Privacy Policy

Zauren Technologies LLC (“Zauren,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at zauren.com, our client portal, and our services.

Business address: 30 N Gould St Ste N, Sheridan, WY 82801, United States
Contact: [email protected]

1. Information We Collect

a) Information You Provide

When you register for an account, request a quote, purchase a service, or contact us, we may collect:

• Full name, email address, and phone number
• Company name and business address
• Billing information (processed securely by our payment provider; we do not store full card numbers)
• Project-related files and documents you upload through the client portal
• Messages and communications sent through our messaging system or support tickets

b) Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and navigation patterns
• Referring website or source
• Device type and screen resolution

c) Cookies and Tracking

We use the following types of cookies:

Cookie	Purpose	Duration
Session cookie	Maintains your login session and CSRF protection	Until browser is closed or session timeout (30 min)
Theme preference	Remembers your light/dark mode setting	1 year
Referral cookie (zauren_ref)	Tracks affiliate referrals for our partner program	30 days

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the client portal.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process quotes, invoices, and payments
• Communicate with you about projects, support requests, and service updates
• Send invoices, payment confirmations, and billing-related notifications
• Respond to your inquiries and provide customer support
• Monitor and analyze usage trends to improve user experience
• Detect and prevent fraudulent or unauthorized activity
• Comply with legal obligations

3. Payment Processing

We use Stripe as our primary payment processor. When you make a payment, your payment card information is transmitted directly to Stripe using their secure, PCI-DSS compliant infrastructure. We do not store, process, or have access to your full credit card number.

Stripe may collect and process your payment data in accordance with their own privacy policy. You can review Stripe's privacy policy at stripe.com/privacy.

Information we receive from Stripe includes: transaction confirmation, last four digits of the card, card brand, and billing address for fraud prevention purposes.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment processor (Stripe): To process your payments securely. Stripe acts as a data processor on our behalf.
• Hosting infrastructure providers: To deliver hosting services. These providers are bound by confidentiality agreements.
• Email service providers: To send transactional emails (invoices, notifications, support responses).
• Legal requirements: When required by law, regulation, subpoena, or court order.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.
• With your consent: When you have given us explicit permission to share specific information.

5. International Data Transfers

Zauren is based in the United States and processes data in the United States. If you are located outside the United States (including the European Economic Area, United Kingdom, Australia, or elsewhere), your personal data will be transferred to and processed in the United States.

By using our services, you consent to the transfer of your data to the United States. We take appropriate measures to ensure your data is treated securely and in accordance with this Privacy Policy, regardless of where it is processed.

For clients in the European Economic Area (EEA) or United Kingdom, we rely on the following legal bases for data transfers:

• Your explicit consent provided at account registration
• Performance of a contract (delivery of services you requested)
• Our legitimate business interests, balanced against your rights

6. Data Security

We implement industry-standard security measures to protect your personal information:

• Encrypted data transmission (SSL/TLS) across our entire platform
• Secure password hashing (bcrypt) — we never store plaintext passwords
• CSRF token protection on all forms and AJAX requests
• Login attempt limiting (5 attempts, then 15-minute lockout)
• Session management with automatic timeouts
• Regular security audits and vulnerability assessments
• Access controls and role-based authorization
• Prepared database statements to prevent SQL injection
• Input sanitization and output escaping to prevent XSS attacks

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the unlikely event of a data breach.

7. Data Retention

• Account data: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except as required by law.
• Project files: Retained for 12 months after project completion, then deleted unless you request otherwise.
• Invoice and payment records: Retained for 7 years as required for tax and accounting purposes.
• Support tickets and messages: Retained for the lifetime of your account.
• Server logs: Retained for up to 90 days for security and troubleshooting purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements).
• Portability: Request your data in a portable, machine-readable format.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Objection: Object to processing of your data for direct marketing purposes.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. For significant changes, we will also notify you via email or through the client portal at least 14 days before the changes take effect. Your continued use of our services after the effective date constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

• Email: [email protected]
• Phone: +1 307 667 6686
• Address: Zauren Technologies LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States
• Website: Contact page