A1Zap Privacy Policy
Last updated: May 6, 2026
Effective date: May 6, 2026
Company: A1base Inc. d/b/a A1Zap
1. Overview
This Privacy Policy explains how A1base Inc., doing business as A1Zap ("A1Zap," "we," "us," or "our"), collects, uses, discloses, retains, and otherwise processes personal information when you access or use our websites, mobile applications, public pages, invite links, share links, feeds, chats, crews, communities, campus spaces, events, creator tools, mini apps, AI agents, advertising products, subscriptions, and related services (collectively, the "Services").
A1Zap is a hybrid social and creator platform. This Policy is written to cover public and private profiles, feed discovery, direct and group messaging, community and campus onboarding, creator publishing, mini apps, shared sessions, AI-powered features, native mobile permissions, Sparks and subscriptions, sponsored content, analytics and advertising technologies, moderation, user reports, and customer support.
If a separate written agreement expressly governs a business or enterprise deployment, that agreement controls to the extent of a conflict. Otherwise, this Policy applies to all users, guests, creators, community administrators, advertisers, and other participants in the Services.
2. Who we are and our privacy roles
A1Zap is operated by A1base Inc. In most contexts, A1Zap determines why and how personal information is processed for the Services. This includes account information, profile information, feed and chat activity, community membership, trust and safety data, analytics, subscriptions, advertising and attribution data, product telemetry, and support records.
Some mini apps, integrations, creator-published experiences, community spaces, event pages, or advertiser campaigns may involve other parties. A creator, host, community administrator, campus administrator, advertiser, integration provider, or event organizer may determine certain uses of information within their own experience. When this is material to your privacy, we will provide product notices, creator disclosures, or other supplemental terms.
3. Age requirements and age assurance
A1Zap is not directed to children under 13. You may not create an account, use a guest session, submit personal information, or use the Services if you are under 13.
If you are located in Australia, A1Zap may require you to be at least 16 to create or keep an account or to use social, feed, crew, chat, community, profile, creator, or recommendation features. This is because certain online services with social-media features may be required to take reasonable steps to prevent Australians under 16 from having accounts. A1Zap may block, remove, suspend, or age-restrict Australian accounts or features while we assess and comply with those obligations.
If the law where you live requires a higher age to use online services, consent to personal-information processing, receive targeted advertising, or create a social-media account without parental or guardian approval, the higher age applies.
If you are under the age of majority where you live, your parent or legal guardian must review and approve your use of the Services. We may limit features for users we know or believe are minors, including public profile visibility, direct messaging, discovery, creator publishing, monetization, advertising, community participation, and integrations.
We may collect date of birth, age band, location signals, device signals, account history, verification results, or other information to enforce age requirements, comply with law, protect minors, prevent fraud, and maintain platform safety. If we learn that we collected personal information from a child under 13, or from a user who is not permitted to use the Services under applicable law, we will take reasonable steps to delete or de-identify the information and disable the account or session unless retention is legally required or reasonably necessary for safety, security, or legal purposes.
4. Personal information we collect
The information we collect depends on how you use A1Zap, which features you enable, the permissions you grant, and the choices you make.
4.1 Account, profile, and onboarding information
We may collect name, username, display name, email address, phone number, password or authentication credentials, date of birth or age band, profile photo, avatar, bio, pronouns, campus or organization affiliation, community selections, referral or invite codes, signup source, legal-assent records, account preferences, and settings.
If you use quick signup, embedded signup, guest-to-account conversion, or a mini-app authentication modal, we may collect the same information before or during account creation. We may also associate prior guest or shared-session activity with your account if you create an account after using a share link or guest flow.
4.2 Social, community, campus, and event information
We may collect posts, comments, reactions, follows, crew membership, community membership, campus membership, event RSVPs, invite activity, profile cards, join requests, admin actions, moderator actions, reports, appeals, badges, roles, and community settings.
Campus or community membership can reveal information about your school, workplace, interests, age range, or social group. We use this information to operate the Services, show relevant spaces, prevent abuse, enforce eligibility rules, and administer communities.
4.3 Chats, shared sessions, mini apps, and AI content
We may collect direct messages, group messages, shared-session inputs and outputs, prompts, files, images, videos, voice notes, comments, mini-app state, session membership, session history, generated outputs, transcripts, interaction metadata, and feedback.
Some A1Zap experiences are collaborative. If you enter a shared mini-app, public agent, community session, crew chat, or share-link experience, your display information, inputs, outputs, uploads, and activity may be visible to the host, other participants, the creator, community administrators, moderators, and A1Zap depending on the feature design and settings. Do not treat a shared session as private or ephemeral unless the product expressly says so.
4.4 Creator, developer, publisher, and advertiser information
If you build, publish, monetize, administer, or promote a mini app, bot, workflow, prompt package, integration, ad unit, sponsored placement, event, or community, we may collect app names, descriptions, prompts, logic, configuration settings, thumbnails, categories, safety settings, monetization settings, ad campaign settings, audience criteria, sponsorship disclosures, review history, integration credentials submitted through approved fields, tax details, payout information, and business-verification information.
4.5 Commercial, subscription, and Sparks information
We may collect subscription selections, Sparks balances, purchase history, transaction identifiers, receipts, refund requests, billing country, tax information, app-store purchase events, payment-processor metadata, fraud signals, and customer-support correspondence about billing.
Payment card details are handled by payment processors or app stores. We do not intentionally store full payment card numbers or card security codes on A1Zap systems.
4.6 Device, usage, analytics, and security information
We may collect IP address, device identifiers, browser type, operating system, app version, language, time zone, crash logs, diagnostics, pages viewed, links tapped, search queries, session length, feature use, feed interactions, chat and notification events, invite acceptance, referral source, campaign attribution, ad impressions, ad clicks, cookie and SDK events, login history, abuse signals, rate-limit events, spam indicators, bot-detection signals, and enforcement metadata.
4.7 Mobile permissions and device features
With your permission where required, we may access:
| Permission or feature | Why we may use it |
|---|---|
| Camera and photo library | Profile photos, posts, stories, uploads, creator assets, shared-session attachments, and support submissions. |
| Microphone | Voice notes, audio uploads, voice interactions, or creator features that require audio. |
| Location | Location-aware discovery, events, safety, fraud prevention, community relevance, or other location features you enable. |
| Contacts | Finding people you know, invite flows, or social features, only where the feature requests access. |
| Notifications and push tokens | Transactional alerts, security notices, community updates, chat notifications, creator updates, reminders, and marketing where permitted. |
| Advertising identifiers or app tracking signals | Attribution, ad measurement, fraud prevention, and advertising where permitted and subject to required consent or opt-out controls. |
4.8 Information from third parties and other users
We may receive information from app stores, payment processors, identity or age-assurance vendors, phone-verification providers, hosting providers, communications providers, analytics providers, advertising partners, integrations you authorize, creators, community administrators, hosts, event organizers, advertisers, other users who invite or report you, and public or commercially available sources where permitted.
5. How we use personal information
We use personal information to:
- Provide, operate, maintain, and improve the Services, including profiles, feeds, search, chats, crews, events, communities, campus spaces, creator tools, mini apps, AI features, shared sessions, subscriptions, and support.
- Create and secure accounts, verify phone numbers, verify eligibility, enforce age gates, process legal assent, prevent account takeovers, and detect fraud or abuse.
- Enable community, campus, shared-session, and creator features, including making content visible to intended users, hosts, participants, creators, moderators, and administrators.
- Personalize the Services, including recommended content, suggested communities, people, creators, events, onboarding flows, notifications, and product settings.
- Process purchases, Sparks, subscriptions, refunds, taxes, invoices, app-store events, payout events, and fraud reviews.
- Measure product performance, diagnose issues, run experiments, attribute campaigns, measure ads, operate sponsorships, and understand how marketing and growth programs perform.
- Send service, security, support, community, creator, policy, and transactional communications.
- Send marketing communications where permitted by law and your settings.
- Train, evaluate, monitor, and improve product quality, safety systems, ranking systems, anti-abuse systems, and AI-powered features using privacy-protective methods where feasible.
- Review, filter, block, remove, downrank, age-restrict, suspend, or otherwise moderate content, accounts, communities, chats, creators, ads, and mini apps.
- Investigate reports, suspected violations, intellectual-property claims, legal requests, safety incidents, emergencies, fraud, spam, and security incidents.
- Comply with law, enforce our terms, protect rights and safety, and support corporate transactions.
6. AI, automation, and model improvement
A1Zap includes AI-powered features, mini apps, agents, bots, ranking systems, safety systems, and automation tools. AI outputs can be inaccurate, incomplete, biased, offensive, or unsuitable for your intended use. You should review outputs before relying on, sharing, publishing, sending, or acting on them.
We may process prompts, inputs, outputs, uploads, interaction metadata, feedback, and safety signals to provide AI features, operate creator experiences, monitor misuse, improve product quality, and protect users. We do not permit creators to represent AI outputs as human-made, private, verified, professional advice, or endorsed by A1Zap unless we expressly approve that representation.
We do not use personal information from known minors for targeted advertising or independent marketing profiles. We do not knowingly use personal information from children under 13 because children under 13 are not permitted to use A1Zap.
Where we use third-party model providers or AI vendors, we use contractual, technical, and operational controls designed to limit their processing to the permitted purposes. Vendor-specific details may be provided in supplemental notices or our subprocessor list when applicable.
7. How we disclose personal information
7.1 Other users, guests, hosts, creators, and administrators
We disclose information to other users when the Services are designed to do so. For example, your profile information, posts, comments, reactions, crew participation, community participation, event activity, chats, shared-session inputs and outputs, creator interactions, and public content may be visible to other users depending on the feature and settings.
Hosts, creators, moderators, community administrators, campus administrators, and event organizers may be able to see participation, membership, reports, shared-session history, or related metadata needed to operate and moderate their spaces. They are not A1Zap employees or legal agents unless we expressly say otherwise.
7.2 Service providers and vendors
We may disclose information to vendors that help us operate the Services, such as hosting providers, storage providers, analytics providers, AI model providers, phone-verification providers, payment processors, app stores, communications providers, fraud-prevention providers, customer-support tools, age-assurance or verification vendors, security vendors, and professional advisors.
7.3 Creators, integrations, and third-party services you choose
If you use a creator-published experience, integration, public share link, or third-party connection, information may be disclosed to or processed by the creator, integration provider, or third-party service to operate that feature. We require creators and developers to follow A1Zap's Creator, Developer, and Publisher Terms, but we do not control every third-party service.
7.4 Advertising, analytics, attribution, and measurement partners
We may disclose identifiers, device information, online activity, approximate location, campaign attribution, ad exposure data, or similar usage signals to analytics, attribution, social-media, advertising, and measurement partners to understand performance, prevent fraud, measure campaigns, and support advertising or sponsorship activities.
We do not sell personal information for money. Depending on the law, technology, and context, some disclosures involving cookies, pixels, SDKs, mobile identifiers, or similar technologies may be considered a "sale," "sharing," or targeted advertising. We provide consent, opt-out, and privacy-choice controls where required. We do not knowingly sell or share personal information of users we know are under 16.
7.5 Legal, safety, and emergency disclosures
We may disclose information to law enforcement, regulators, courts, counterparties, advisors, or other persons where we reasonably believe disclosure is necessary or appropriate to comply with law, respond to legal process, enforce our terms, protect rights, investigate misuse, protect users, respond to emergencies, prevent fraud, or address security incidents.
7.6 Corporate transactions
We may disclose information in connection with an actual or proposed merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, subject to reasonable confidentiality and legal protections.
7.7 At your direction
We disclose information when you ask us to, such as when you connect an integration, share a profile or session link, invite someone, publish content, export information, or otherwise direct a transfer.
8. Cookies, SDKs, pixels, and tracking technologies
We and our partners use cookies, SDKs, pixels, local storage, advertising identifiers, and similar technologies on web, mobile, share pages, creator surfaces, and advertising surfaces to operate the Services, remember settings, secure sessions, detect fraud, measure usage, attribute installs, support advertising, and understand growth campaigns.
Our Cookie and Tracking Notice provides more detail. Where required, we use consent tools, a privacy-choice center, browser and device controls, and opt-out preference signals such as Global Privacy Control.
Creators may not add hidden pixels, SDKs, fingerprinting tools, tracking redirects, or independent tracking technologies to A1Zap experiences unless A1Zap expressly approves the integration and required notices, consents, and opt-outs are in place.
