Privacy Policy

Last updated: [publication date]

This policy explains how zaDojo handles personal data when you visit zadojo.com, use the zaDojo app at app.zadojo.com, or connect zaDojo to an AI agent.

Who we are

zaDojo is operated by [company legal name], [registered address], [company registration number] ("zaDojo", "we", "us"). We are the controller of the personal data described in this policy. You can reach us at hello@zadojo.com.

What we collect

Account data: your name, email address, sign-in details (a password hash or your Google sign-in identity), and the organizations and teams you belong to.
Billing data: your plan, invoices, payment status and billing details. Card details are handled by our payment processor, Stripe. We never see or store full card numbers.
Content you add: projects, websites, keywords, competitors, prompts, project context, reports and settings.
Connected Google data: if you connect Google Search Console or Google Analytics, we read data for the properties you choose, with read-only access. You can disconnect at any time.
Usage and technical data: log data, IP address, browser and device details, and how you use features.
Communications: emails and support messages you send us.

Why we use it, and our legal basis

To provide the service and run your account (performance of a contract).
To take payments and keep accounting records (performance of a contract and legal obligation).
To keep zaDojo secure and to prevent abuse and fraud (legitimate interests).
To measure and improve the product (legitimate interests, or your consent where the law requires it).
To send service emails, and product updates you can opt out of at any time (performance of a contract and legitimate interests, or your consent where the law requires it).

We do not sell your personal data, and we do not use your content to train AI models.

Service providers

We share personal data with providers that help us run zaDojo, and only as far as their task needs it:

Provider	Purpose
Cloudflare	Hosting, database, storage, security and bot protection
Stripe and Autumn	Payments and subscription management
Loops	Account and product emails, and the newsletter
DataForSEO	Search data for the keywords, domains and URLs you research
OpenRouter and the AI model providers it routes to	The in-app assistant, prompt suggestions and AI visibility checks
Google	Sign in with Google, and the Search Console and Analytics data you connect
PostHog	Product analytics in the app
Plausible	Website analytics without cookies
Dub	Referral attribution when you arrive through a partner link

Some of these providers process data outside the European Economic Area. When they do, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

We may also disclose data when the law requires it, or to a buyer or successor if zaDojo is sold or merged, in which case this policy continues to apply.

Cookies

The app uses cookies that are strictly necessary to keep you signed in and to protect your account. The website measures visits without cookies. If you arrive through a partner referral link, a dub_id cookie records the referral so the partner can be credited. Where we use cookies or similar technologies that are not strictly necessary, we ask for your consent first.

How long we keep data

We keep account data and content while your account is active. When you delete your account, we delete or anonymize your personal data within [30] days. We keep billing records for as long as tax and accounting law requires, usually up to [10] years. Backups are overwritten within [period].

Your rights

Under the GDPR you can ask to access, correct, delete or export your personal data, object to or restrict how we process it, and withdraw consent at any time. Email hello@zadojo.com and we will answer within one month. You can also complain to your local data protection authority, or to [lead supervisory authority].