Privacy Policy

1. Information we collect

We collect information you give us directly, such as your name, work email, company and phone number when you request a demo or contact our team. When you use the platform, we collect account details, configuration data and the operational telemetry needed to enforce and audit your policies.

Our website collects standard technical data — IP address, browser type, pages viewed and referring URL — to keep the site secure and understand which content is useful.

2. How we use information

We use the information to provide and operate the platform, respond to demo and sales enquiries, deliver support, investigate security incidents, meet legal obligations and improve our products. We do not sell personal information, and we do not use customer data to train models for other customers.

3. Sharing and disclosure

We share information with service providers who process it on our behalf under written agreements — cloud hosting, email delivery, analytics and payment processing. We may also disclose information where required by law, to protect our rights, or in connection with a merger or acquisition. Every provider is bound to confidentiality and security obligations at least as protective as those in this policy.

4. Data retention

We keep personal information only as long as needed for the purposes described here, or as required by law. Audit and decision logs are retained for the period configured in your account. On termination, customer data is deleted within 30 days unless a longer period is legally required.

5. Security

Data is encrypted in transit and at rest. Access to production systems is limited to authorised personnel, logged, and reviewed regularly. No system is perfectly secure, but we maintain an incident response process and will notify affected customers without undue delay if a breach occurs.

6. International transfers

We may process information in countries other than the one you live in. Where personal data is transferred out of the EEA or UK, we rely on Standard Contractual Clauses or another recognised transfer mechanism.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to certain processing, or to withdraw consent. To exercise any of these, email info@zenstra.ai. We respond within 30 days.

8. Cookies

We use strictly necessary cookies to run the site and optional analytics cookies to measure usage. You can block or delete cookies in your browser; the site will continue to work, though some preferences will not be remembered.

9. Changes to this policy

We will post any changes on this page and update the date above. If the changes are material, we will notify account holders by email before they take effect.

10. Contact us

Questions about this policy or how we handle data: