Zonloty Privacy Policy

This Privacy Policy applies to information collected through Zonloty's website, application interfaces, onboarding flow, search tools, payment flows, reports, previews, account areas, and related communications.

If you use Zonloty on behalf of a company, fund, brokerage, or other organization, this Policy applies to information associated with that use unless a separate written agreement says otherwise.

Zonloty may collect identity and account information such as your name, email address, login identifiers, authentication metadata, account preferences, onboarding responses, and subscription or credit status.

Zonloty may collect transaction information such as purchased products, billing records, payment status, and processor-generated transaction identifiers. Zonloty does not intentionally store full payment card details if those details are handled directly by a third-party payment processor.

Zonloty may collect usage and technical information such as IP address, device and browser information, session data, approximate location inferred from network information, timestamps, referral URLs, pages visited, interactions with search and report features, and logs needed for fraud prevention, debugging, and security.

Zonloty may also collect content you submit, including municipality searches, prompts, account edits, report generation requests, support messages, and any attachments or information you voluntarily provide.

Information may be collected directly from you when you sign up, log in, complete onboarding, purchase credits, submit searches, generate reports, update your profile, or contact support.

Information may also be collected automatically through logs, cookies, local storage, analytics-style events, rate-limiting systems, and infrastructure tools used to operate, secure, and measure the service.

In addition, Zonloty may receive information from third parties such as authentication providers, payment processors, hosting providers, AI providers, geocoding providers, and public-data or municipal-data sources.

Zonloty uses information to provide and operate the service, authenticate users, manage accounts, process payments, deliver credits, generate reports, maintain report history, personalize the product experience, and respond to support requests.

Zonloty also uses information to improve performance, detect and prevent abuse, enforce terms, troubleshoot issues, monitor system reliability, analyze product usage, comply with legal obligations, and protect the rights, safety, and security of Zonloty, its users, and the public.

Zonloty may use submitted prompts, interactions, and product-usage patterns to improve internal workflows, quality controls, fraud detection, and service design, subject to contractual and legal constraints.

Where applicable law requires a legal basis for processing, Zonloty generally relies on one or more of the following: performance of a contract with you, legitimate interests in operating and securing the business, compliance with legal obligations, protection against fraud and misuse, and consent where required.

Zonloty may use cookies and similar technologies to keep users signed in, preserve session state, remember preferences, secure the service, prevent abuse, and understand product usage.

Some functionality may not work correctly if cookies or related storage technologies are disabled in your browser.

Zonloty may share information with service providers and vendors that help run the business, including providers for hosting, authentication, databases, payments, AI model access, logging, rate limiting, municipal-data retrieval, geocoding, analytics, and customer support.

Zonloty may share information if required by law, subpoena, court order, regulatory process, or good-faith belief that disclosure is necessary to investigate fraud, enforce agreements, protect safety, or defend legal rights.

Zonloty may also disclose information in connection with an actual or proposed merger, financing, acquisition, reorganization, sale of assets, or similar transaction.

Zonloty does not sell personal information for monetary compensation in the ordinary course of business.

Zonloty integrates with third-party providers such as Supabase for authentication and data storage, Stripe for payments, OpenAI for AI-powered report generation, Firecrawl and other public-data tooling for research workflows, and geocoding or suggestion providers for municipality search.

Those providers may process information under their own privacy terms and security practices. Zonloty is not responsible for the privacy practices of third-party sites, municipal websites, payment processors, or integrated service providers, except as required by law.

Zonloty retains information for as long as reasonably necessary to provide the service, maintain accounts, keep report history, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and protect the integrity of the platform.

Retention periods may vary by data type. Payment-related records, audit logs, and account security records may be retained longer than general usage data where appropriate for compliance, tax, fraud-prevention, or recordkeeping purposes.

Zonloty uses commercially reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, misuse, loss, alteration, or disclosure. Those measures may include access controls, encryption in transit, hosted infrastructure safeguards, credential protections, and vendor security tooling.

No method of transmission, storage, or processing is completely secure. Zonloty cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your own credentials and devices.

Zonloty and its service providers may process or store information in jurisdictions other than the place where you are located. By using Zonloty, you understand that your information may be transferred to and processed in other jurisdictions that may have different data-protection rules than your home jurisdiction.

Zonloty is intended for business and professional use and is not directed to children. Zonloty does not knowingly collect personal information from children under the age required by applicable law without appropriate authorization. If Zonloty learns it has collected such information inadvertently, it may delete it.

Depending on your location, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction, portability, or information about how data is processed. You may also have the right to object to certain processing or withdraw consent where consent is the applicable legal basis.

Zonloty may need to verify your identity before acting on a request and may deny or limit requests where permitted by law, including where information must be retained for legal compliance, security, fraud prevention, dispute resolution, or legitimate business recordkeeping.

If you are subject to privacy laws that provide additional rights or required disclosures, including laws in certain U.S. states or other jurisdictions, Zonloty will interpret this Policy in a manner intended to support compliance to the extent applicable.

Before production rollout at scale, Zonloty should have counsel review this Policy for state-specific and region-specific disclosures, including any California, Colorado, Connecticut, Virginia, Utah, or international privacy requirements that may apply.

Zonloty may update this Privacy Policy from time to time to reflect changes in the service, legal requirements, or business practices. Updated versions become effective when posted unless otherwise stated. Continued use of the service after the effective date of an updated Policy constitutes acknowledgment of the revised Policy.

This Privacy Policy is comprehensive from a product-content perspective, but it should still be reviewed against actual backend data flows, vendor contracts, retention practices, analytics setup, marketing practices, and jurisdictional requirements before production reliance.