Privacy Policy

Zibit ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and use our platform.

Last updated: August 11, 2026

1. Information We Collect

We may collect the following types of information:

a. Personal Information

When you interact with Zibit, we may collect:

• Name
• Email address
• Account credentials
• Billing information (if applicable)
• Any information you voluntarily provide

b. Usage Data

We automatically collect certain information about how you use our platform:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring URLs

c. Content You Create

Zibit is a platform for creating digital and interactive experiences. We may collect and store:

• Projects, designs, or content you create
• Uploaded files, assets, or media
• Prompts or inputs used with AI features

2. How We Use Your Information

We use your information to:

• Provide and operate the Zibit platform
• Improve performance, features, and user experience
• Personalize content and recommendations
• Enable AI-powered features and outputs
• Communicate with you (updates, support, product info)
• Process payments (if applicable)
• Ensure security and prevent fraud

3. AI and Generated Content

Zibit may use artificial intelligence to assist in generating content or functionality.

Inputs you provide (e.g., prompts, content) may be processed to generate outputs.

We may use anonymized or aggregated data to improve our AI systems.

We do not use your private content to train models in a way that identifies you personally without your consent.

4. Sharing Your Information

We do not sell your personal information.

We may share information with:

• Service providers (hosting, analytics, payment processing, email delivery)
• Legal authorities if required by law
• Business transfers (e.g., merger or acquisition)

All third parties are required to handle your data securely under contractual obligations (Data Processing Agreements, or DPAs).

a. Sub-processors

We engage the following trusted third parties to process personal information on our behalf, only to the extent necessary to provide the Zibit platform:

• Twilio Inc. (SendGrid)— transactional and preference-based email delivery. DPA.
• Paddle.com Market Ltd.— Merchant of Record for subscription billing, invoicing, and payment processing. Paddle is a separate controller for tax and payment data. DPA.
• DigitalOcean, LLC— infrastructure hosting (application servers, managed databases, object storage). DPA.
• Google LLC— authentication ("Sign in with Google") and font delivery via Google Fonts. DPA.
• Functional Software, Inc. (Sentry)— error and crash reporting. When the platform encounters an error we send diagnostic details (the error itself, the page or API route involved, browser or device type, and the affected account or device identifier) so we can diagnose and fix it. We do not send authentication cookies, access tokens, or payment details, and we do not record your screen or session. DPA.
• Better Stack, Inc.— uptime monitoring, our public status page, and application log storage. Logs may include request metadata such as timestamps, URLs, response codes, and account or device identifiers. DPA.

We maintain an up-to-date list of sub-processors. If you are an enterprise customer or a data subject under GDPR, you may request our current sub-processor list by emailing support@zibit.app.

b. Lawful Basis (GDPR Article 6)

Where GDPR applies, we process personal information on the following lawful bases:

• Contract performance (Art. 6(1)(b))— to provide the Zibit platform you signed up for, including sending required transactional emails (account verification, password resets, security alerts, billing notices).
• Consent (Art. 6(1)(a))— for any marketing or product-update emails. Consent is collected at signup via an explicit, unchecked opt-in checkbox and may be withdrawn at any time via your account settings or any email’s unsubscribe link.
• Legitimate interests (Art. 6(1)(f))— to secure our platform, prevent fraud, and improve our services.
• Legal obligation (Art. 6(1)(c))— to comply with tax, accounting, and other applicable law.

You can withdraw consent for marketing email at any time by visiting the email preferences page in your Zibit account, or by clicking the unsubscribe link in any eligible email. Withdrawal does not affect the lawfulness of processing based on consent before the withdrawal.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in
• Understand usage patterns
• Improve site performance

You can control cookie preferences through your browser settings.

6. Data Retention

We retain your information:

• As long as your account is active
• As needed to provide services
• To comply with legal obligations

You may request deletion of your data at any time (see Section 9).

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption where appropriate
• Secure servers and infrastructure
• Access controls

However, no system is 100% secure.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Object to or restrict processing
• Export your data

To exercise these rights, contact us at support@zibit.app. We will respond within 30 days (or as required by applicable law). If you are in the EU or UK and believe we have not handled your request appropriately, you have the right to lodge a complaint with your local data protection authority.

9. Account Deletion

You may request to delete your account and associated data by contacting us. Upon deletion:

• Your personal data will be removed or anonymized
• Some data may be retained for legal or operational purposes

10. Children's Privacy

Zibit is not intended for individuals under 13 (or applicable age in your jurisdiction). We do not knowingly collect data from children.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for their privacy practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at: