Zetrr (“we,” “us,” or “our”) operates the website zetrr.com and the Zetrr all-in-one creator platform (collectively, the “Platform”). We are committed to protecting your privacy and handling your personal data with care.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, your rights regarding your data, and how to contact us. It applies to all users of the Platform, including visitors, free-tier users, and paid subscribers.

Account information you provide directly: name, email address, profile picture, and any other information you add to your account profile.

Content you create: form submissions, content pipeline data, invoices, automation rules, giveaway configurations, planner notes, and any other content you generate using the Platform (“User Content”).

Usage data: browser type, device information, pages visited, features used, timestamps, referring URLs, and general geographic location inferred from IP address. This is collected automatically to help us improve the Platform and diagnose technical issues.

Payment data: if you subscribe to a paid plan, our payment processor (Stripe) handles your payment information. We store only a transaction identifier and billing history on our systems — never your full credit or debit card number.

Third-party connections: if you connect third-party accounts (e.g., Instagram via OAuth, Google) we may receive certain profile information from those services, subject to your privacy settings with those providers.

We use your data to:

• Provide, maintain, and improve the Platform and its features.
• Create and manage your account; authenticate you on each visit.
• Process transactions and send related service communications (e.g., receipts, renewal reminders).
• Send you service-related notices (e.g., password resets, security alerts, policy changes).
• Respond to your support requests and provide customer service.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Analyze usage patterns to improve user experience and develop new features.
• Enforce our Terms of Service and other agreements.

We do not use your personal data for advertising or sell your personal data to third parties.

We do not sell your personal data. We may share information in the following limited circumstances:

• Service providers: trusted third parties who help us operate the Platform (e.g., cloud hosting, email delivery, analytics, payment processing). These providers are contractually bound to use your data only to provide services to us.
• Legal obligations: when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, safety, or the safety of others.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data is transferred.
• With your consent: in any case not covered above, we will only share your data if you have given explicit permission.

We use cookies and similar tracking technologies to operate the Platform. These include:

• Essential cookies: required for authentication, session management, and core Platform functionality. These cannot be disabled without making the Platform unusable.
• Analytics cookies: help us understand how visitors use the Platform so we can improve it. We use privacy-friendly analytics (PostHog) that is self-hosted and does not sell your data.
• Optional functional cookies: remember your preferences (e.g., theme selection, language).

You can control or disable cookies through your browser settings. Disabling essential cookies will prevent you from using the Platform.

For information on how we handle cookies specifically related to form analytics and tracking pixels configured by users in their own forms, please refer to our Terms of Service.

We retain your personal data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements.

• Account data: retained until you delete your account or for 90 days after account deletion (for legal/tax compliance), unless a longer retention period is required by law.
• Form submissions: retained until you delete them or your account, whichever comes first.
• Usage logs: anonymized and aggregated where possible, retained for up to 12 months.
• Payment records: retained for a minimum of 7 years as required by financial regulations.

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption in transit (TLS/HTTPS) for all data transmitted to and from the Platform.
• Encryption at rest for sensitive data stored in our databases.
• Access controls: our team follows the principle of least privilege — only personnel who need access to your data to maintain the Platform have it.
• Regular security reviews and vulnerability scanning.
• Secure authentication via Supabase Auth with industry-standard token management.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect a security breach, contact us immediately at security@zetrr.com.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data (“right to be forgotten”).
• Restriction: request that we limit how we process your data in certain circumstances.
• Portability: request your data in a structured, commonly used, machine-readable format.
• Objection: object to our processing of your data for certain purposes.
• Withdraw consent: where our processing is based on your consent, withdraw that consent at any time.

To exercise any of these rights, contact us at privacy@zetrr.com. We will respond to all verified requests within 30 days.

You may delete your Zetrr account at any time. To initiate account deletion:

• Navigate to Account Settings in the Zetrr dashboard.
• Select “Delete Account” and follow the on-screen confirmation.
• Confirm your identity if prompted.

After you confirm deletion, we will begin the process of erasing your account and associated data. Please note:

• Deletion is permanent and cannot be undone.
• We retain certain data for legal, tax, and compliance purposes for up to 90 days after account deletion (see Section 6, Data Retention).
• Form submissions submitted by third parties to your forms may be retained by those submitters independently of Zetrr.
• If you have outstanding invoices or active subscriptions, you must settle or cancel them before account deletion is processed.
• Content you have publicly shared (e.g., via a form share link or Biolink page) may remain accessible to others through cached copies or third-party archives that are outside our control.

Upon completion of data erasure, your personal data will no longer be accessible on the Platform and will be deleted from our active systems in accordance with our retention policy.

The Platform is not directed to, and we do not knowingly collect personal data from, anyone under the age of 16 (or the applicable minimum age in your jurisdiction). If we learn that we have collected personal data from a child under the minimum age without parental or guardian consent, we will take steps to delete that data as quickly as possible.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at privacy@zetrr.com.

Zetrr is operated from the United States. If you are accessing the Platform from outside the United States, your data will be transferred to and processed in the United States, which may have different data protection laws than your country.

When we transfer personal data from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on standard contractual clauses (SCCs) and other approved transfer mechanisms to ensure an adequate level of data protection.

The Platform may contain links to or integrations with third-party websites, services, or applications (e.g., Instagram API, Stripe, Google). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

In particular:

• Instagram/Meta: if you use our Instagram automation features, your data is subject to Meta’s Data Policy.
• Stripe: payment data is handled by Stripe under their Privacy Policy.
• Google: if you sign in with Google or use Google services, Google’s Privacy Policy applies.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Post a prominent notice on the Platform for at least 30 days after the change.
• Send an email notification to the address associated with your account for significant changes.

Your continued use of the Platform after any changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using the Platform and delete your account.

If you have any questions about this Privacy Policy or our data practices, please contact: