Privacy Policy

1. About this policy

Zaith ("we", "us", "our") operates the Zaith platform and website at zaith.io. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. By using Zaith you agree to the practices described here.

2. Data we collect

We collect information you provide directly and information generated by your use of the service:

• Account data: email address and password hash when you create an account.
• Brand configuration: brand name, domain, competitor names, and monitoring queries you set up.
• Usage data: pages visited, features used, timestamps, and error logs.
• Payment data: billing information is processed by Stripe. We store only your subscription tier and Stripe customer ID — never raw card numbers.
• Analytics data: aggregate, anonymised data about how visitors use the site, collected via Google Analytics 4 with IP anonymisation enabled.

3. How we use your data

• To provide and improve the Zaith service.
• To send transactional emails (confirmations, password resets, alerts you configure).
• To process payments and manage your subscription.
• To detect and prevent fraud, abuse, or security incidents.
• To comply with legal obligations.

We do not sell your personal data. We do not use your brand data to train AI models or share it with competitors.

4. Third-party services

Zaith uses the following third-party processors, each operating under their own privacy policy:

• Supabase — database and authentication.
• Stripe — payment processing.
• Vercel — hosting and edge functions.
• Upstash — caching and rate limiting (no personal data stored).
• Google Analytics 4 — anonymised usage analytics.
• OpenAI, Anthropic, Google, Perplexity, xAI, Microsoft — AI engines queried on your behalf. Queries include your brand name but not your account email.

5. Cookies

We use strictly necessary cookies to maintain your authenticated session. We also set analytics cookies (Google Analytics) which you can opt out of via your browser settings or a cookie management tool. We do not use advertising or tracking cookies.

6. Data retention

We retain your account data for as long as your account is active. Monitoring results and history are retained according to your plan tier (30, 180, or 365 days). You may request deletion of your account and data at any time by emailing privacy@zaith.io.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access the data we hold about you.
• Right to correct inaccurate data.
• Right to delete your data (right to be forgotten).
• Right to data portability.
• Right to object to or restrict processing.

To exercise any of these rights, email privacy@zaith.io. We will respond within 30 days.

8. Security

We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and role-based access controls. However, no system is perfectly secure. If you believe your account has been compromised, contact us immediately at security@zaith.io.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform at least 14 days before they take effect. Continued use of Zaith after changes constitutes acceptance of the updated policy.

10. Contact

Questions or concerns? Email us at privacy@zaith.io.