Privacy Policy

Privacy Policy for Zen Digital main website and Adforge (coming soon)

Last Updated: January 27, 2025

Data Controller:

Zen Digital

Amsterdam, Netherlands

Email: privacy@zendigital.nl

Main website: https://zendigital.nl

Adforge App: https://adforge.zendigital.nl (coming soon)

1. Introduction

Welcome to Zen Digital and Adforge. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered creative automation platform.

This policy applies to all information collected through our website (https://zendigital.nl and https://adforge.zendigital.nl), mobile application, and any related services, sales, marketing, or events (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

- Name and email address

- Company/organization name

- Business registration details (KVK number for Dutch businesses)

- Billing address and payment information (processed securely through Stripe)

- Phone number (optional)

Business Information:

- Industry sector and business type

- Target audience demographics

- Brand guidelines and creative preferences

- Campaign objectives and KPIs

Content and Creative Assets:

- Uploaded images, videos, and brand assets

- Generated creative content

- Prompts and creative briefs

- Templates and saved preferences

2.2 Information Collected Automatically

Usage Data:

- IP address and device information

- Browser type and operating system

- Pages visited and features used

- Generation history and API usage

- Performance metrics and error logs

Analytics Data:

- Session duration and frequency

- Feature adoption and usage patterns

- Credit consumption and generation success rates

2.3 Information from Third-Party Services

Meta (Facebook) Integration:

- If you connect your Meta account, we access:

- Ad account information (with your permission)

- Ad performance metrics (impressions, clicks, spend)

- Page information for authorized pages

- Public ad library data for competitor analysis

- We only request permissions necessary for the features you use

- You can revoke access at any time through Meta's settings

Google Services:

- Google account email and profile (if using Google Sign-In)

- Google Drive files you explicitly choose to import

- Access to folders you authorize for export

- We use OAuth 2.0 and only access what you explicitly permit

Payment Processing (Stripe):

- We do not store credit card details

- Stripe handles all payment processing securely

- We only receive transaction confirmations and subscription status

3. How We Use Your Information

We use your information to:

3.1 Provide and Maintain Services

- Create and manage your account

- Process your creative generation requests

- Manage credits and billing

- Provide customer support

- Send service-related communications

3.2 Improve and Develop Services

- Analyze usage patterns to improve features

- Develop new capabilities and integrations

- Fix bugs and enhance performance

- Train and improve our AI models (using aggregated, anonymized data only)

3.3 Marketing and Communications

- Send promotional emails (with your consent)

- Announce new features and updates

- Share best practices and tutorials

- You can opt-out at any time

3.4 Legal and Security

- Comply with legal obligations

- Enforce our Terms of Service

- Detect and prevent fraud

- Protect rights, property, and safety

4. Data Sharing and Disclosure

We do not sell your personal information. We share your data only in these circumstances

4.1 Service Providers

We share data with third-party services that help us operate:

- Supabase: Database and authentication services

- Stripe: Payment processing

- Google Gemini: Prompt enhancement (content only, no personal data) and generative media

- RunwayML: Video generation (when implemented)

- Vercel: Hosting and deployment

- Sentry: Error tracking and performance monitoring

4.2 Business Transfers

If we merge with or are acquired by another company, your information may be transferred as part of that transaction.

4.3 Legal Requirements

We may disclose information if required by law or in response to valid legal processes.

4.4 With Your Consent

We may share information for other purposes with your explicit consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

- Encryption in transit (HTTPS/TLS)

- Encryption at rest for sensitive data

- Row-level security in our database

- Regular security audits and updates

- Access controls and authentication

- Regular backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as necessary to provide services and comply with legal obligations:

- Account data: Until account deletion

- Generated content: 90 days after generation (unless saved to your library)

- Usage logs: 12 months

- Billing records: 7 years (legal requirement)

- Marketing data: Until you unsubscribe

You can request deletion of your data at any time (see Section 8).

7. International Data Transfers

We are based in the Netherlands and primarily serve the EU market. Your data is stored on servers within the European Union.

If we transfer data outside the EU (for example, to use US-based API services), we ensure appropriate safeguards:

- Standard Contractual Clauses (SCCs)

- Adequacy decisions by the European Commission

- Your explicit consent for specific transfers|

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

8.1 Access

Request a copy of your personal data we hold.

8.2 Rectification

Correct inaccurate or incomplete data.

8.3 Erasure ("Right to be Forgotten")

Request deletion of your personal data, subject to legal obligations.

8.4 Restriction

Request limited processing of your data.

8.5 Portability

Receive your data in a machine-readable format.

8.6 Objection

Object to processing based on legitimate interests or direct marketing.

8.7 Automated Decision-Making

Not be subject to decisions based solely on automated processing.

To exercise these rights, contact us at privacy@zendigital.nl. We will respond within 30 days.

9. Children's Privacy

Our Services are not intended for children under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

10. Cookies and Tracking

We use cookies and similar technologies to:

- Maintain your session

- Remember your preferences

- Analyze usage patterns

- Improve performance

Essential Cookies: Required for the platform to function.

Analytics Cookies: Help us understand how you use Adforge.

Marketing Cookies: Used to measure advertising effectiveness (with consent).

You can control cookies through your browser settings. Disabling cookies may affect functionality.

11. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

- Right to know what personal information we collect

- Right to delete personal information

- Right to opt-out of sale (we do not sell personal data)

- Right to non-discrimination

To exercise these rights, contact nick@zendigital.nl.

13. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

- Posting the new policy on this page

- Updating the "Last Updated" date

- Sending an email notification (for significant changes)

Your continued use of our Services after changes constitutes acceptance.

14. Data Protection Officer

While not legally required to have a DPO, we have designated a privacy contact (founder):

Email: nick@zendigital.nl

Address: Zen Digital, Noorddijk 21, 1521PC, Wormerveer, Netherlands

15. Complaints

If you have concerns about our privacy practices:

1. Contact us at nick@zendigital.nl

2. If unresolved, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl/

16. Contact Information

For privacy-related questions or to exercise your rights:

Email: nick@zendigital.nl

Website: https://zendigital.nl

Platform: https://adforge.zendigital.nl

17. Specific Service Integrations

Meta (Facebook) Data Usage

When you connect your Meta account:

- We access only the permissions you grant

- Data is used solely for the features you've enabled

- We don't store Meta passwords

- You can revoke access anytime at: https://www.facebook.com/settings?tab=applications

- We comply with Meta's Platform Terms and Developer Policies

Google Integration

When you connect Google services:

- We use OAuth 2.0 for secure authentication

- We access only the scopes you authorize

- Drive access is limited to files/folders you specify

- You can revoke access at: https://myaccount.google.com/permissions

- We comply with Google API Services User Data Policy

AI Service Usage

When using AI features:

- Prompts and generated content may be processed by third-party AI services

- We don't share personal information with AI providers

- Generated content belongs to you (subject to our Terms of Service)

- We may use aggregated, anonymized data to improve our services

18. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on:

- Contract: To provide services you've requested

- Consent: For marketing communications and optional features

- Legitimate Interests: For business operations, security, and improvements

- Legal Obligations: To comply with applicable laws

---

Effective Date: January 1, 2025

This privacy policy is provided in English. In case of any discrepancies between translations, the English version shall prevail.