Privacy Policy

1. Scope and Our Role

This policy applies to information we collect about account holders, prospective customers, and visitors to our websites. When our customers use the Service to manage their own contacts, we act as a processor (or service provider) and handle that contact data on behalf of the customer and under their instructions. In that case, the customer is responsible for that data and for providing any notices and obtaining any consents required from their contacts.

2. Information We Collect

We collect the following categories of information:

• Account information you provide, such as your name, email address, organization name, and login credentials;
• Billing information, such as your plan and transaction records; payment card details are collected and processed directly by our payment processor and are not stored by us;
• Usage and device data collected automatically when you use the Service, such as log data, IP address, browser type, pages viewed, and feature interactions;
• Customer Data, which is the contact and campaign data our customers upload or generate through the Service and that we process on their behalf;
• Communications, such as support requests and correspondence you send to us.

3. How We Use Information

We use information to:

• provide, maintain, secure, and improve the Service;
• process transactions and manage subscriptions and billing;
• authenticate users and protect against fraud, abuse, and security incidents;
• respond to your requests and provide customer support;
• send service-related messages and, where permitted, product communications you can opt out of;
• comply with legal obligations and enforce our Terms of Service.

4. How We Share Information

We do not sell your personal information. We share information only as needed to operate the Service, including with service providers (sub-processors) that perform functions on our behalf, such as cloud hosting and infrastructure, payment processing, and email or message delivery. These providers are bound by contractual obligations to protect information and to use it only to provide their services to us.

We may also share information to comply with the law or a valid legal request, to protect the rights, safety, and security of Zeluto, our users, or the public, and in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how the Service is used. You can control cookies through our Cookie Preferences banner or your browser settings, although disabling some cookies may affect the functionality of the Service.

We categorize cookies and tracking technologies as follows:

• Strictly Necessary Cookies: Essential for logging in, maintaining secure sessions, preventing cross-site request forgery (CSRF), and remembering your privacy consent preferences. These cannot be disabled.
• Analytics & Performance Cookies: Help us measure site traffic, page usage, and feature engagement (e.g., via Google Analytics 4 and Google Tag Manager) to improve our products.
• Advertising & Measurement (Google Consent Mode v2): Allow us and Google to measure marketing campaigns and conversion efficiency in compliance with the EU Digital Markets Act (DMA) and GDPR. We respect user consent signals (ad_storage, ad_user_data, ad_personalization, and analytics_storage). When consent is denied or not yet granted, Google tags operate in cookieless mode without reading or writing advertising identifiers.

6. Data Retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. We retain Customer Data in accordance with customer instructions and applicable plan terms, and we delete or anonymize information when it is no longer needed.

7. Security

We use technical and organizational measures designed to protect information against unauthorized access, loss, or misuse, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International Data Transfers

We may process and store information in countries other than the one in which you reside. Where required, we use appropriate safeguards for cross-border transfers of personal information.

9. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, delete, or port your information, to object to or restrict certain processing, and to withdraw consent. California residents may have rights regarding the disclosure and deletion of personal information and the right not to be discriminated against for exercising those rights.

To exercise your rights, contact us at hello@zeluto.com. If your information was provided to us by one of our customers as Customer Data, please direct your request to that customer, and we will assist them as needed.

10. Minors

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page with a new "Last updated" date and, where appropriate, provide additional notice.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at hello@zeluto.com.