Privacy Policy

1. Introduction

Zerocost ("Zerocost," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, SDK, and services.

2. Information We Collect

Account Information: When you register, we collect your name, email address, company name, and payment information.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, and timestamps.

SDK Data: Our SDK collects usage data from end-user applications. Conversation and interaction text is run through automated pattern-based scrubbing, described in Section 4, before it leaves the end user's device, and again on our servers as a second check.

Device Information: We collect a coarse browser/OS category (e.g. "Chrome/Windows," not the full browser version string) for analytics, and a salted, one-way hash of IP address for fraud prevention and per-viewer ad frequency limits. We do not store the raw IP address.

3. How We Use Your Information

• To provide, maintain, and improve our services
• To process transactions and send related information
• To match contextual advertisements to application content
• To aggregate and anonymize usage data for our Data Marketplace
• To detect, prevent, and address technical issues and fraud
• To communicate with you about updates, security alerts, and support

4. Data Anonymization

Conversation and interaction text is scrubbed for common categories of personal information — email addresses, phone numbers, government ID and card numbers, API keys and tokens, IP addresses appearing in text, street addresses, dates of birth, passport numbers, and self-introduced names (e.g. "my name is...," a signed sign-off) — using pattern matching, applied client-side by our SDK and independently re-applied on our servers as a check on the first pass.

This is automated pattern matching, not human review, and it works by recognizing common shapes and phrasings rather than understanding meaning — it will not catch every way personal information can appear in free text, and we do not claim it does. We do not sell individual conversation records; partners who purchase data through our marketplace receive datasets built from scrubbed content.

We do not currently apply differential privacy or full named-entity recognition to this data, and do not claim to.

5. Data Sharing

We do not sell personal information. We may share anonymized, aggregated data through our Data Marketplace. We may share information with:

• Service Providers: Third parties who perform services on our behalf (payment processing, hosting, analytics)
• Advertising Partners: Contextual ad matching data (no PII)
• Legal Requirements: When required by law, regulation, or legal process

6. Data Retention & Deletion

We retain account information for as long as your account is active.

Consent records: Your consent choices are tied to an identifier for your device or browser so we can honor them — that record can be located and deleted on request through our contact form. You can also revoke your consent at any time, which immediately stops any future data collection from your sessions.

Conversation and usage data: This data is scrubbed of the personal information described in Section 4 before storage. Once scrubbed and aggregated into datasets, an individual record can no longer be reliably traced back to a specific person to be isolated and removed. Revoking consent is how you stop future collection; it does not retroactively remove data already scrubbed and stored.

7. Your Rights

Depending on your location, you may have the following rights:

• Access or correct your account information
• Opt out of data collection at any time — revoke consent in any app using Zerocost and collection stops immediately
• Request deletion of your account and any identifiable account data, including your consent record
• Lodge a complaint with a supervisory authority

Note: because conversation and usage data collected through our SDK is scrubbed and aggregated before it is used in datasets, we cannot reliably isolate or delete one individual's contribution from an already-aggregated dataset. Opting out stops all future collection immediately, and your consent record itself can still be deleted on request.

8. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), and regular security audits.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers outside the EEA.

10. Contact Us

For privacy-related inquiries, please reach out through our contact form.