Privacy Policy

Last updated: October 12, 2026

1. Introduction

This Privacy Policy describes how ZENSHIELD (“the Company,” “We,” “Us,” or “Our”) collects, uses, discloses, and protects information about You when You use the Service, and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You acknowledge the collection and use of information in accordance with this Privacy Policy. Where applicable law requires a legal basis such as consent, We rely on that legal basis, as described in Section 11.

This Privacy Policy is designed to meet the requirements of, among others:

• the EU General Data Protection Regulation (“GDPR”) and the UK GDPR / Data Protection Act 2018;
• the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (together, “CCPA/CPRA”);
• the California Online Privacy Protection Act (“CalOPPA”); and
• the U.S. Children’s Online Privacy Protection Act (“COPPA”).

2. Interpretation and Definitions

Interpretation

Words with an initial capital letter have the meanings defined below. These definitions have the same meaning whether they appear in the singular or plural.

Definitions

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
• Application refers to ZENSHIELD, the software program provided by the Company, including any browser extension, desktop, or mobile version.
• Company refers to ZENSHIELD. For the purposes of the GDPR, the Company is the Data Controller. For the purposes of the CCPA/CPRA, the Company is the Business.
• Consumer, for the purpose of the CCPA/CPRA, means a natural person who is a California resident.
• Cookies are small files placed on Your Device by a website, containing details of Your browsing history and other information.
• Country refers to: New York, United States.
• Device means any device that can access the Service, such as a computer, cell phone, or tablet.
• Do Not Track (“DNT”) is a browser setting that signals to websites that You do not want Your online activity tracked.
• Personal Data (also “Personal Information”) is any information that relates to an identified or identifiable individual. Under the CCPA/CPRA, it includes information that identifies, relates to, describes, or is reasonably capable of being associated with, directly or indirectly, a particular Consumer or household.
• Sensitive Personal Information has the meaning given in the CCPA/CPRA and includes “special categories” of data under the GDPR.
• Sale and Share, for the purpose of the CCPA/CPRA, mean, respectively, disclosing Personal Information to a third party for monetary or other valuable consideration, and disclosing Personal Information to a third party for cross-context behavioral advertising.
• Service refers to the Application and any related website.
• Service Provider means any natural or legal person who processes data on behalf of the Company. Under the GDPR, Service Providers are Data Processors; under the CCPA/CPRA, they are “service providers” or “contractors.”
• Usage Data refers to data collected automatically, generated by using the Service or from the Service infrastructure itself.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which that individual is accessing or using the Service. Under the GDPR, You are the Data Subject.

3. Information We Collect

Personal Data You Provide

While using the Service, We may ask You to provide certain information that can be used to contact or identify You. Depending on how You use the Service, this may include:

• Email address
• First and last name
• Account credentials (stored in hashed form where applicable)
• The contents of messages You send to us (for example, support requests)
• Records of purchases or subscriptions, if any (payment card details are handled directly by our payment processor and are not stored by Us)

Usage Data Collected Automatically

Usage Data may include Your Device’s Internet Protocol (IP) address, browser type and version, the pages of our Service You visit, the time and date of Your visit, time spent on those pages, unique device identifiers, and other diagnostic data.

When You access the Service from a mobile device, We may collect information automatically, including the type of mobile device, its unique ID, its IP address, its operating system, the type of mobile browser, and other diagnostic data. We may also collect information Your browser sends whenever You visit or access the Service.

Information We Do Not Collect

We do not intentionally collect Sensitive Personal Information (such as government identification numbers, precise geolocation, racial or ethnic origin, religious beliefs, health data, biometric data, or sexual orientation). We do not use or disclose Sensitive Personal Information to infer characteristics about You.

