Zitadel · Privacy & Data

Zitadel privacy & data

Read from Zitadel's own page on 2026-11-10. 23 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

value: controller
Zitadel determines the purposes for and means of the processing (i.e., we are the data controller) of your personal data as described in this privacy policy
Read from Zitadel's own page on 2026-11-10

Data categories

category: identifying
Names Email addresses User names
Read from Zitadel's own page on 2026-11-10
category: contact
Phone numbers
Read from Zitadel's own page on 2026-11-10
category: financial
Billing address Payment information Customer number Support Customer history Credit rating information
Read from Zitadel's own page on 2026-11-10
category: location
Geolocation information based on the IP address.
Read from Zitadel's own page on 2026-11-10
category: behavioral
Usage metrics User behavior User journeys (eg, Milestones)
Read from Zitadel's own page on 2026-11-10
category: device
Usage metadata User agent IP addresses Operating system
Read from Zitadel's own page on 2026-11-10
category: communication
Communication data Emails Chats Call metadata Call recording and transcripts
Read from Zitadel's own page on 2026-11-10
category: demographic
Profile data Profile pictures Gender Languages Nicknames or Display names Phone numbers
Read from Zitadel's own page on 2026-11-10

Purposes

purpose: Provision of requested Services
The personal data is processed by us exclusively for the provision of the requested Services or the use of the agreed Services.
Read from Zitadel's own page on 2026-11-10
purpose: Website analytics
We use cookies for website analytics purposes in order to operate, maintain, and improve the Services for you.
Read from Zitadel's own page on 2026-11-10

Retention

scope: Personal data generally
We will retain personal data for the period of time necessary for the particular purpose for which it was collected
Read from Zitadel's own page on 2026-11-10

Residency

The page states nothing on this.

International transfers

mechanism: DPF
Zitadel complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
Read from Zitadel's own page on 2026-11-10
mechanism: SCC
we only transfer personal data after we have implemented the legally required measures for this, such as concluding standard contractual clauses on data protection or obtaining the consent of the data subjects.
Read from Zitadel's own page on 2026-11-10

Subprocessors

An up-to-date list of all the providers we use and their areas of activity can be found on our Trust Center .
Read from Zitadel's own page on 2026-11-10

Data processing agreement

Deletion

route: Contact the contact person; rights requests via contact details
If you wish to exercise your rights, you may do so by contacting the above-mentioned contact person.
Read from Zitadel's own page on 2026-11-10

Data subject rights

right: Access
Right to information You have the right to know what personal data we hold and process about you and to access such personal data.
Read from Zitadel's own page on 2026-11-10
right: Rectification
Right to rectification You have the right to request the correction of inaccurate personal data concerning you.
Read from Zitadel's own page on 2026-11-10
right: Erasure
Right to erasure (right to be forgotten) You have the right to request the deletion or erasure of the personal data concerning you.
Read from Zitadel's own page on 2026-11-10
right: Restrict processing
Right to restrict processing You have the right to request to restrict the processing of your personal data in certain cases.
Read from Zitadel's own page on 2026-11-10
right: Portability
Right to data portability You have the right to receive the personal data concerning you in a structured, common and machine-readable format
Read from Zitadel's own page on 2026-11-10
right: Object
Right to object Depending on the circumstances, you have the right to object to the processing of personal data concerning you
Read from Zitadel's own page on 2026-11-10

Sale or sharing

stance: conditional
Although we do not sell personal data for monetary value, our use of cookies and automated technologies may be considered a "sale" / "sharing" in certain states, such as California.
Read from Zitadel's own page on 2026-11-10

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page