top of page

Privacy Policy

Last updated: January 18, 2026

Zayon takes privacy and data protection seriously. This Privacy Policy describes clearly and objectively how we collect, use, store, and protect personal data in connection with our corporate website, commercial relationships, and provision of Decision as a Service (DaaS).

Personal data is processed in accordance with Brazil’s General Data Protection Law (LGPD – Law No. 13,709/2018) and other applicable regulations.

By using our channels, platforms, or services, you acknowledge and agree to this Privacy Policy.

1. Scope and Processing Contexts
This Privacy Policy applies to the following contexts:

  • Corporate website: browsing, contact forms, and interaction with publicly available content.

  • Commercial relationships: data relating to leads, clients, partners, and representatives.

  • Decision as a Service (DaaS): processing of data carried out within the decision infrastructure provided by Zayon.


Each context has specific purposes, legal bases, and responsibilities, as described below.

2. Roles in Data Processing

  • Website visitors and leads: Zayon acts as the data controller for personal data.

  • DaaS clients: the client is the data controller for operational and personal data entered into decision environments, while Zayon acts as the data processor, processing such data exclusively in accordance with the applicable agreement and the client’s instructions.


Zayon does not assume control over usage policies, decision criteria, or ultimate purposes defined by its clients.

3. Personal Data We Collect
3.1 Website and Commercial Relationships

We may collect:

  • Name, email address, telephone number, job title, and company;

  • Browsing data, including IP address, date and time of access, and pages visited;

  • Information voluntarily provided through forms or other communications.


3.2 Decision as a Service
We may process:

  • Operational, financial, or strategic data provided by the client;

  • Technical metadata required for the operation, security, and auditing of the infrastructure.


Zayon does not collect data beyond what is necessary to provide the contracted services.

4. Purposes of Processing
Data is processed for the following purposes:

  • Facilitating institutional and commercial communications;

  • Performing contracts and providing DaaS services;

  • Operating, maintaining, and protecting the decision infrastructure;

  • Complying with legal and regulatory obligations;

  • Ensuring security, traceability, and system auditing.


Client operational data is not used for marketing purposes and is not shared between clients.

5. Legal Bases
Data processing is carried out on the following legal bases:

  • Performance of a contract or taking steps prior to entering into a contract;

  • Legitimate interests, where applicable and proportionate;

  • Compliance with legal or regulatory obligations;

  • Consent, where required.


The applicable legal basis depends on the specific context of the processing.

6. Use of Data in Artificial Intelligence
Data processed through Decision as a Service is used exclusively for:

  • Operating the contracted decision engines;

  • Operating, monitoring, and improving technical performance.


Any use for model improvement or research will occur only:

  • in aggregated and anonymized form; or

  • where specifically provided for in the applicable agreement.


Zayon does not reuse client operational data outside the scope of the contracted services.

7. Information Security
Zayon implements administrative, technical, and organizational measures consistent with industry standards, including:

  • Segregated environments for each client;

  • Encryption of data in transit and at rest;

  • Permission-based access controls;

  • Continuous monitoring and incident management.

Despite these efforts, no system is completely immune to risks.

8. Data Sharing
Zayon does not sell or commercially exploit personal data.
Data may only be shared with:

  • Essential service providers, such as cloud and security providers, subject to confidentiality agreements;

  • Public authorities where required by law or court order.


9. Data Retention and Deletion
Data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations.

Data subjects may request the deletion of their personal data, except where retention is legally required.

10. Data Subject Rights
Under the LGPD, you may request:

  • Confirmation of the existence of processing and access to your data;

  • Correction of incomplete or outdated data;

  • Deletion or anonymization, where applicable;

  • Information regarding data sharing.


Requests should be sent to legal@zayon.tech and will be handled within the applicable legal deadlines.

11. Cookies and Tracking Technologies
Zayon’s corporate website uses cookies as described in our separate Cookie Policy.

Cookies are not used to access operational data processed through DaaS services.

12. Updates to this Privacy Policy
This Privacy Policy may be updated periodically. Material changes will be communicated through our official channels.

13. Data Protection Officer (DPO)
Data Controller: YATECH CONSULTORIA E PROJETOS LTDA (Zayon)
CNPJ: 43.456.983/0001-88
Address: Rua Doutor Renato Paes de Barros, 618 – Itaim Bibi – São Paulo/SP, Brazil
Chief Architect & Engineering Officer (CAEO) and DPO: Juarez Ribeiro
Official Privacy Contact: legal@zayon.tech

By using our services or channels, you acknowledge and agree to this Privacy Policy.

bottom of page