Privacy policyPrivacy policy

The site is run by Zonta Labs, Inc., registered at [registered address]. We are the controller of any personal data collected through it.

You can reach us about anything in this policy at hello@zontalabs.com.

Most of the site collects nothing. Reading it requires no account, no sign-in, and no cookie.

The site has three forms: a demo request, a contact form, and a newsletter sign-up. Whatever you type into them is the personal data we hold.

Separately, the servers that answer requests see your IP address. We use it for rate limiting on the form endpoints, and our hosting provider records it in ordinary server logs.

• Demo request: name, work email, company, what you are protecting.
• Contact form: name, work email, company, topic, message.
• Newsletter: email address.
• Server logs and rate limiting: IP address, request path, timestamp, browser user agent.

We use what you send us to do the thing you asked for, and for nothing else.

We do not build profiles, score visitors, or combine form submissions with data from anywhere else.

• To reply to a message you sent us.
• To schedule a demo call you requested.
• To send updates you asked for, until you tell us to stop.
• To keep the forms working, which includes throttling repeated requests from one address.

Form submissions are not written to a database we run. Each one is delivered by email to our inbox through a transactional email provider, Resend. Your address is set as the reply-to on that email so we can answer you.

For the newsletter, we may also store your email address as an entry in a contact list held with the same provider. That list is what we send updates from and what unsubscribes are removed from.

The IP addresses used for rate limiting are held only in server memory and expire after a short window. We do not write them to disk.

Where the law asks us to name a legal basis, these are the two we rely on.

Consent. When you sign up for updates, you are consenting to receive them. You can withdraw that consent at any time and we will stop.

Legitimate interest. When you write to us or ask for a demo, we have a legitimate interest in answering you. When you load the site, we have a legitimate interest in keeping it running and keeping the forms from being abused, which is what the rate limiting and server logs are for.

At the time of writing, this site sets no advertising cookies and loads no analytics or tracking scripts. There is no third-party pixel, no session recording, and no fingerprinting.

If that changes, we will update this policy before the change goes live and, where the law requires it, ask before setting anything.

Messages and demo requests stay in our inbox for as long as we need them to handle the conversation and any follow-up you would reasonably expect. After that we delete them, or you can ask us to.

Newsletter addresses stay on the list until you unsubscribe or ask us to remove you.

Rate-limiting data expires after a short window and does not survive a restart. Server logs kept by our hosting provider are held for the period set by that provider, which we do not extend.

We do not sell personal data. We do not rent it, trade it, or hand it to advertisers.

We share it only with the service providers that make the site work, and only as far as needed for that. Each processes data on our instructions.

We would also disclose data if the law required it, for example in response to a valid legal order, and we would tell you if we were allowed to.

• Resend, which delivers form submissions to our inbox and holds the newsletter list.
• [hosting provider], which serves the site and keeps server logs.
• [email provider], where our inbox lives.

Resend is based in the United States, so form submissions pass through servers there. The site itself and our inbox are hosted in [hosting region]. If you are visiting from elsewhere, anything you submit is transferred to those places.

Where a transfer needs a legal mechanism, for example from the European Economic Area, the United Kingdom, or Switzerland, we rely on the standard contractual terms our providers offer or on your consent for the specific submission.

Depending on where you live, you may have some or all of the rights below. We extend them to everyone who asks, regardless of location.

To exercise any of them, email hello@zontalabs.com. We will need enough to confirm the request came from you, which is usually a reply from the address in question. We will answer within the time the law gives us, and sooner where we can.

• Access: ask what we hold about you.
• Correction: ask us to fix something that is wrong.
• Deletion: ask us to delete what we hold, subject to anything we are required to keep.
• Withdraw consent: unsubscribe from updates at any time, using the link in any email or by writing to us.
• Complaint: raise a complaint with the data protection authority where you live. We would rather hear from you first, but you do not have to.

This site is not directed at anyone under 16, and we do not knowingly collect personal data from them.

If you believe a child has submitted a form, tell us and we will delete what was sent.

We will revise this policy when what the site does changes. The effective date at the top tells you which version you are reading.

For a material change, such as adding analytics or a product, we will note it on this page. Continued use of the site after a change means the new version applies.