Privacy Policy
Last updated: January 8, 2026
Summary: We collect only what's necessary to provide our service. We don't sell your data. We use industry-standard security. You can delete your data anytime.
1. Who We Are
Zoy ("we", "our", "us") is a B2B marketing automation platform operated by MB intelekto studija (company code: 307534458). Our platform helps businesses generate content, analyze SEO, and automate outreach.
Registered Address: Burbiskiu str., LT-02198 Vilnius, Lithuania
Website: getzoy.ai
Contact: hello@getzoy.ai
2. What Data We Collect
2.1 Account Information
When you register for Zoy, we collect:
- Email address — for authentication and communication
- Name — for personalization
- Company name — to configure your workspace
- Password — stored securely hashed (never in plain text)
2.2 Business Data You Provide
To deliver our service, you may provide:
- Website URL — for SEO analysis and content generation
- Customer/Prospect lists — for outreach campaigns
- Pain points and ICP data — to personalize content
- SMTP credentials — if you use your own email server
2.3 Connected Services
If you connect third-party services, we store:
- Google Analytics OAuth tokens — to analyze your website traffic
- Google Search Console tokens — to fetch SEO performance data
- Stripe customer ID — for billing (we don't store card numbers)
2.4 Usage Data
We automatically collect:
- Login timestamps and IP addresses
- Feature usage (e.g., blog posts generated, audits run)
- Email opens and clicks (for outreach tracking)
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain the service | Contract performance |
| Process payments | Contract performance |
| Send transactional emails | Contract performance |
| Improve our AI with anonymized patterns | Legitimate interest |
| Send product updates (optional) | Consent |
| Prevent fraud and abuse | Legitimate interest |
4. Industry Intelligence & Anonymized Learning
Zoy uses industry intelligence that improves marketing recommendations across all users.
What we aggregate: Anonymized patterns like "topic X performs well in industry Y" — never your actual content, customer names, or identifiable information.
- We identify patterns (e.g., "pain point themes that convert") — not your specific data
- Your company name, customer names, and proprietary content are never shared
- Learnings are aggregated at the industry/vertical level
- You benefit from collective insights while contributing to the community
If you prefer to opt out of industry intelligence contributions, contact us at hello@getzoy.ai.
6. Third-Party Services
We use the following third-party services to operate Zoy:
| Service | Purpose | Data Shared |
|---|---|---|
| Google Cloud | Infrastructure & AI | Content for AI processing |
| Stripe | Payments | Email, billing info |
| Amazon SES | Email delivery | Email addresses, content |
| Google Analytics | Website analytics (landing only) | Anonymized usage data |
All third-party providers are GDPR-compliant and bound by data processing agreements.
7. Data Retention
We retain your data as follows:
- Account data — Until you delete your account
- Generated content — Until you delete it or your account
- SEO audits — Last 5 retained; older audits archived for 90 days
- Outreach events — 90 days after campaign completion
- Prospect signals — 30 days
- Logs and analytics — 12 months
You can request data deletion at any time (see Your Rights).
8. Your Rights
Under GDPR and similar laws, you have the right to:
- Access — Request a copy of your data
- Rectification — Correct inaccurate data
- Erasure — Delete your account and data
- Portability — Export your data in a machine-readable format
- Object — Opt out of certain processing (e.g., industry intelligence)
- Withdraw consent — Where processing is based on consent
To exercise these rights, email hello@getzoy.ai. We respond within 30 days.
9. Security
We protect your data with:
- Encryption — TLS 1.3 for data in transit; AES-256 for data at rest
- Password hashing — bcrypt with salt
- Access controls — Role-based access; MFA available
- Tenant isolation — Your data is logically separated from other customers
- Regular audits — Periodic security reviews
If you discover a vulnerability, please report it to security@getzoy.ai.
10. Contact Us
If you have questions about this privacy policy or your data:
Email: hello@getzoy.ai
Website: getzoy.ai