Zendo and GDPR
Zendo is built and run by a company in the European Union, so the General Data Protection Regulation (GDPR) applies to how it handles personal data. This article answers the questions agencies most often get from their clients and their own legal teams. The full text is on the GDPR commitment page.
Who is responsible for your data
Massive Pixel Creation Sp. z o.o., Jesionowa 22, 40-158 Katowice, Poland, operates Zendo and is the data controller for the personal data Zendo collects about you. You can reach it at contact@getzendo.io.
Because the company is registered in Poland, its supervisory authority is the Polish data protection office, Urząd Ochrony Danych Osobowych (UODO). If you live in another EU country, you can also complain to the authority there.
What Zendo collects and why
Zendo collects your first and last name, company name, email address, payment information, cookies and usage data. It uses them to provide the service, process payments, give you support, host the platform and understand how the app is used.
Data about your clients
The names, emails, files and messages you add about your clients are personal data that you bring into Zendo. You are responsible for having the right to share it, for example your clients' consent or a contract with them.
Data that leaves the EU
The app and your workspace data stay in Ireland. A few services that support Zendo are based in the United States, such as Stripe for payments. Those transfers are covered by the European Commission's Standard Contractual Clauses.
Your rights
At any time, you can ask Zendo to:
- show you the personal data it holds about you and give you a copy,
- correct it,
- delete it,
- limit or stop how it is used,
- send it to you in a machine-readable format.
Send the request to contact@getzendo.io. It is free, and you get an answer within one month. Much of this you can also do yourself; see Delete your data.
Related
Updated on: 09/11/2026
Thank you!