Who we are
Our website address is: https://www.zaptic.io, along with its official subdomains (including api.zaptic.io) and our official integration add-ons/plugins for web forms. Zaptic is an AI-powered data extraction platform designed to help businesses, recruiters, and developers automate data processing from unstructured documents.
Data We Process via our API and Integrations (Document Extraction)
When you use Zaptic’s services, API, or WordPress plugins (such as our integrations for WPForms, Formidable Forms, Ninja Forms, or custom Composer/Laravel packages) to process documents (CVs/Resumes, Insurance Policies, Invoices, Legal Documents, etc.):
- Data Extraction: We temporarily process the uploaded files to extract structured JSON data.
- Data Privacy & AI Models: Zaptic utilizes advanced LLM technology via official production environments. For paid tiers, your business data and extracted documents are handled via enterprise keys and are strictly private; they are never used by third-party infrastructure providers to train public models.
- API Logs: For transparency, usage tracking, and security, we log transaction metadata including: request timestamp, origin domain, API Key identifier, token/credit consumption, cache utilization status, and license type.
Media & Document Uploads
If you upload images or PDF documents to the website or via our API for extraction, please be aware that any metadata embedded in those files (such as EXIF GPS location data) could technically be read. While Zaptic only extracts target fields requested by your configuration, users are responsible for ensuring they have the right to process any confidential third-party personal data contained within those documents.
Cookies & Session Management
To provide a seamless SaaS experience across our ecosystem, Zaptic utilizes cookies:
- Single Sign-On (SSO): If you access our main site and our web application or API subdomains, session cookies are shared across *.zaptic.io so you do not have to log in multiple times.
- Authentication: When you log in, we set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed immediately.
- Form Validation: If you interact with our forms or support portals, temporary cookies may be stored to ensure security against automated brute-force submissions.
Account Protection and Security Tracking
To ensure the stability of the platform and protect our backend server architecture:
- Security Logging: We actively monitor traffic and error rates (such as repeated 404 errors or invalid API key attempts). IP addresses displaying malicious behavior or force-attacks may be temporarily or permanently blocked via automated firewall systems to safeguard our customers’ platform availability.
- Anti-Fraud Filters: To prevent multi-accounting abuse on our free trial tiers (“Kickstart Pack”), we utilize device fingerprinting and email normalization filters during registration.
Who we share your data with
- Security & Auth: If you request a password reset, your IP address will be included in the reset email.
- Third-Party Processors: We share transaction data with secure payment gateways (such as Stripe) to manage license purchases, credit card validation, and fraud fingerprinting. We do not sell or lease any extracted document data or customer lists to third-party advertisers.
How long we retain your data
- Account Information: For users that register on our website, we store the personal information provided in their user profile indefinitely or until account deletion. All users can see, edit, or delete their personal information at any time (except their username). Website administrators can also view and update that information.
- Extraction Cache: To optimize token usage and save you credits, structured JSON extraction data may be cached temporarily on our secure servers according to system parameters before being automatically cleared.
What rights you have over your data
If you have an account on this site or use our API keys, you can request to receive an exported file of the personal data we hold about you, including any profile data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, billing, legal, or security purposes.
Where your data is sent
Visitor sign-ups, payment processing, and form entries may be checked through automated spam and fraud detection services. API requests are processed through our secure servers at api.zaptic.io before interacting securely with target extraction engines.