9. Retention and deletion
We retain personal information for as long as reasonably necessary to provide the Services, comply with law, resolve disputes, enforce agreements, protect users, prevent fraud and abuse, preserve security, and maintain business records. Retention depends on the type of information and the feature involved.
| Data category | Illustrative retention approach |
|---|---|
| Account, profile, and settings | Retained while the account is active, then for a limited period for reactivation, safety, legal, and audit needs. |
| Date of birth, age band, and age-assurance records | Retained as needed to enforce age rules, document compliance, prevent circumvention, and satisfy legal obligations. We minimize retention of identity documents where feasible and avoid storing unnecessary identity documents. |
| Phone verification and authentication records | Retained as needed for account security, fraud prevention, rate limiting, abuse investigations, and legal compliance. |
| Communities, campus, crews, and event participation | Retained while relevant to the community or event and then for safety, dispute, audit, legal, or backup periods. |
| Posts, comments, chats, uploads, prompts, outputs, and shared-session state | Retained until deleted by you, removed by moderation, closed by feature settings, or subject to retention rules, then for limited backup, safety, abuse-prevention, or legal-hold periods. |
| Creator experiences and app configurations | Retained while published or associated with an account, then as needed for safety, audit, IP, legal, and product-continuity purposes. |
| Ad, analytics, attribution, cookie, and SDK events | Retained for measurement and analytics periods appropriate to the tool and law, with shorter retention for raw identifiers where feasible. |
| Billing, Sparks, tax, and purchase records | Retained for tax, accounting, refund, fraud, app-store, audit, and legal requirements. |
| Reports, moderation, enforcement, and appeals | Retained as needed to investigate, enforce, document repeat-offender history, protect users, and comply with law. |
| Backups and legal holds | Deleted or overwritten according to backup cycles unless preserved for legal, security, or safety reasons. |
When you request account deletion, we will delete or de-identify personal information associated with your account unless retention is required or permitted for legal, security, safety, fraud-prevention, accounting, dispute, backup, or legitimate business purposes. Public, shared, or collaborative content may remain visible or retained if removing it would impair other users' experience, legal records, safety records, or the integrity of a shared session, but we will take reasonable steps required by law.
10. Your choices and privacy rights
Depending on where you live, you may have rights to access, know, correct, delete, obtain a copy of, restrict, object to, opt out of, appeal, or withdraw consent for certain processing of your personal information.
You can exercise many choices through account settings, community settings, device settings, cookie tools, privacy-choice links, unsubscribe links, and deletion flows. You may also contact us at help@a1base.com.
We may need to verify your identity before fulfilling certain requests. Verification may include matching account information, using logged-in controls, checking email or phone ownership, or requesting additional information. Authorized agents may submit requests where permitted by law, subject to verification.
We will not discriminate against you for exercising privacy rights, but some features may not function if we cannot process information needed to provide them.
11. U.S. state privacy disclosures
Our U.S. State Privacy Addendum provides additional disclosures for residents of California and other U.S. states with comprehensive privacy laws. It explains categories of information, purposes, disclosures, rights, opt-out choices, sensitive-information controls, and how we respond to opt-out preference signals.
12. Australia privacy disclosures
If the Australian Privacy Act applies to our handling of your personal information, we will take reasonable steps to provide collection notices at or before collection, explain the purposes of collection, identify likely disclosures, disclose overseas recipients or countries where practicable, provide access and correction rights subject to exceptions, and protect personal information through reasonable safeguards.
For direct marketing covered by Australian law, we will use consent and unsubscribe mechanisms required by law. Commercial electronic messages identify the sender and include a functional unsubscribe mechanism where required by law.
If we experience an eligible data breach involving personal information that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner where required.
13. International transfers
We and our service providers may process personal information in the United States, Australia, Singapore, the European Union, the United Kingdom, and other countries where we or our providers operate. These countries may have privacy laws that differ from those where you live.
Where required, we use appropriate safeguards for international transfers, such as contractual protections, data-processing agreements, transfer mechanisms recognized by applicable law, access controls, technical safeguards, and vendor due diligence.
14. Security
We use administrative, technical, and physical safeguards designed to protect personal information. These may include encryption in transit, encryption at rest where appropriate, access controls, multi-factor authentication for administrative access, logging, monitoring, vendor controls, secure development practices, incident response, and segregation of production systems where appropriate.
No security measure is perfect, and we cannot guarantee absolute security.
15. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will provide notice as required by law, such as by posting an updated version, updating the effective date, providing in-product notice, or sending email notice.
16. Contact us
For privacy questions, rights requests, or complaints, contact:
A1base Inc. d/b/a A1Zap
Email: help@a1base.com
Mail: Level 2, 128 King Street, San Francisco, CA 94107, United States
If you are located in Australia and are dissatisfied with our response to a privacy complaint, you may have the right to complain to the Office of the Australian Information Commissioner.