Privacy Policy
Effective date: November 4, 2026
Previous version: September 25, 2025
Zucca, Inc. ("Zucca," "we," "us") provides AI-enabled software for product development at food and beverage companies. This policy explains what information we collect, how we use it, and the choices you have. If you use Zucca under a customer contract, that contract controls where it conflicts with this policy.
For account, website, and marketing information, Zucca decides how the information is used. For Customer Data (what your company uploads or imports), your company decides what to submit, and Zucca processes it on your company's behalf.
Information We Collect
Account information. Name, work email, role, company, and profile picture. If you sign in with Google or Microsoft, we also receive your basic profile from them.
Customer Data. Files, formulas, specifications, costs, nutrition and claims data, comments, chat prompts, and AI outputs that you or your colleagues submit or import. It can include business contact details of your suppliers that appear in uploaded documents.
Files from connected storage. If an administrator connects Google Drive, SharePoint, OneDrive, Dropbox, or Box, we import the files in the folders they choose.
Usage information. Device and browser details, pages and features used, logs, and product events. In the signed-in app we also use session recording and product analytics (see Cookies and tracking).
Billing information. Payments are handled by our payment provider. We see your plan and the card brand and last four digits, not your full card number.
Support and feedback. Messages you send us, including screenshots or screen recordings from the in-app feedback tool.
Business contacts. Work contact details of people at companies we may want to work with, from public sources and business-data providers.
Do not upload payment card numbers, bank account numbers, government ID numbers, or health records about individuals.
How We Use Information
To provide, secure, support, and improve Zucca, including turning the files you import into searchable ingredient and supplier records.
To contact you about your account, security, and product updates.
To send marketing emails about Zucca, where permitted. Every marketing email has an unsubscribe link.
To prevent fraud and abuse, enforce our terms, and comply with the law.
AI Features
We use AI model providers to process Customer Data and generate results for you. We do not use Customer Data to train or fine-tune AI models. AI outputs can be wrong. Review them before relying on them, especially for labeling and regulatory decisions.
Google and Microsoft Data
This section applies when you sign in with Google or Microsoft, or when an administrator connects a Google or Microsoft account to import files.
What we access. Read-only access to your files. Signing in with Google or Microsoft asks for this access along with your basic profile. We import files only from the folders an administrator chooses to connect.
Why. To turn your documents into searchable ingredient and supplier records and keep them up to date.
What we do not do. We do not sell this data, use it for advertising, or use it to train AI models. We do not transfer it to others except as needed to provide these features, with your consent, for security or abuse prevention, to comply with the law, or in a merger or acquisition with your prior consent.
Limited Use. Zucca's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting and deleting. An administrator can disconnect a storage account at any time. For Google Drive and Dropbox, the disconnect screen offers to delete the imported files. For other sources, email us. You can also revoke Zucca's access in your Google Account permissions or your Microsoft account.
Cookies and Tracking
Essential cookies and storage. The signed-in app uses first-party cookies and browser storage to keep you signed in and remember preferences. Our authentication provider sets session cookies.
Session recording and analytics. In the signed-in app we use session recording (LogRocket) and product analytics (Mixpanel) so we can support you and improve the product. A recording can capture what appears on your screen, including formulas, supplier and ingredient names, and chat messages. Form fields are masked. Product events can include the name of the product, client, or ingredient involved. These tools receive your user ID, email address, and organization. Our in-app feedback tool (Gleap) records your screen when you send a report, and our error-monitoring tool receives your user ID, email address, and organization with an error report.
Website. Our website, hosted on Framer, uses analytics to understand visits.
Your choices. You can control cookies in your browser, though blocking them may stop Zucca from working. We do not currently respond to Do Not Track signals. We do not sell personal information or share it for targeted advertising.
Who We Share Information With
We do not sell or rent personal information. We share it with:
Service providers that host, secure, support, or help operate Zucca: cloud hosting, AI models, authentication and billing, email delivery, error monitoring, analytics and session recording, and support tools. They are bound by confidentiality and data-protection terms. A list is available on request at privacy@zucca.ai.
Advisors and authorities where the law requires it or to protect Zucca's rights.
A buyer in a merger, acquisition, or sale of assets. We will notify affected customers.
Others, with your consent.
Where Information is Stored
We host Customer Data in the United States. Some AI and monitoring providers may process data in other countries, and some employees and contractors who support Zucca work outside the United States. They can access our systems only as needed to operate, support, and secure Zucca.
Security
We use safeguards designed to protect your information, including encryption in transit and at rest, role-based access controls, and logging. We have completed an independent SOC 2 Type 2 examination of our security controls, and our report is available on request through our Trust Center. No system is perfectly secure. If we learn of a security incident affecting your personal information, we will notify affected customers as required by law and our agreements.
Retention and Deletion
We keep information as long as needed to provide Zucca, meet legal obligations, and resolve disputes. If your contract ends, or you ask us to delete your Customer Data, we will return it on request and delete it within 90 days, and from backups within 150 days. Deleting your account removes your login and profile. Your name can remain in comments and history inside your organization's records until the organization's data is deleted.
Your Rights
Depending on where you live, you may have the right to access, correct, delete, export, or object to our use of your personal information. We honor these requests for all users. Email privacy@zucca.ai and we will respond within 45 days. For Customer Data, we may refer you to your organization, which controls it. You can also complain to your local data-protection authority.
Children
Zucca is for business use and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact privacy@zucca.ai and we will delete it.
Changes
We may update this policy. We will post the new version with its effective date and email account administrators about material changes before they take effect.
