Privacy Policy

CAZORA PRIVATE BETA PRIVACY NOTICE This notice explains how Cazora ("Cazora," "we," "us," or "our") handles personal information when you request beta access, use the private beta, connect a Microsoft business mailbox, communicate with us, or otherwise use Cazora. Cazora is a founder-operated private beta based in Florida, United States. We do not represent Cazora as an LLC in this notice. Contact us at hello@cazora.io with privacy questions or requests. 1. INFORMATION WE COLLECT Beta-access information. When you request access, we collect the work email address, business name, optional website, service description, team-size range, current prospecting and follow-up workflow, Microsoft 365 readiness, expected mailbox model, goals, the notice version shown to you, and submission and review timestamps. Account and workspace information. If you are invited, we process account identifiers, authentication and verification status, organization membership and roles, business profile and targeting information, onboarding state, settings, approvals, and records needed to operate your workspace. Customer and sales-workflow information. Depending on the features you choose to use, Cazora may process company and contact records, prospect evidence, suppression and known-account records, campaign drafts, human approvals, delivery status, replies, opportunities, next steps, and customer-history records. You and your organization decide what business information to enter or import and are responsible for having authority to use it. Microsoft business-mailbox information. If an authorized workspace administrator connects Microsoft 365, we process the verified mailbox identity, provider account identifiers, authorization scopes, encrypted credentials, subscription and synchronization state, and the message metadata or content needed for the approved Cazora workflow. Cazora is not a full mailbox replacement and does not alter canonical Outlook mail merely because data is reviewed, exported, disconnected, or deleted in Cazora. Attachments. Cazora stores attachment metadata by default. Attachment bytes are fetched only after an explicit reviewed action, placed in temporary quarantine, and released only after supported-type and malware checks succeed. Scanning or deleting Cazora's temporary copy does not modify the Outlook attachment. Usage, security, and cost information. We process bounded technical logs, security and audit events, request and operation identifiers, feature state, provider usage and cost evidence, error classifications, device or browser information supplied in ordinary web requests, and other information needed to secure, troubleshoot, meter, and improve the service. We do not intentionally place raw mailbox content, passwords, access tokens, or provider credentials in application logs. Information from other sources. At your direction, Cazora may receive business information from Microsoft 365, files you upload, workspace members, public business sources, and prospect or contact-data providers used by an enabled feature. Provider access, model use, and sending remain subject to separate server-owned permissions and limits. 2. HOW WE USE INFORMATION We use personal information to evaluate beta fit; contact applicants about onboarding; authenticate users; create and administer workspaces; provide, secure, support, and improve Cazora; perform user-requested prospecting, campaign, mailbox, reply, and opportunity workflows; enforce approvals, suppression, limits, and acceptable-use rules; measure provider usage and costs; investigate incidents; prevent fraud and abuse; comply with law; and protect Cazora, users, recipients, and others. Cazora does not use beta-request information to create an account, workspace, charge, provider-spend authority, mailbox connection, or sending authority merely because a form was submitted. 3. HOW WE DISCLOSE INFORMATION We disclose information only as needed for the purposes above: to infrastructure and database providers such as Vercel and Supabase; to Microsoft when you connect or use Microsoft 365 features; to prospect, contact, search, verification, or AI providers when an authorized feature requires them; to billing providers if paid billing is later enabled; to professional advisers and authorities when reasonably necessary; in connection with a business transaction subject to appropriate safeguards; or at your direction. Current product foundations may involve Microsoft, Google Places, Hunter, People Data Labs, OpenAI, Supabase, Vercel, and Stripe. A listed foundation is not a promise that every provider is enabled for your workspace. Cazora's deterministic controls, not the browser or an AI model, govern whether a provider, model, charge, or send is authorized. We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and the current private beta does not use advertising cookies or invasive session replay. 4. COOKIES AND SIMILAR TECHNOLOGIES Cazora uses essential technologies needed for authentication, security, session continuity, tenant selection, and requested product functions. We may use privacy-aware first-party product events with an allowlisted, minimal event structure. We do not currently use nonessential advertising cookies or third-party behavioral advertising trackers. If that changes, we will update this notice and use any consent controls required by law before the change applies. 5. RETENTION AND DELETION We keep beta-request information while evaluating the request, communicating about the beta, protecting against duplicate or abusive submissions, and maintaining necessary audit evidence. You may ask us to delete a request; we will delete or de-identify information that is not reasonably required for security, legal, fraud-prevention, or immutable audit purposes. Workspace information is retained while the workspace is active and as reasonably needed to provide the service, meet legal obligations, resolve disputes, enforce agreements, and preserve security or audit evidence. Current reviewed mailbox choices allow message and saved-draft content retention of 30, 90, 180, or 365 days, with 90 days as the default; workflow metadata of 365, 730, or 2,555 days, with 730 days as the default; and audit evidence of 730 or 2,555 days, with 2,555 days as the default. During the private beta, automatic purging is not represented as active unless Cazora has separately verified it. Deletion and export are handled through a reviewed, organization-scoped process, and Cazora will not claim deletion from Outlook or backups when it has not occurred. 6. SECURITY We use safeguards designed to protect information, including tenant isolation, server-side authorization, row-level and function boundaries, encryption for sensitive mailbox credentials, scoped provider access, audit trails, and human approval for consequential actions. No system is perfectly secure. Please do not send passwords, secret keys, payment-card details, government identifiers, health information, or other unnecessary sensitive information through beta-request fields or ordinary support messages. 7. YOUR CHOICES AND REQUESTS You may ask to access, correct, export, or delete personal information associated with you, object to or restrict certain processing, withdraw a consent where consent is the basis, or opt out of Cazora marketing communications. These rights depend on applicable law and may be limited by another person's rights, legal obligations, security needs, or immutable audit requirements. Send requests to hello@cazora.io from an address we can reasonably verify. We may ask for information necessary to confirm your identity and authority. If we deny a legally protected request, you may reply to appeal the decision. Commercial email recipients may use the unsubscribe method in the message or contact the identified sender. Cazora customers remain responsible for truthful sender identity, lawful outreach, suppression, and honoring opt-out requests. 8. CHILDREN, LOCATION, AND INTERNATIONAL USE Cazora is a business service and is not directed to children under 18. The private beta is operated from the United States. If you provide information from another country, it may be processed in the United States and other locations where our providers operate, subject to applicable safeguards and future commercial terms. 9. CHANGES TO THIS NOTICE We may update this notice as the beta changes. The page will display the version and effective date. Material changes that affect existing workspace use will be handled through the product's versioned policy and acceptance controls where required. 10. CONTACT Privacy questions and requests: hello@cazora.io This private-beta notice is intended to describe current Cazora practices accurately. It is not a substitute for legal advice, and broader commercial or international availability may require additional terms, disclosures, or agreements.