Zitadel · Privacy & Data
Zitadel privacy & data
Read from Zitadel's own page on 2026-11-10. 23 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
value: controller
Zitadel determines the purposes for and means of the processing (i.e., we are the data controller) of your personal data as described in this privacy policyRead from Zitadel's own page on 2026-11-10
Data categories
category: financial
Billing address Payment information Customer number Support Customer history Credit rating informationRead from Zitadel's own page on 2026-11-10
category: location
Geolocation information based on the IP address.Read from Zitadel's own page on 2026-11-10
category: behavioral
Usage metrics User behavior User journeys (eg, Milestones)Read from Zitadel's own page on 2026-11-10
category: device
Usage metadata User agent IP addresses Operating systemRead from Zitadel's own page on 2026-11-10
category: communication
Communication data Emails Chats Call metadata Call recording and transcriptsRead from Zitadel's own page on 2026-11-10
category: demographic
Profile data Profile pictures Gender Languages Nicknames or Display names Phone numbersRead from Zitadel's own page on 2026-11-10
Purposes
purpose: Provision of requested Services
The personal data is processed by us exclusively for the provision of the requested Services or the use of the agreed Services.Read from Zitadel's own page on 2026-11-10
purpose: Website analytics
We use cookies for website analytics purposes in order to operate, maintain, and improve the Services for you.Read from Zitadel's own page on 2026-11-10
Retention
scope: Personal data generally
We will retain personal data for the period of time necessary for the particular purpose for which it was collectedRead from Zitadel's own page on 2026-11-10
Residency
The page states nothing on this.
International transfers
mechanism: DPF
Zitadel complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.Read from Zitadel's own page on 2026-11-10
mechanism: SCC
we only transfer personal data after we have implemented the legally required measures for this, such as concluding standard contractual clauses on data protection or obtaining the consent of the data subjects.Read from Zitadel's own page on 2026-11-10
Subprocessors
An up-to-date list of all the providers we use and their areas of activity can be found on our Trust Center .Read from Zitadel's own page on 2026-11-10
Data processing agreement
Deletion
route: Contact the contact person; rights requests via contact details
If you wish to exercise your rights, you may do so by contacting the above-mentioned contact person.Read from Zitadel's own page on 2026-11-10
Data subject rights
right: Access
Right to information You have the right to know what personal data we hold and process about you and to access such personal data.Read from Zitadel's own page on 2026-11-10
right: Rectification
Right to rectification You have the right to request the correction of inaccurate personal data concerning you.Read from Zitadel's own page on 2026-11-10
right: Erasure
Right to erasure (right to be forgotten) You have the right to request the deletion or erasure of the personal data concerning you.Read from Zitadel's own page on 2026-11-10
right: Restrict processing
Right to restrict processing You have the right to request to restrict the processing of your personal data in certain cases.Read from Zitadel's own page on 2026-11-10
right: Portability
Right to data portability You have the right to receive the personal data concerning you in a structured, common and machine-readable formatRead from Zitadel's own page on 2026-11-10
right: Object
Right to object Depending on the circumstances, you have the right to object to the processing of personal data concerning youRead from Zitadel's own page on 2026-11-10
Sale or sharing
stance: conditional
Although we do not sell personal data for monetary value, our use of cookies and automated technologies may be considered a "sale" / "sharing" in certain states, such as California.Read from Zitadel's own page on 2026-11-10
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page