Privacy Policy

1. Who we are

Zenndy (“Zenndy”, “we”, “us”) operates the zenndy.com platform: campaign builder, capture pages, lead inbox, analytics, public link-in-bio profiles and billing.

For privacy questions you can always write to privacy@zenndy.com.

2. Data we collect about account owners

• Account data: full name, email address, password hash, language and appearance preference.
• Content you create: campaign titles and descriptions, cover images, downloadable files, page sections, templates and theme settings, public profile handle, bio, avatar, banner and social links.
• Billing data: plan, subscription status and renewal dates. Card details are handled by our payment provider Polar — Zenndy never sees or stores your card number.
• Usage data: pages you visit inside the app, actions such as creating a campaign or exporting leads, plus technical logs (IP address, browser, timestamps) used for security and debugging.
• Support data: tickets, messages and attachments you send us, and messages sent through our contact form.

3. Data collected from your leads

When someone downloads one of your lead magnets, we collect the information your capture form asks for — typically name and email, plus any custom fields you add — together with metadata such as the date, the approximate country derived from the request, and the referring source (for example Instagram, Google or a direct visit).

For that data you are the controller and Zenndy is the processor: we store and process it on your behalf and under your instructions. Our Data Processing Addendum describes those terms. You are responsible for having a lawful basis to contact those people and for publishing your own privacy notice on your capture pages.

4. Why we use your data

• To provide the service: host your campaigns, serve your capture pages, deliver your files and store your leads.
• To operate billing, trials, plan limits and renewals.
• To send transactional emails (sign-up confirmation, password reset, subscription notices, and — if you enable it — the delivery email your leads receive with the file).
• To keep the platform secure, prevent abuse and troubleshoot problems.
• To improve Zenndy through aggregated, non-identifying product analytics.

5. Legal bases

We process account and content data to perform our contract with you, billing data to comply with legal obligations, security and product-improvement data under our legitimate interest, and any optional marketing emails with your consent, which you can withdraw at any time.

6. Sharing and subprocessors

We never sell personal data. We share it only with the providers that make Zenndy work:

• Supabase — database, authentication and file storage.
• Cloudflare — hosting, CDN and edge delivery of the app and public pages.
• Polar — subscription billing and payment processing.
• Our transactional email provider — delivery of account emails and, when enabled, lead file delivery.
• Integrations you connect yourself (webhooks, Zapier, Make, Slack, Telegram, email marketing tools) receive the lead data you choose to send them.

7. International transfers

Some of our providers process data outside the European Economic Area. In those cases transfers rely on the European Commission's Standard Contractual Clauses together with additional technical safeguards such as encryption in transit and at rest.

8. Retention

Account data is kept while your account is active. Leads, campaigns and uploaded files are kept until you delete them or delete your account. When you delete your account from Settings, your profile, campaigns, capture pages, leads, files and public profile are permanently removed; billing records are kept only as long as tax law requires. Backups are rotated within 30 days.

9. Your rights

You can access, correct, export or delete your data at any time from your dashboard, or by writing to privacy@zenndy.com. You also have the right to object to or restrict processing, to withdraw consent, and to lodge a complaint with your local data protection authority. If you are a lead who was captured through a Zenndy campaign, contact the creator who runs that campaign first — we will forward the request if you contact us instead.

10. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is restricted, database access is protected by row-level security so each account can only reach its own records, and files are served through signed, expiring URLs.

11. Children

Zenndy is not intended for anyone under 16. We do not knowingly create accounts for children.

12. Changes

If we make material changes to this policy we will notify you by email or in the app before they take effect.