Privacy Policy

Zypact is committed to protecting your privacy. This policy explains what data we collect, why, and how we protect it.

• Account: name and email (via Google, GitHub, or magic link).
• Project data: domains and URLs you add to your workspace.
• Usage data: audit results, GEO scores, and visibility probe runs.
• Payment: processed by Stripe — we never store card numbers.
• Technical: IP address, browser type, device type.

• Provide and improve the Zypact service.
• Send transactional emails (via Resend).
• Process payments (via Stripe).
• Analyse usage to improve features.

We do not sell your data. We share data only with the following sub-processors, strictly to operate the service:

• Supabase — database hosting.
• Vercel — application hosting.
• Stripe — payment processing.
• Resend — transactional email.
• OpenAI, Perplexity, Google — AI probe execution.

• Account data — kept while your account is active.
• Audit and probe data — 12 months.
• Deleted within 30 days of account closure.

You may at any time:

• Access or correct your data.
• Request deletion of your account and data.
• Export your data (contact us).
• Withdraw consent for marketing emails.

Contact contact@zypact.com for any request.

• Session cookies for authentication only.
• No advertising cookies.
• No third-party tracking or analytics cookies.

• TLS 1.3 encryption in transit.
• AES-256 encryption at rest.
• API keys hashed with SHA-256.
• No passwords stored (OAuth + magic links only).

Zypact is in public beta. Features and data practices may evolve. We will notify users of any material changes by email.

This service is not directed to users under 18.

Questions about this policy? Email contact@zypact.com.