4. Cookies and Tracking Technologies

We may use Cookies and similar technologies (such as local storage, beacons, and scripts) to operate the Service, remember Your preferences, and understand how the Service is used. Categories include:

• Strictly necessary – required to provide the Service, authenticate users, and prevent fraud. These cannot be switched off.
• Functionality – remember choices You make, such as language or settings.
• Analytics – help Us understand usage so We can improve the Service. Where required by law (for example, in the EEA and UK), We use these only with Your consent.

You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. If You do not accept Cookies, some parts of the Service may not function properly.

5. How We Use Your Information

We may use Personal Data for the following purposes:

• To provide and maintain the Service, including to monitor its usage.
• To manage Your Account and Your registration as a user.
• To perform a contract, including the purchase of products or services through the Service.
• To contact You by email, telephone, SMS, or push notifications about updates, security notices, or service-related information.
• To provide You with news and offers about similar goods and services, unless You have opted out. Where required by law (for example, in the EEA and UK), We send marketing only with Your consent.
• To manage Your requests to Us.
• For business transfers, such as evaluating or conducting a merger, divestiture, restructuring, reorganization, dissolution, or sale of some or all of Our assets.
• For other purposes such as data analysis, identifying usage trends, determining the effectiveness of communications, and improving the Service.
• To comply with legal obligations and to protect the rights, property, or safety of the Company, our users, or others.

You can unsubscribe from marketing emails at any time using the link in those emails or by contacting Us. Service-related messages (such as security notices) may still be sent where necessary.

6. How We Share Your Information

We may share Your Personal Data in the following situations:

• With Service Providers who help Us operate the Service (for example, hosting, analytics, email delivery, and payment processing). They may use Your data only to provide services to Us and are bound by contractual confidentiality and data-protection obligations.
• For business transfers in connection with a merger, sale of Company assets, financing, or acquisition of all or part of Our business.
• With Affiliates, who are required to honor this Privacy Policy.
• With other users, if You choose to share information in public areas of the Service.
• With Your consent, for any other purpose.
• For legal reasons: We may disclose Personal Data if required by law or in response to valid requests by public authorities (e.g., a court or government agency), or in good faith belief that such action is necessary to comply with a legal obligation, protect the rights or property of the Company, prevent or investigate possible wrongdoing, protect the personal safety of users or the public, or protect against legal liability.

We do not sell Personal Data and do not share it for cross-context behavioral advertising.

7. Retention of Your Personal Data

We retain Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Where possible, We apply shorter retention periods and/or reduce identifiability by deleting, aggregating, or anonymizing data.

We may retain Personal Data longer where necessary to comply with a legal obligation, for legal claims, at Your explicit request, or for technical limitations (such as residual copies in backups, which are deleted on a normal rotation cycle).

8. International Transfers

Your information is processed at the Company’s operating offices and in any other places where the parties involved in processing are located, which may be outside Your state, province, or country, including in the United States, where data-protection laws may differ from those in Your jurisdiction.

Where We transfer Personal Data out of the European Economic Area, the United Kingdom, or Switzerland, We rely on an appropriate transfer mechanism, such as an adequacy decision (including the EU–U.S. Data Privacy Framework where the recipient is certified) or the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. You may request a copy of the relevant safeguards by contacting Us.

9. Security of Your Personal Data

We use commercially reasonable administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit and access controls. No method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee absolute security. If We become aware of a data breach that affects You, We will notify You and the relevant authorities as required by applicable law.

10. Your Choices and Rights

Depending on where You live, You may have some or all of the rights described below. You can exercise many of them directly in the Service’s account settings (if available) or by emailing 6424775@gmail.com.

• Access the Personal Data We hold about You.
• Correct inaccurate Personal Data.
• Delete Your Personal Data.
• Port Your data – receive a copy in a structured, commonly used, machine-readable format.
• Opt out of marketing communications.
• Withdraw consent at any time, where processing is based on consent.

We may need to retain certain information where We have a legal obligation or lawful basis to do so. We will respond to requests within the time required by applicable law.

