Privacy Policy

1. Who we are

Zyrus Tech (also trading as Zyrus Studio) is the data controller for the personal data collected through our website and services. If you have questions about this policy, contact us at hello@zyrus.studio.

2. What data we collect

• Identity & contact: name, email address, phone number, company name.
• Account & login: username, password hash, authentication provider details.
• Service usage: feature usage, workspace activity, project briefs, uploaded files.
• Support: messages sent via chat, WhatsApp, email, or contact forms.
• Device & network: IP address, browser type, operating system, and device identifiers (via cookies and analytics).
• Payment: billing address and transaction history. We do not store full payment card numbers.

3. Why we collect it (legal basis)

• Contract performance: to provide our services, manage your account, and deliver projects.
• Legitimate interests: fraud prevention, service improvement, security monitoring, and analytics.
• Consent: for marketing emails and non-essential cookies. You can withdraw consent at any time.
• Legal obligation: tax reporting, accounting, and responding to lawful requests.

4. Who we share data with

• Service providers: hosting, cloud infrastructure, analytics, and customer support tooling.
• Merchant of Record (Paddle.com): for payment processing, subscription management, tax compliance, and invoicing. Paddle acts as an independent data controller for payment-related data.
• Professional advisers: legal and accounting firms where necessary.
• Authorities: when required by law or to protect our rights.

We do not sell personal data to third parties.

5. International transfers

We use service providers that may process data outside the UK/EEA. Where this happens, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions to ensure an equivalent level of protection.

6. Data retention

We keep personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymise it. Typically:

• Account data: retained while your account is active, plus up to 2 years after closure for legal/compliance purposes.
• Project files: retained per your workspace settings or until you delete them.
• Marketing data: retained until you unsubscribe or withdraw consent.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure ("right to be forgotten").
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority.

To exercise these rights, email us at hello@zyrus.studio. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, but we work continuously to reduce risk.

9. Cookies

We use cookies and similar technologies for essential site functionality, analytics, and (with your consent) marketing. Essential cookies are necessary for the site to work and cannot be disabled. Analytics and marketing cookies help us improve the experience and reach relevant audiences. You can manage preferences via your browser settings.

10. Changes to this policy

We may update this policy from time to time. Changes are posted on this page with a revised "last updated" date. Continued use of the service after changes means you accept the updated policy.