Privacy Policy

1. Scope of This Policy

This Policy covers the ZealReach marketing website and the ZealReach web application (dashboard) that beta members and, later, paying customers use to connect social and advertising accounts, generate content, and manage campaigns. It applies whether you're simply browsing zealreach.com, applying for beta access, subscribing to our blog, or using the full product as a logged-in customer.

2. Information We Collect

Information you give us directly

• Beta application / account details: first name, last name, email address, and industry, when you apply for beta access or register an account.
• Newsletter subscription: your email address, if you subscribe to our blog updates.
• Workspace and profile information: business name, product/service details, and any content, images, or URLs you provide for us to generate posts or ad creatives from.
• Billing information: when paid plans launch, payment details will be collected and processed directly by our payment processor (currently Stripe; we are also evaluating a Merchant of Record provider) — we do not store full card numbers on our own servers.
• Communications: anything you send us via email or support channels.

Information from connected third-party accounts

When you connect a social media, advertising, or lead-generation account, you authorize the relevant platform to share certain data with us via OAuth. Depending on which accounts you connect, this may include:

• Social platforms (Meta/Facebook, Instagram, LinkedIn, TikTok, X, Pinterest): your public profile info, Page/account identifiers, and the ability to publish content and read post-performance metrics on your behalf.
• Advertising platforms (Meta Ads, Google Ads): campaign, ad set, ad, and performance data (spend, impressions, clicks, conversions) for accounts you explicitly connect and authorize.
• Lead forms (Meta Lead Ads, Google Lead Form extensions): contact details submitted by people who fill out lead forms on your connected ad campaigns.

We only request the scopes/permissions needed to provide the specific features you use, and you can disconnect any account at any time from within the Service.

Information collected automatically

• Usage data: pages visited, features used, and actions taken within the Service.
• Log and device data: IP address, browser type, operating system, and timestamps, collected automatically by our servers and infrastructure providers.
• Cookies and similar technologies: see Section 11 below.

3. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service — including publishing content, managing ad campaigns, and syncing analytics on your behalf, only for accounts you've connected.
• Generate AI-assisted content, insights, and recommendations based on the data and inputs you provide.
• Process your beta application, set up your account, and communicate with you about your account or the beta program.
• Send transactional emails (confirmations, alerts, product updates you've opted into) and, if you've subscribed, blog newsletter emails.
• Monitor, secure, and improve the Service, including debugging and fraud/abuse prevention.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use data from your connected accounts for advertising purposes unrelated to providing the Service to you.

4. Google User Data

If you connect a Google Ads account, ZealReach accesses campaign, ad group, ad, and performance data via the Google Ads API, strictly to display that data inside your ZealReach dashboard and to carry out actions you explicitly request or configure (such as automation rules you set up for pausing campaigns or adjusting budgets) and, where applicable, to poll Google Lead Form submissions on campaigns you own so we can deliver leads to you.

ZealReach's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is never used to serve advertising, never sold, and never shared with third parties except as described in Section 7 or as strictly necessary to provide the feature you requested. You can revoke ZealReach's access to your Google account at any time from your Google Account permissions page or by disconnecting the account inside ZealReach.

5. Meta Platform Data

If you connect a Facebook Page, Instagram account, or Meta Ads account, ZealReach accesses data via the Meta Graph API — including the ability to publish posts, read post and campaign performance metrics, and, if you enable it, receive lead submissions from Meta Lead Ads via a webhook tied to your Page. This data is used solely to provide the publishing, analytics, and lead-capture features you've enabled, is not used for advertising purposes outside the Service, and is handled in accordance with Meta's Platform Terms and Developer Policies as well as this Privacy Policy. You can remove ZealReach's access at any time from your Facebook/Meta Business Settings or by disconnecting the account inside ZealReach.

6. AI Processing

To generate posts, ad copy, hashtags, and insights, the content and data you provide (such as a product URL, description, or campaign metrics) is sent to third-party AI providers we use for inference. These providers process the data solely to return a generated result to ZealReach and do not use your data to train their own general-purpose models under our agreements with them. We cache the results of purely analytical AI features (see our public engineering notes on this) so the same underlying data isn't re-sent to an AI provider unnecessarily.

7. How We Share Information

We share information only in the following circumstances:

• Service providers ("sub-processors"): infrastructure and tooling we rely on to run the Service, including hosting and edge functions (Cloudflare), our database provider (Supabase, for the marketing site's beta/newsletter data), transactional email (Resend), payment processing (Stripe, and in future a Merchant of Record), AI inference providers (Section 6), and log/observability tooling (Axiom). Each is bound by its own data protection obligations and may only use your data to provide services to us.
• The platforms you connect: to carry out actions you request, such as publishing a post or updating a campaign.
• Legal reasons: if required by law, subpoena, or legal process, or to protect the rights, property, or safety of ZealReach, our users, or the public.
• Business transfers: if ZealReach is involved in a merger, acquisition, or asset sale, your information may be transferred, subject to the same protections described here.

We do not sell your personal information to third parties, and we do not share it for cross-context behavioral advertising.

8. Data Retention

We retain account and workspace data for as long as your account is active, plus a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Beta application and newsletter records are retained until you ask us to delete them or unsubscribe. Data from connected third-party accounts is retained only as long as the connection remains active, or as needed to provide historical analytics you've requested, and is deleted or anonymized within a reasonable period after you disconnect an account or close your ZealReach account.

9. Data Security

We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS/TLS), authenticated and token-scoped access to connected platform data, httpOnly cookies for session tokens (not accessible to client-side scripts), and role/workspace-level access controls in our database. No method of transmission or storage is 100% secure, but we work to protect your information using commercially reasonable means.

10. Your Rights & Choices

• Access & correction: you can review and update your account information from within the Service, or by contacting us.
• Deletion: you may request deletion of your account and associated personal data at any time by emailing us — see Section 15.
• Disconnecting accounts: you can revoke ZealReach's access to any connected social, ad, or lead platform at any time, either from inside ZealReach or directly from that platform's own permissions settings.
• Marketing emails: every newsletter email includes an unsubscribe link; you can also ask us to stop at any time.
• Applicable regional rights: depending on where you live (for example, under the GDPR in the EU/UK or applicable US state privacy laws), you may have additional rights, such as data portability or the right to object to certain processing. Contact us and we'll honor applicable requests.

11. Cookies & Tracking

Our marketing website uses Google Analytics (via Google's gtag.js) to understand aggregate traffic and improve the site; this sets cookies and may share data with Google as described in Google's own Privacy Policy. The ZealReach web application uses strictly necessary cookies to keep you signed in securely (an httpOnly session cookie). We do not currently use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings, though disabling essential cookies may prevent parts of the Service from working.

12. Children's Privacy

The Service is intended for businesses and individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

13. International Data Transfers

ZealReach is operated from India, and our infrastructure providers may process and store data in other countries. Wherever your information is processed, we take steps to ensure it receives a level of protection consistent with this Privacy Policy and applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Effective Date" above and, where appropriate, notify you by email or through the Service. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at [email protected].