11. GDPR / UK GDPR Privacy Rights (EEA, UK & Switzerland)

If You are located in the European Economic Area, the United Kingdom, or Switzerland, the following additional information applies.

Data Controller

ZENSHIELD is the controller of Your Personal Data. You can contact Us at 6424775@gmail.com.

Legal Bases for Processing

We process Personal Data only where We have a legal basis under Article 6 GDPR:

• Contract – processing is necessary to provide the Service You requested or to take steps at Your request before entering into a contract (e.g., account management, providing features).
• Consent – You have given consent for a specific purpose (e.g., non-essential cookies, marketing emails). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation – processing is necessary to comply with a legal obligation (e.g., tax records, responding to lawful requests).
• Legitimate interests – processing is necessary for Our legitimate interests (e.g., securing the Service, preventing fraud, improving features), provided those interests are not overridden by Your rights and freedoms.
• Vital interests or public interest, where applicable.

Your GDPR Rights

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (“right to be forgotten”) (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing based on legitimate interests or for direct marketing (Art. 21)
• Rights related to automated decision-making, including profiling (Art. 22). We do not make decisions that produce legal or similarly significant effects about You based solely on automated processing.
• Right to withdraw consent at any time (Art. 7(3)).
• Right to lodge a complaint with a supervisory authority, in particular in the EU Member State of Your habitual residence, place of work, or place of the alleged infringement. In the UK, this is the Information Commissioner’s Office (ICO).

We will respond to Your request within one month, which may be extended by two further months where necessary given the complexity and number of requests. We may ask You to verify Your identity before responding. Exercising these rights is free of charge unless a request is manifestly unfounded or excessive.

Provision of Data

Where Personal Data is required to create an Account or perform a contract, failing to provide it may mean We cannot provide the Service. Otherwise, providing Personal Data is voluntary.

12. California Privacy Rights (CCPA / CPRA)

This section supplements this Privacy Policy and applies only to California residents. It describes Our practices over the preceding 12 months and Your rights under the CCPA/CPRA.

Categories of Personal Information Collected

Personal Information does not include publicly available information, deidentified or aggregated consumer information, or information excluded from the CCPA’s scope.

Sources of Personal Information

• Directly from You – e.g., forms You complete, account registration, and messages You send.
• Indirectly from You – e.g., from observing Your activity on the Service.
• Automatically – e.g., through Cookies and similar technologies.
• From Service Providers – e.g., analytics or payment processors acting on Our behalf.

Business or Commercial Purposes

We use and disclose Personal Information for the “business purposes” and “commercial purposes” described in Section 5, including operating the Service, security and fraud prevention, debugging, short-term transient use, performing services on Our behalf, internal research, and quality and safety maintenance.

Disclosures for a Business Purpose

In the preceding 12 months, We may have disclosed Categories A, B, D, and F to Service Providers and contractors for business purposes, under written contracts that restrict their use of the information.

Sale or Sharing of Personal Information

We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising, and have not done so in the preceding 12 months. We do not have actual knowledge of selling or sharing the Personal Information of Consumers under 16 years of age.

Sensitive Personal Information

We use Sensitive Personal Information only for purposes permitted under Cal. Code Regs. tit. 11, § 7027(m) (such as providing the Service You request and ensuring security). We do not use it to infer characteristics about You, so the right to limit its use does not apply.

Retention

We retain each category of Personal Information for the periods described in Section 7.

Your Rights Under the CCPA/CPRA

• Right to know the categories and specific pieces of Personal Information We have collected about You, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom We disclose it.
• Right to delete Personal Information We collected from You, subject to certain exceptions.
• Right to correct inaccurate Personal Information.
• Right to opt out of the sale or sharing of Personal Information. Although We do not sell or share Personal Information, You may still submit an opt-out request, and We honor Global Privacy Control (GPC) signals as a valid opt-out request for the browser or device sending the signal.
• Right to limit the use and disclosure of Sensitive Personal Information (see above).
• Right to non-discrimination: We will not deny You goods or services, charge You different prices, provide a different level of quality, or retaliate against You for exercising Your rights.

How to Exercise Your Rights

To exercise these rights, email Us at 6424775@gmail.com with the subject line “California Privacy Request.” We will confirm receipt within 10 business days and respond within 45 calendar days, which may be extended by an additional 45 days where reasonably necessary with notice to You. You may make a request to know up to twice in a 12-month period.

Verification. We will verify Your identity by matching information You provide with information We already maintain (for example, by confirming control of the email address associated with Your account). We will use the information You provide in a request only to verify Your identity and respond.

Authorized agents. You may designate an authorized agent to submit a request on Your behalf. We may require the agent to provide signed written permission from You and may ask You to verify Your identity directly with Us, unless the agent holds a valid power of attorney under California Probate Code §§ 4121–4130.

Shine the Light (Cal. Civ. Code § 1798.83)

California residents may request information about Personal Information We disclosed to third parties for their direct marketing purposes in the preceding calendar year. We do not disclose Personal Information to third parties for their own direct marketing purposes.

Minors in California (Cal. Bus. & Prof. Code § 22581)

If You are under 18, reside in California, and have a registered account, You may request removal of content or information You have publicly posted on the Service by emailing Us. Removal does not ensure complete or comprehensive removal of the content or information.

13. CalOPPA & “Do Not Track” Disclosures

In accordance with the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §§ 22575–22579):

• This Privacy Policy is conspicuously posted and linked from the Service, and it identifies the categories of Personally Identifiable Information We collect (Section 3) and the categories of third parties with whom We may share it (Section 6).
• You may review and request changes to Your Personally Identifiable Information by emailing 6424775@gmail.com or through Your account settings, where available.
• We will notify You of material changes to this policy as described in Section 16, and this page shows its effective date.
• Users may visit the Service anonymously to the extent the Service’s functionality allows.

How We Respond to Do Not Track Signals

There is not yet a uniform industry standard for responding to DNT browser signals. We do not engage in cross-site tracking of users for advertising purposes, and We do not permit third parties to collect Personal Information about Your online activities over time and across different websites through our Service for that purpose. We treat Global Privacy Control (GPC) signals as a valid opt-out of sale or sharing as described in Section 12.

14. Children’s Privacy (COPPA)

The Service is not directed to children under the age of 13, and We do not knowingly collect Personal Information from children under 13, in compliance with the Children’s Online Privacy Protection Act (15 U.S.C. §§ 6501–6506) and the FTC’s COPPA Rule (16 C.F.R. Part 312).

The Service is also not intended for individuals under 16 in jurisdictions where a higher age of digital consent applies (for example, under Article 8 of the GDPR, where Member States set an age between 13 and 16). Where We rely on consent as a legal basis and Your jurisdiction requires parental consent, We may require a parent or guardian’s verifiable consent before collecting and using that information.

If We learn that We have collected Personal Information from a child under 13 without verifiable parental consent, We will promptly delete that information. If You are a parent or guardian and believe Your child has provided Us with Personal Information, please contact Us at 6424775@gmail.com. Parents and guardians may:

• review the Personal Information collected from their child;
• request that it be deleted; and
• refuse to permit further collection or use of their child’s information.

15. Links to Other Websites

The Service may contain links to websites not operated by Us. If You click a third-party link, You will be directed to that third party’s site. We strongly advise You to review the privacy policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above. For material changes, We will notify You by email and/or a prominent notice on the Service before the change takes effect, and, where required by law, obtain Your consent. We encourage You to review this Privacy Policy periodically.

17. Contact Us

If You have any questions about this Privacy Policy, or wish to exercise any of Your rights, You can contact Us:

• By email: 6424775@gmail.com

Please include enough detail for Us to understand and respond to Your request, and indicate the jurisdiction You reside in (e.g., California, EEA, UK) so We can apply the correct rights.