Privacy Policy

Last updated: March 26, 2026

1. Introduction

Zlorex ("we," "our," or "us") operates the Zlorex platform at app.zlorex.com, an async standup and update tool for teams. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Zlorex, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

2. Information We Collect

2.1 Information you provide

Account information: name, email address, and organization name when you create an account.
Update responses: the answers you and your team members submit to update questions.
Thread messages: messages posted in discussion threads within your organization.
Uploaded files: files you attach to update responses or threads.
Billing information: payment details are collected and processed by our payment processor, Dodo Payments. We do not store your full credit card number.

2.2 Information collected automatically

Device and browser information (browser type, operating system).
IP address and approximate geographic location.
Usage data such as pages visited, features used, and timestamps.
Cookies and similar tracking technologies.

2.3 Information from third-party authentication

If you sign in using Google or Microsoft OAuth, we receive your name, email address, and profile picture from the identity provider. We do not receive your password.

3. How We Use Your Information

To provide, operate, and maintain the Zlorex service.
To send update reminders, notifications, and summary emails.
To generate AI-powered insights and summaries from your team's update responses using OpenAI. Only the content of update responses is sent to OpenAI for processing; no personal identifiers are included beyond what appears in the response text.
To process payments and manage subscriptions.
To respond to support requests and communicate with you about your account.
To detect, prevent, and address technical issues, fraud, or abuse.
To improve our service through aggregated, anonymized usage analytics.

4. Third-Party Services

We use the following third-party services to operate Zlorex. Each service processes data only as necessary to provide its function:

Resend — transactional email delivery (update reminders, notifications, account-related emails).
OpenAI — AI-powered insights and summaries generated from update responses.
Dodo Payments — payment processing and subscription billing.
Google & Microsoft OAuth — authentication and single sign-on.
Cloudflare R2 — secure file storage for uploaded attachments.

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

5. Data Retention

We retain your account data and update content for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Organization administrators can delete individual update responses and threads at any time.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel who need it to operate the service.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Correction: request that we correct inaccurate or incomplete data.
Deletion: request that we delete your personal data.
Portability: request a machine-readable copy of your data.
Objection: object to the processing of your personal data in certain circumstances.

To exercise any of these rights, contact us at help@zlorex.com. We will respond within 30 days.

8. Cookies

Zlorex uses essential cookies to maintain your session and authentication state. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect the functionality of the service.

9. Children's Privacy

Zlorex is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Zlorex after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

help@zlorex.com