Privacy Notice

We collect information you provide directly, such as your name, work email, billing details, and any campaign configurations, blocklist rules, or ad-network credentials you connect to your account.

We also automatically collect technical information when you use ZeroCloak, including IP address, browser type, device identifiers, and pages visited on our marketing site and dashboard.

• Account information: name, email, company, billing address
• Campaign configuration: tracking snippets, blocklist and routing rules, connected ad accounts
• Traffic data: click-level signals (IP, device, behavioral timing) submitted for fraud scoring
• Support communications: emails, chat transcripts, call notes

We use collected information to operate and improve ZeroCloak, including scoring the traffic you send us, applying your blocking and routing rules, generating traffic-quality reports, filing IVT disputes you request, and processing payments.

We may also use aggregated, de-identified traffic patterns to improve our fraud-detection models and prioritize our roadmap.

We share data with subprocessors who help us deliver the service, such as cloud infrastructure providers, and payment processors. Where you authorize it, we share click evidence directly with the ad networks you're disputing invalid traffic with. Each subprocessor is bound by a data processing agreement.

We do not sell personal information, and we never share your campaign configurations or traffic data with third parties for advertising purposes.

A current list of subprocessors is available at docs.zerocloak.org/security/subprocessors.

We retain account and billing information for as long as your account is active and for a reasonable period afterward to comply with tax and accounting obligations.

Click-level traffic logs and dispute evidence are retained according to your plan's retention window, after which they are automatically deleted.

Our marketing site uses a small number of first-party cookies for session management and essential analytics. We do not use third-party advertising cookies.

We encrypt data in transit using TLS 1.2 or higher and at rest using industry-standard AES-256 encryption. Access to production systems is restricted and logged.

ZeroCloak undergoes an annual SOC 2 Type II audit; a report is available to customers under NDA upon request.

Depending on your location, you may have the right to access, correct, export, or delete your personal information. You can manage most account data directly from your dashboard settings.

• Request a copy of your personal data
• Correct inaccurate account information
• Request deletion of your account and associated data
• Opt out of non-essential product emails at any time

ZeroCloak's infrastructure spans multiple regions. Where personal data is transferred outside your home region, we rely on Standard Contractual Clauses or equivalent safeguards.

ZeroCloak is a business-to-business product not directed at children, and we do not knowingly collect personal information from anyone under the age of 16.

We may update this policy periodically. Material changes will be communicated by email to account owners at least 14 days before taking effect.