Security and protection of your data

General GDPR provisions  

Zestmeup is a company under French law and its teams are based in France.

The GDPR legal basis for using Zest is legitimate interest and users systematically receive a GDPR warning when they first sign up. Users have the right of access, rectification, erasure, as well as the right to request the restriction of processing or to object to processing.  

Hosting

The data is hosted in France by OVH, which is certified ISO 27001, SOC 1 & SOC2.

Data protection and storage

All connections are secured with HTTPS.

No activity data is used or stored via the mobile application.

Data is stored throughout the contract period with Zest and for up to 60 days after termination.  

Password security policy

Passwords are encrypted and the encryption mode can be set by the super administrator.