1. Introduction
Zantraka, a subsidiary of Kotwaster LLC ("Zantraka," "we," "us," or "our"), operates the website at https://zantraka.com and the Zantraka AI marketing platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, password (stored as a bcrypt hash), company name, job title, and phone number when you register.
- Business Information: Website URL, industry, business descriptions, marketing goals, and brand assets you submit for AI analysis.
- Payment Information: Billing details processed securely through Stripe. We do not store credit card numbers on our servers.
- Communications: Messages sent through our contact form, support requests, and any other communications with us.
- User Content: Marketing strategies, ad creatives, campaign configurations, and other content you create using the Service.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
- Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
- Log Data: IP addresses, access times, referring URLs, and error logs.
- Cookies & Tracking: See our Cookie Policy for detailed information.
2.3 Information from Third Parties
- Advertising Platforms: When you connect Google Ads, Meta, TikTok, or LinkedIn accounts, we receive campaign performance data, account metadata, and advertising metrics through their respective APIs.
- OAuth Providers: When you authorize third-party integrations, we receive profile information and access tokens as permitted by your authorization.
- Payment Processor: Stripe provides us with transaction status, subscription details, and billing history.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, maintain, and improve the Zantraka platform, including AI-powered marketing analysis, strategy generation, creative production, and campaign management.
- Account Management: To create and manage your account, process payments, and provide customer support.
- AI Processing: To analyze your business information using AI models to generate marketing strategies, audience personas, ad copy, and campaign recommendations tailored to your industry.
- Communication: To send service-related notifications, security alerts, two-factor authentication codes, and respond to your inquiries.
- Analytics & Improvement: To understand how users interact with the Service, identify trends, and improve functionality and user experience.
- Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third-party vendors who assist in operating the Service (hosting, payment processing, email delivery, AI processing). These providers are contractually obligated to protect your data.
- Advertising Platforms: When you authorize campaign management through Google Ads, Meta, TikTok, or LinkedIn, we transmit campaign data to these platforms as directed by you.
- AI Providers: Business information you submit may be processed by our AI service providers to generate marketing insights. We do not share personally identifiable information with AI providers.
- Legal Requirements: When required by law, court order, or governmental regulation, or to protect our rights, property, or safety.
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
- With Your Consent: When you explicitly authorize us to share your information.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account Data: Retained while your account is active and for 30 days after deletion request to allow for recovery.
- Marketing Content: Strategies, creatives, and campaign data are retained while your account is active.
- Payment Records: Transaction records are retained for 7 years for tax and legal compliance.
- Log Data: Server logs are retained for up to 90 days.
- Advertising Platform Data: Cached performance data is refreshed on each session and not permanently stored.
6. Your Rights & Data Deletion
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data. See our Data Deletion Instructions for the complete process.
- Portability: Request a machine-readable copy of your data.
- Restriction: Request restriction of processing in certain circumstances.
- Objection: Object to processing based on legitimate interests.
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at support@zantraka.com or visit our Data Deletion page. We will respond to your request within 30 days.
7. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold.
- Right to delete personal information held by businesses.
- Right to opt-out of the sale of personal information. Note: We do not sell personal information.
- Right to non-discrimination for exercising your CCPA rights.
8. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data under the following legal bases:
- Contract Performance: Processing necessary to provide the Service you requested.
- Legitimate Interest: Processing for analytics, security, and service improvement.
- Consent: Processing based on your explicit consent (e.g., marketing communications).
- Legal Obligation: Processing required to comply with applicable law.
You may lodge a complaint with your local data protection authority if you believe your rights have been violated.
9. Data Security
We implement industry-standard security measures to protect your information:
- HTTPS/TLS encryption for all data in transit
- Bcrypt password hashing with salt
- JWT authentication with algorithm pinning (HS256)
- Role-Based Access Control (RBAC) on all mutation endpoints
- Email-based Two-Factor Authentication (2FA)
- OAuth refresh tokens stored server-side only
- API keys stored as SHA-256 hashes
- Regular security audits and vulnerability assessments
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.
12. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use after changes constitutes acceptance of the revised policy.
14. Contact Us
For privacy-related inquiries, data access requests, or to exercise your rights: