Privacy Policy

1. Introduction

This Privacy Policy explains how Zolt collects, uses, stores, and protects your personal information when you use our platform at zolt.me.

Zolt is a limited liability company registered in United States of America. We are the data controller for personal information we collect through our Service.

2. Information We Collect

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract — To provide our Service under our Terms of Service
• Legitimate interests — To improve our Service, prevent fraud, and ensure platform security
• Legal obligation — To comply with applicable US laws and regulations
• Consent — For optional marketing communications (withdrawable at any time)

4. How We Use Your Information

• To create and manage your account
• To display your public creator page
• To provide platform features (page builder, products, memberships)
• To send transactional emails (payment notifications, account updates)
• To prevent fraud and ensure platform security
• To improve our Service and user experience
• To comply with legal obligations
• To enforce our Terms of Service

5. Information Sharing

We do NOT sell your personal information. We share information only with:

• Payment Gateways & Banking Partners — PCI-DSS Level 1 compliant processors, for payment processing, payouts, and identity verification
• Supabase / AWS — Cloud database and storage provider
• Vercel — Hosting provider for our web application
• Resend — Email service provider for transactional emails
• Law enforcement — When required by applicable law or valid legal process

6. Public Information on Your Creator Page

The following information is publicly visible on your creator page:

• Your display name and username
• Your bio and what you create
• Your profile picture
• Your social media links
• Your products and their prices
• Supporter names and messages (supporters can choose anonymous)

Your email address, payout account details, and payment information are never publicly visible.

7. Data Storage & Security

• Your data is stored securely using industry-standard encryption
• We use Supabase (hosted on AWS) for database storage
• Passwords are hashed using bcrypt and never stored in plain text
• All data transmission uses HTTPS encryption
• We regularly review and improve our security practices

8. Cookies

We use only essential cookies to maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies that follow you across the web. You can disable cookies in your browser, but this will affect your ability to stay logged in.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data, including rights under applicable laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR). These may include:

• Right of access — Request a copy of your personal data
• Right to rectification — Update or correct inaccurate data
• Right to erasure — Request deletion of your account and data
• Right to object — Object to certain processing of your data
• Right to withdraw consent — Withdraw consent for marketing at any time

To exercise these rights, contact us at support@zolt.me. We will respond within 30 days.

10. Data Retention

We retain your personal data for as long as your account is active. Upon account deletion:

• Profile and product data: deleted within 30 days
• Transaction records: retained for up to 7 years for accounting and tax purposes
• Fraud prevention data: retained as necessary to protect against ongoing threats

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware we have collected data from a child, we will delete it promptly.

12. International Data Transfers

Zolt is based in the United States. Your data may be processed in countries where our service providers operate, including the United States, the European Economic Area, and other locations where Supabase, Vercel, and Resend maintain infrastructure. We ensure appropriate safeguards are in place for all such transfers, including Standard Contractual Clauses where applicable under relevant data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on our website. Your continued use of the Service after changes are posted constitutes acceptance.

14. Contact Us

For privacy questions or to exercise your rights, contact us:

Fraud Screening & Payment Security Data

To prevent fraud and comply with card-network rules, Zolt records with each payment limited technical and transactional data, including the buyer's email, IP address, general network characteristics, amounts, and the connected merchant account involved. This information is used solely for fraud prevention, dispute handling and legal compliance, stored in fraud-prevention records available only to authorised Zolt administrators, and retained as required for audits.

Order & Delivery Information

For live-sale purchases Zolt collects the buyer's name, email, phone number and delivery address. These are shared only with the seller of the purchased item for fulfilment, stored on the buyer's private order page, and included in refund and fraud investigations. Buyers are also sent a verification email at signup; the verification status is used to unlock seller payout setup.