Privacy Policy

Zathur LLC (“Zathur”, “we”, “us”) is the controller of the account, billing, website and support data described in this policy. For data about your own customers, audiences or contacts that our products process for you, we act as a processor on your instructions; you are the controller of that data. This policy covers every product listed at zathur.com/products.

1. Data we collect

Account data

Name, work email address, company name, password (stored only as a salted hash), role, and the settings you configure in a product, such as brand voice or knowledge-base content.

Payment and billing data

Plan, invoices, billing address and tax ID if provided, and the card brand and last four digits of your card. Full card details are collected and stored by Stripe, our payment processor. Zathur LLC never sees or stores your full card number.

Connected-platform data

Some products connect to third-party accounts through that platform’s login screen. For example, a product may connect to Meta, TikTok or Google. When you connect an account we receive an access token and the data the permissions you approve allow, such as page and account names and IDs, posts, comments, messages, ad accounts, campaigns, spend and performance metrics, and Google Business Profile reviews and messages. We use this data only to provide the features you turn on.

Audience and contact data

Names, usernames, messages, comments, reviews and related content from people who interact with your connected accounts. We process this on your behalf so a product can reply and keep contact records for you.

Usage and technical data

IP address, browser and device type, pages visited, actions taken in a product, timestamps, approximate location derived from IP, and error reports.

Communications

Emails, contact-form submissions and support conversations you have with us.

2. How we use data

To provide, operate and secure our products, including generating content, campaigns and replies with AI models where a product does that.
To process payments, send invoices and manage subscriptions.
To respond to support, billing, refund and privacy requests.
To detect fraud, abuse and security incidents.
To understand how our products are used and improve them, using aggregated or de-identified data where possible.
To send service messages about your account, such as approvals waiting, digests, billing notices and policy changes.
To send product news, only where you have opted in or where the law allows; every marketing email has an unsubscribe link.
To comply with legal obligations.

Where the GDPR or UK GDPR applies, our legal bases are performance of our contract with you, our legitimate interests in running and securing our products, your consent where we ask for it, and compliance with law.

3. Payments are processed by Stripe

Card details are entered into fields served by Stripe and are transmitted directly to Stripe. We receive a payment token, the card brand and last four digits, and the outcome of each charge. Stripe processes this data under its own privacy policy at stripe.com/privacy.

4. Connected platforms

We access platform data only through official APIs and only with the permissions you approve.
We use platform data solely to provide and improve the features you use in the product concerned. We do not sell it and we do not use it to serve advertising unrelated to your account.
Our products’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We comply with Meta’s Platform Terms and Developer Policies and with TikTok’s developer terms.
Disconnecting a platform in the product, or revoking access from the platform itself, deletes the related access token from our systems.

5. AI processing

Products that use AI models send the relevant text and context, for example your brand settings, a post brief, or an inbound message, to third-party large language model providers to generate drafts and replies. We send only what is needed for the task. Our agreements with these providers prohibit them from using your data to train their models or for any purpose other than returning a result to us.

We do not sell personal data. We share it only with:

Stripe, for payment processing.
Vercel, which hosts our website and application infrastructure.
Resend, which delivers our transactional emails, including contact-form messages.
AI model providers, as described in section 5.
Third-party platforms such as Meta, TikTok and Google, when a product publishes, advertises or replies through your connected accounts, as you direct.
Professional advisers, such as accountants and lawyers, under confidentiality.
Authorities, where required by law or to protect rights, safety or the integrity of our products.
A successor, if we sell or reorganise our business, with notice to you.

All processors act under contracts that limit them to processing data on our instructions.

7. Cookies

Our website uses only strictly necessary cookies: a session cookie to keep you signed in to a product and a security cookie to protect forms. We do not set advertising or cross-site tracking cookies on zathur.com. If we add analytics that use cookies, we will ask for consent where the law requires it and update this policy. You can block or delete cookies in your browser settings; a product may not work without its session cookie.

8. Data retention

Account and product data: for as long as your account is active, plus 30 days after cancellation or termination so you can export it. It is then deleted from live systems, and from backups within a further 90 days.
Platform access tokens: until you disconnect the platform or your account ends.
Audience and contact data: until you delete it in the product or your account ends, subject to the export window above.
Billing records and invoices: 7 years, as required by tax and accounting law.
Usage logs: 12 months.
Support correspondence: 3 years after the conversation closes.

9. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you and receive a copy in a portable format.
Correct inaccurate data.
Delete your data, subject to legal retention requirements.
Restrict or object to certain processing, including direct marketing.
Withdraw consent where processing is based on consent.
Complain to your data protection authority. In the EEA and UK you can find yours through your national regulator.

California residents have the right to know what personal information we collect, use and disclose, to delete and correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising.

To exercise any right, email support@zathur.com from the address on your account, or write to the postal address below. We may ask you to verify your identity. We respond within 30 days, or within the shorter period your local law requires. Account holders can also delete their own data and close their account from the product’s settings.

10. International transfers

Our systems are hosted in the United States. If you or your contacts are in the European Economic Area, the United Kingdom, Switzerland or another region with data-transfer rules, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism for the transfer, together with the security measures described below.

11. Security

Data is encrypted in transit (TLS) and at rest. Platform access tokens are stored encrypted. Access to production systems is limited to staff who need it, protected by multi-factor authentication and logged. If we become aware of a breach affecting your personal data, we will notify you and any required authority without undue delay.

12. Children

Our products are for businesses and are not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We will post any changes on this page and update the “Last updated” date. For material changes we will also email account holders before the change takes effect.

14. Contact

Privacy requests: support@zathur.com
Zathur LLC
5830 E 2nd St, Ste 7000 #34646, Casper, WY 82609, United States
General support: support@zathur.com