Privacy Policy

1. What Information We Collect

We operate on a data minimisation principle: we only collect information that is strictly necessary to deliver the service you are using.

When you make a purchase:

• Your email address, used to deliver your product and send order confirmations
• A transaction reference ID from our payment processor — we never receive or store raw card numbers, bank details, or full payment credentials
• The product(s) purchased and the date of purchase, for licence management and support purposes

When you contact support:

• The content of messages you send to our email addresses or Telegram channels
• Your Telegram username or email address, depending on the channel used

When you visit our websites:

• Basic, anonymised analytics data such as page views, referral sources, and country-level location — this data is never linked to an individual identity
• Standard server logs including IP address and browser type, retained for a maximum of 30 days for security purposes

We do not collect biometric data, financial account details, government ID numbers, or any special categories of sensitive personal data.

2. How We Use Your Information

Your data is used only for the purposes for which it was collected. We do not use your information for profiling, targeted advertising, or any purpose beyond the following:

• Order fulfilment: Delivering your purchased product, licence key, or download link
• Customer support: Responding to questions, troubleshooting issues, and processing refund requests
• Product updates: Notifying you of significant updates, security patches, or new versions of products you have purchased
• Legal compliance: Maintaining records required by applicable tax, accounting, and consumer protection laws
• Fraud prevention: Detecting and preventing fraudulent transactions or abuse of our refund policy

We will never use your email address to send unsolicited marketing communications for products you have not purchased. Any product-related communications can be opted out of at any time by emailing legal@zynu.net.

3. Data Sharing and Third Parties

We do not sell, rent, trade, or share your personal data with third parties for their own purposes. Full stop.

We work with a limited number of trusted service providers who process data on our behalf, strictly under our instructions:

• Payment processors (such as Stripe and Telegram Stars): Handle transaction processing. They operate under their own privacy policies and PCI-DSS compliance frameworks. We only receive a non-sensitive transaction reference from them — never your raw payment details.
• Email infrastructure providers: Used to deliver order confirmations and support replies. These providers are bound by data processing agreements and are prohibited from using your data for any purpose other than delivery.
• Hosting providers: Our servers are hosted on reputable cloud infrastructure. Providers have access to server-level data (such as IP logs) but are contractually prohibited from accessing or using application-level data.

We may disclose your information to law enforcement or regulatory bodies if required by a valid legal obligation, court order, or to protect the safety and security of our users. We will notify you of any such disclosure where legally permitted to do so.

4. Cookies and Tracking

Our websites use a minimal set of cookies necessary for core functionality. We do not use third-party advertising cookies, cross-site tracking pixels, or any technology designed to build a profile of your browsing behaviour across other websites.

• Session cookies: Temporary cookies used to maintain your browsing session. Deleted when you close your browser.
• Analytics cookies: We use privacy-respecting analytics that collect aggregate, anonymised data only. No individual user profiling. No cross-site tracking.

You can configure your browser to block or delete all cookies without affecting your ability to view or use ZynU websites.

5. Data Retention

We retain personal data only for as long as necessary:

• Purchase and order records: Retained for up to 5 years to comply with tax and accounting regulations
• Support correspondence: Retained for up to 2 years to provide context for ongoing or future support requests
• Server logs: Automatically purged after 30 days
• Analytics data: Aggregated and anonymised — no personal data is retained beyond 12 months

You may request early deletion of your data at any time — see Section 7 for your rights.

6. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Access to personal data is restricted to team members who need it to perform their role
• Payment processing is fully delegated to PCI-DSS compliant third-party processors
• We conduct periodic reviews of our data handling practices and infrastructure security

If you believe your data has been compromised, please contact us immediately at legal@zynu.net.

7. Your Rights

Regardless of where you are located, we respect and honour the following rights:

• Right of access: Request a copy of all personal data we hold about you
• Right of rectification: Request correction of any inaccurate or incomplete data
• Right of erasure: Request deletion of your personal data, subject to legal retention obligations
• Right to restrict processing: Request that we limit how we use your data while a dispute is resolved
• Right to data portability: Receive a machine-readable copy of your data where technically feasible
• Right to object: Object to any processing you believe is not in your legitimate interests

To exercise any of these rights, email legal@zynu.net with the subject "Data Request". We will acknowledge receipt within 48 hours and respond fully within 30 days.

8. Children's Privacy

ZynU products are not directed at persons under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us at legal@zynu.net and we will delete it promptly.

9. International Data Transfers

TrafCodes operates internationally and your data may be processed on servers located in different countries. Where we transfer data outside your home jurisdiction, we ensure appropriate safeguards are in place — including contractual protections with our service providers — to maintain the same level of protection described in this policy.

10. Changes to This Policy

We may update this Privacy Policy when our practices change, when new products are launched, or when applicable law requires it. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify buyers via email.

Your continued use of any ZynU product after changes become effective constitutes your acceptance of the updated policy. If you disagree with any change, you may request deletion of your data as described in Section 7.