Legal
Privacy Policy
Last updated: April 2026
What we collect
When you sign up for the waitlist or pilot, we collect your name, work email, company name, and optionally your ServiceNow instance URL and a description of your challenges.
When you connect a ServiceNow instance, we collect OAuth client credentials (encrypted at rest) and ServiceNow metadata: assignment groups, catalog items, HR services, routing rules, and custom table schemas. We do not collect ticket content, user PII, or attachment data.
How we use your data
ServiceNow metadata is used exclusively to build your instance graph, detect drift, and generate your weekly digest. It is never sold, shared with third parties, or used for advertising.
Waitlist information is used to contact you about pilot access only.
Data retention
Audit events: 2 years. Graph node revisions: 1 year. Waitlist data: until deletion requested. Customer instance data deleted within 30 days of offboarding on written request.
Data sharing
We do not sell your data. Sub-processors: Railway (infrastructure), Resend (transactional email), PostHog (anonymized product analytics). Each is contractually bound to data protection requirements.
Your rights
Request access, correction, or deletion: privacy@zaptik.ai. We respond within 30 days. EU and UK residents have additional rights under GDPR and UK GDPR.
Contact
privacy@zaptik.ai
Zaptik is operated by Kevin Hern, Boston, MA, USA.