Zen-Tavo Privacy Policy

Zen-Tavo is operated by Allan Monge Jiménez, operating as Chirripó Studio. For privacy purposes, Chirripó Studio / Allan Monge Jiménez is the data controller for Zen-Tavo. In that role, Chirripó Studio determines the purposes and means of processing Zen-Tavo-related personal information, except where a payment provider such as PayPal or Lemon Squeezy acts under its own terms and privacy policy.

Contact/legal mailing address: Chirripó Studio / Allan Monge Jiménez, Calle Almendros #26, San Diego, La Unión, Cartago, Costa Rica.

Contact us at legal@chirripo.studio for privacy questions, account requests, data requests, or legal notices. For product support, billing help, or refund requests, use support@app.zen-tavo.com.

Zen-Tavo is expense-tracking and budgeting software. It helps users manually record transactions or forward bank and receipt notification emails to a personal @zen-tavo.com address so the app can extract, categorize, and organize transaction records. By forwarding email to Zen-Tavo, users confirm they are authorized to provide that content for processing and understand that forwarded messages may include personal or financial information about themselves or third parties.

Zen-Tavo is not a bank, lender, investment adviser, tax adviser, accounting firm, credit service, debt-relief service, currency exchange, or money-movement service.

• Account information such as name, email address, password authentication data, locale, timezone, and user preferences.
• Forwarded email content, email metadata, attachments, receipt or document files, extracted transaction details, categories, budgets, dashboard summaries, corrections, and export activity.
• Application activity such as sign-in records, feature usage, support messages, error reports, security events, device/browser metadata, and analytics events where enabled.
• Payment and subscription metadata from payment providers, such as customer id, subscription id, plan or variant, renewal status, billing status, tax information, and customer portal links. Payment providers process full payment credentials under their own terms and privacy policies.

Zen-Tavo processes financial notification emails and the transaction records derived from them because users choose to forward or enter that information. Zen-Tavo does not ask for bank login credentials, full payment card numbers, bank account numbers, government IDs, or online banking passwords.

Users are responsible for reviewing AI-generated or automatically extracted transaction data before relying on it.

• Provide, secure, personalize, and maintain the application.
• Extract, categorize, search, summarize, and export user transaction data.
• Process subscriptions, trials, cancellations, billing support, refunds, taxes, and customer portal access through authorized payment providers.
• Detect abuse, troubleshoot errors, improve reliability, measure product usage, and respond to support or privacy requests.
• Comply with legal obligations and enforce the Terms and Conditions.

AI-powered extraction and categorization run through Google Cloud services, including Vertex AI, in our Google Cloud account. We use those services to interpret forwarded emails and produce structured transaction records.

Data sent to Vertex AI for this purpose is processed to provide the requested feature. Consistent with Google Cloud's AI/ML privacy commitments, Google does not use customer data submitted to managed Vertex AI models to train or fine-tune AI/ML models unless the customer gives prior permission or instruction. Zen-Tavo does not allow forwarded financial emails or extracted transaction records to be used to train public AI models.

Zen-Tavo applies industry-standard safeguards such as encrypted transport, provider data-processing controls, access controls, data minimization, redaction where practical, and internal review controls. AI output can be wrong or incomplete, so users remain responsible for reviewing their records.

We use service providers to run Zen-Tavo. These providers may process personal information only as needed to provide their services to us.

• Google Cloud for hosting, storage, networking, and Vertex AI processing.
• Email infrastructure providers for inbound forwarded email processing, if enabled.
• PayPal for live subscription checkout and billing during the payment-provider transition, including existing PayPal subscriptions unless they are cancelled, migrated, or otherwise changed with appropriate notice.
• Lemon Squeezy for future or approved checkout, subscription billing, tax handling, payment records, refund administration, chargeback handling, and customer portal access.
• Error monitoring, security, analytics, and support tools where configured.

Zen-Tavo keeps PayPal available for live subscription payments during the payment-provider transition. If Lemon Squeezy approves Zen-Tavo for processing, new subscriptions may be routed through Lemon Squeezy while existing PayPal subscriptions may continue through PayPal unless they are cancelled, migrated, or otherwise changed with appropriate notice.

Payment providers process payment details under their own terms and privacy policies. Zen-Tavo receives subscription and customer metadata needed to grant access, manage billing support, and reconcile subscription status.

We keep account, transaction, email, attachment, subscription, support, and security records as long as needed to provide Zen-Tavo, comply with legal obligations, resolve disputes, prevent abuse, and maintain reliable backups.

Users can delete their account and associated application data from the app or by contacting support. Some records may remain for a limited period in backups, logs, payment records, fraud-prevention records, or legal/compliance records.

Zen-Tavo is operated from Costa Rica and uses service providers that may process data in other countries. By using Zen-Tavo, you understand that your information may be processed outside your country of residence.

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal information. You may also withdraw consent where processing depends on consent.

To make a privacy, data, or legal request, contact legal@chirripo.studio. We may need to verify your identity before completing a request.

Zen-Tavo is not intended for children under 13. Users under 18 may use the application only with permission from a parent or legal guardian where required by law.

Zen-Tavo does not sell personal information. Zen-Tavo does not use forwarded financial emails or extracted transaction records for behavioral advertising.

Zen-Tavo uses reasonable administrative, technical, and operational safeguards to reduce the risk of unauthorized access to account, transaction, forwarded-email, attachment, support, and subscription data.

If we confirm a personal-data incident that requires notice, we will notify affected users and competent authorities without undue delay where required by applicable law.

We may update this policy as Zen-Tavo, our providers, or legal requirements change. We will update the date above and provide additional notice for material changes when appropriate.