Privacy Policy

What we collect, why, and access limits

We collect account identifiers (name, email, authentication metadata), workspace/ledger/entry content and uploads (e.g., receipts), billing and payment metadata, and minimal product telemetry (feature usage, device/browser traits) to operate the service, secure accounts, send notifications, and improve reliability. We do not sell personal data or use your content to train third-party models.

Human access to production data is exceptional and only allowed for support or security reasons with a tracked ticket, least-privilege, time-bound permissions, and audit logs. We prefer masked or aggregated views; full content is accessed only when you request help or to investigate abuse/security. You can request export or deletion via the contact below, subject to legal obligations and backup retention windows.

Data retention

We retain personal data only as long as needed to provide the service, comply with law, resolve disputes, and enforce agreements. Backups are kept on a rolling, time-limited schedule; when you delete data we remove it from active systems and it falls out of backups after the retention window. Aggregated metrics are kept without directly identifying data.

Cookies and tracking

We use strictly necessary cookies for authentication, session integrity, and fraud protection. Optional analytics/diagnostics are minimal, respect browser signals where applicable, and can be turned off in settings or by contacting support. We do not use third-party marketing trackers or sell personal data.

Changes to this policy

We may update this policy to reflect changes in our practices or for legal reasons. If a change materially expands how we use data, we will give reasonable notice and may ask for renewed consent. Continued use after the effective date indicates acceptance of the updated policy.

Contact

Questions or requests about privacy can be sent to support@zillurl.com. Include your account email and a brief description of your request.