Privacy Policy

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve the search engine and related features
• Account Management: To manage your account, process subscriptions, and provide customer support
• Security: To detect, prevent, and address abuse, fraud, and security issues
• Analytics: To understand how users interact with the Service and to improve user experience
• Communication: To send service-related notices, security alerts, and support messages
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service
• Rate Limiting: To enforce usage limits and prevent abuse of the Service

We process your data based on the following legal bases under GDPR: contract performance, legitimate interests, consent, and legal obligation.

Your data is stored on servers located within the European Union. We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure password hashing
• Regular security assessments and updates
• Access controls and authentication requirements for internal systems
• Regular backups with encryption

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We use cookies and similar tracking technologies to operate and improve the Service. Cookies are small data files placed on your device that help us remember your preferences and understand how you interact with our site.

For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

You can control cookies through your browser settings and through the cookie consent preferences on our site. Essential cookies required for basic site functionality cannot be disabled.

We may use the following third-party services that process personal data:

• ClickHouse Analytics: We use ClickHouse as our internal analytics database for storing and querying search index data. This is self-hosted within the EU.
• Google Analytics (planned): We may implement Google Analytics (GA4) for website traffic analysis. If implemented, you will be able to opt out via the cookie consent banner.
• Payment Processors: If you purchase a subscription, payment is processed by third-party payment providers. We do not store full payment card details on our servers.

Each third-party service provider has its own privacy policy governing its use of your data. We encourage you to review their policies.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Retained for the duration of your account plus 30 days after deletion request
• Search Query Logs: Retained for up to 12 months for analytics and service improvement
• API Usage Logs: Retained for up to 6 months for rate limiting and abuse prevention
• Server Logs: Retained for up to 90 days for security and debugging purposes

When data is no longer needed, it is securely deleted or anonymized.

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at privacy@zondex.io. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and you believe your child has provided us with personal data, please contact us at support@zondex.io. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information.

Our primary data storage and processing facilities are located within the European Union. If we need to transfer your data outside the EU/EEA, we will ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Your explicit consent where required

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: