How we handle your data.
Plain English. No legalese. Everything you need to know in one page.
What we collect
Three buckets:
- You as a visitor. Name, email, phone, business name if you fill a form. Basic analytics (pages viewed, referrer, device) if you accept cookies.
- You as a client. Whatever you give us to run the engagement: access tokens to your Google Business Profile, ad accounts, analytics, CRM, email tool, and whatever else the work requires.
- Your customers. If you run Zay 360 or a custom CRM, your customer records live in a CRM instance provisioned for you. Their data is yours, not ours.
Where it lives
On servers in the United States. Vercel for the public website, Fly.io for the CRM API, AWS for backups. Encrypted at rest, encrypted in transit, access logs retained 90 days.
Who can see it
Abdallah, whoever you hire through us, and the infrastructure providers named above (who do not access contents, only operate the systems). We do not sell, rent, or share data with any third party for their own purposes.
How to get it out
Email hello@zayrev.com. We export your data in CSV, JSON, or SQL within five business days. No cost. No friction.
How to delete it
Same email. We delete everything we have on you within 30 days and confirm in writing. Backups are purged on their next cycle.
Your rights
If you are in California, the EU, or another region with data rights laws, you have the right to access, correct, or delete your data. Email us. We respond within 30 days.
Breaches
In the unlikely event of a breach affecting your data, we notify you within 72 hours with scope, containment, and next steps.
Questions
Email hello@zayrev.com or call (321) 666-1102. Abdallah reads every one.