced in advance.
By the numbers
Security you can measure
- AES-256
- encryption for the keys to your accounts
- 256 bits
- of randomness in every sign-in session
- 0
- advertising cookies and workspace data sent to Analytics
- Daily
- database backup, verified before it is accepted
- 14 days
- of backups kept to go back in time
- 2 hours
- maximum support access, always visible to you
Transparency
What we keep and what we don't
We keep, so the service works
- Tools you pay for, amounts, licenses and renewal dates
- People and access your team records
- Domains and the monthly figures of ad accounts
- Your workspace's change history
We don't keep
- The other lines of an imported statement: only recurring charges and those of inventory tools stay
- Readable passwords, neither yours nor your accounts'
- Data about the people reached by your ads
- IP or device of whoever opens our emails
- Advertising cookies
Support
When our team needs to help
Sometimes, to solve a problem, someone on the Zizelo team needs to see the dashboard the way you do. That follows clear rules.
Separate entrance
The team signs in through its own area, with a one-time code sent by email. The dashboard password does not open it.
Limited time
Viewing your dashboard lasts two hours at most.
Never acting for you
The team does not accept terms or invitations on your behalf.
Visible in your history
Every access and change shows up in your workspace history, marked as a support action.
LGPD
Within the law, in writing
Your company is the controller of the workspace data and Zizelo acts as processor, under the LGPD (Brazil's data protection law). The Privacy Policy and Terms of Use are published with version and history, and the dashboard asks for new acceptance whenever one changes. Cookies beyond the necessary ones only work with your permission.
Few vendors, all known
- Resendsending Zizelo's emails
- Google Analyticspublic-page and sign-up statistics, only with permission
- BrasilAPIpublic CNPJ lookup at sign-up
- Registro.br and RDAPpublic domain lookup
- Google, Microsoft and Metaread-only, and only when your company turns on the connector
Going deeper
Documents and technical details
Trust CenterEvery practice in detail, mapped to SOC 2 and ISO/IEC 27001, for your IT or legal team.Privacy PolicyWhat we collect, why, for how long and who we share it with.Terms of UseThe rules of the service and each party's responsibilities.Service statusHow Zizelo is doing now and the last 90 days of history.Report a vulnerabilityFound a flaw? Write to our security contact.
security@zizelo.comPut your company's tools in order, with peace of mind.
Free up to 100 people, no credit card. The data stays your company's.
Create a free account