Privacy Policy

This Privacy Policy explains what personal information ZOOGABOOG! collects when you use our platform, how we use it, who we share it with, and the rights you have over it. It works alongside our Cookie Policy and Terms of Service.

1. What we collect

From you, directly

• Account information: name, email, phone, business name, billing and shipping addresses you give us at sign-up or checkout.
• Credentials: your password is stored as a one-way hash (not even our own team can read it).
• Design content: logos, images, copy, files, and any other creative material you upload to customize products.
• Order details: what you ordered, when, and where it's going.
• Messages: chats, support tickets, and any correspondence you send us.
• Doc's notes: Doc, our on-site assistant, keeps short notes on what you tell him about your business (what it is, where it is, an upcoming event, how you like things to look) so he can pick up where you left off next time. He is told not to keep anything about health, money problems, family, religion, politics, age, immigration or legal matters. Notes for visitors without an account are tied to a random ID in a cookie (see our Cookie Policy) and are deleted after 90 days of no chats; notes for account holders stay with the account. To have notes removed, email us and we delete them.
• Your chat with Doc: the conversation itself is stored on our servers, and what you type is sent to OpenAI so Doc can write a reply. Chats from visitors without an account are deleted after 90 days; chats on an account are deleted after a year. Ask us and we delete yours sooner.
• LiveDesign sessions: if we record a session so you can rewatch it later, the recording lives with the meeting service we used for that call, and we keep a link to it on your session so you can find it.

Automatically, when you use the site

• Essential cookies and local storage: for sign-in and security. See the Cookie Policy for the full list of what's set today.
• Basic server logs: your IP address, browser type, the pages you request, and timestamps. We use these for security and to fix bugs.
• The bot check on our forms: every public form runs Cloudflare Turnstile, the little "confirm you are human" check. When you submit a form it receives your IP address and a one-time token for that submission. It is there to stop spam robots, not to track you.
• Free tool submissions: when you use the free Website Checkup or the QR code generator, we save the email address you give us, the website or destination you checked, the results, and how you arrived (the link that sent you, your IP address and your browser). We also create a sales lead so someone here can follow up with you. If you would rather we did not keep it, just ask and we delete it.

From third parties we work with

• Payment processor: Stripe sends us confirmation of transactions and fraud signals. We do not see or store your full card number. That lives only with the payment processor.
• Fulfillment partners: when an order is shipped, we receive tracking and delivery status from the carrier or partner who handled fulfillment.

2. What we don't collect (today)

ZOOGABOOG! does not currently use:

• Google Analytics or any third-party web-analytics tool. To be straight with you: the Google Analytics code is built into our pages, but it is switched off (no measurement ID is set), so nothing from Google Analytics loads today.
• Meta Pixel, Google Ads, LinkedIn Insight Tag, or any advertising/retargeting trackers
• Heatmaps, session replay, or behavior-recording tools
• Cross-site tracking of any kind

Before analytics is ever switched on, or any of the rest is added, we will update this page and our cookie banner will ask for your consent first. Nothing fires until you say yes.

3. How we use your information

• To run your account: keep you signed in, save your preferences, store your Brand Profile and design files.
• To take and fulfill orders: process payment, route your order to the right fulfillment partner, ship it where you told us.
• To communicate: order updates, support replies, occasional service notices (security, terms changes).
• To improve the platform: diagnose bugs, secure the site, plan what to build next.
• To meet legal obligations: tax reporting, fraud prevention, lawful requests from authorities.
• For marketing email, only if you ask us to. It is off unless you turn it on, you can turn it off again under Notifications in your account settings, and every marketing email carries an Unsubscribe address.

4. Who we share information with

We share only what's needed, with parties who help us deliver the service:

• Payment processor (Stripe), to take payment securely.
• Fulfillment partners and carriers: to print, produce, and ship the products you order. For a printed order, our print partner 4Over receives your design files, the product specs, and the delivery details: recipient name, business name, shipping address, phone number and email address. They are required to keep that information confidential and to use it only for your order.
• Hosting and infrastructure providers: to run the platform itself. They store data on our behalf and don't use it for anything else.
• Legal authorities: when required by law, subpoena, or to protect ZOOGABOOG!, our users, or the public.
• A successor entity: if ZOOGABOOG! is ever sold, merged, or restructured, your data may transfer to the new owner. You'll be told first, and any new owner has to honor this policy.

The companies we use today are Stripe (payments), OpenAI (the Doc assistant, which receives what you type in the chat and, when you are on the cart page, a summary of your cart, plus AI website proposals and campaign drafts), 4Over and other print vendors (production and shipping), Cloudflare's bot check on our forms (it receives your IP address and a one-time token when you submit a form), Geoapify (checking that a shipping address is a real address), Google (web fonts, sign-in if you choose it, the speed test behind the free Website Checkup through PageSpeed, and our public review listing through Places), and our email provider, which delivers the mail we send you.

5. How we protect your data

• In transit: all traffic between your browser and our servers is encrypted with HTTPS (TLS).
• At rest: your password is stored as a one-way hash, so nobody here can read it. We never hold your card number. Stripe keeps your payment details, and all we keep is their reference for the payment and the last four digits, so your receipts make sense.
• Access: only ZOOGABOOG! staff whose role needs your information for support or operations can open it, and what our staff change on your account is recorded.
• Payment data: we use a PCI-DSS compliant processor (Stripe). Your full card number never touches our servers.

No system is unhackable. If you ever suspect a problem with your account, email us at support@zoogaboog.com right away.

6. How long we keep your data

• Active accounts: as long as your account is open.
• Order and tax records: retained for as long as required by tax and accounting law (typically up to seven years in the US).
• Design files: kept while your account is active so you can reorder. You can delete individual files anytime from your dashboard.
• Support messages and communications: retained for a reasonable period to handle follow-up questions and disputes.
• Doc's notes: 90 days after your last chat if you never made an account; otherwise for as long as your account is open, or until you ask us to remove them.
• Doc chat history: chats from visitors without an account are deleted after 90 days. Chats on an account are deleted after a year. Ask us and we delete yours sooner.
• Closed accounts: you can close your account yourself from your account settings once nothing is still open on it (no active order, no unpaid invoice, no project in progress). If something is still open, contact us and we will help you wrap it up, then close it for you. Closing deactivates the account right away. We keep the record for a while afterward in case it was a mistake and you want it back, along with the order and tax records the law requires us to keep. Before anything is deleted, ask us and we will send you your logos, design files, and anything else you uploaded. It is yours. When you want the rest erased, email privacy@zoogaboog.com and we delete or anonymize the personal data we do not have to keep.

7. Your rights and choices

You're in charge of your data. You can:

• Access: ask for a copy of what we have on you.
• Correct: update wrong or out-of-date information directly in your account, or ask us to do it.
• Delete: close your account from your account settings once nothing is still open on it. Closing deactivates it right away. Email privacy@zoogaboog.com to have the rest erased, apart from records we have to keep by law.
• Port: there is no download button for this yet, so email privacy@zoogaboog.com and a person here will send you your files and your account details.
• Opt out of marketing email: marketing email is off unless you turn it on. You can turn it back off any time under Notifications in your account settings, and every marketing email we send carries an Unsubscribe address you can email.
• Manage cookies: use our consent banner (or click Manage cookies in the footer) at any time.

To exercise any of these rights, email privacy@zoogaboog.com. We'll respond within 30 days. We may need to verify your identity before sharing or deleting data.

8. Children's privacy

ZOOGABOOG! is built for businesses and adults. We don't knowingly collect personal information from children under 13. If you think a child gave us their data, email privacy@zoogaboog.com and we'll delete it.

9. California residents (CCPA / CPRA)

Under the California Consumer Privacy Act and the California Privacy Rights Act, California residents have specific rights:

• Right to know what categories of personal information we collect, why, where it came from, and who we share it with.
• Right to delete personal information we hold about you (subject to records we have to keep by law).
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing: we don't sell personal information, and we don't currently engage in "cross-context behavioral advertising" because we don't run analytics or ad cookies today (Google Analytics is built into our pages but switched off, and nothing from it loads). If that changes, we will update this page and you'll be able to opt out before any such cookies fire.
• Right to limit the use of sensitive personal information.
• Right to non-discrimination: we won't penalize you for exercising any of these rights.

To exercise any of these, email privacy@zoogaboog.com with "California Privacy Request" in the subject line. We'll verify your identity (or your authorized agent's) and respond within 45 days. In the last 12 months we collected the categories of information described in Section 1 above and shared them with the parties described in Section 4.

10. International users

ZOOGABOOG! is based in the United States and serves customers primarily in the US. If you access the platform from outside the US, your data will be transferred to and processed in the US, where privacy laws may differ from those of your country.

11. Changes to this policy

We may update this policy when our practices change or when the law requires it. For any material change, we'll update the Effective date at the top and let active account holders know by email or in-app notice. Continued use after a material change means you accept the updated policy.

12. Contact us

Questions, data requests, or concerns:

Your privacy is your privacy.

We treat your data the way we'd want ours treated. No tricks. No selling. No surveillance.