Privacy Policy

Last updated: September 2026

Zen in the Noise ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our evidence-based earnings intelligence service.

1. Who We Are

We are Zen in the Noise. If you have questions about how we handle your data, contact us at: master@zeninthenoise.com

2. Information We Collect

Account: your email address and authentication data (Google OAuth or Magic Link) to create and manage your account.
Billing: handled entirely by Creem (creem.io). We never see or store your card details.
Usage: basic analytics (pages visited, time spent, features used), pseudonymized where possible.
Feedback: the message you send us and the page URL.
Technical: IP address, browser, and device data via security logs.

3. How We Use Your Information — and Why (Legal Basis)

To provide the dashboard and briefings — performance of contract.
To manage your subscription, process payments, and send transactional emails (receipts, trial-end notices, and renewal reminders; renewal notices are sent by Creem) — performance of contract and legal obligation.
To improve the product and our models — legitimate interest, using aggregated or pseudonymized data. You may object at any time.
We do not send marketing emails.
To protect security and prevent abuse — legitimate interest.

4. AI Transparency

Verdicts and scores are produced by deterministic algorithms over historical market data. Narrative briefings may be drafted with the assistance of an external language model (DeepSeek). Briefings are generated from market and structural data only — no personal data is shared with the model — and may be reviewed by a human ("Machine-computed. Human-read.").

The Service does not carry out automated decision-making that produces legal or similarly significant effects about you; outputs are informational only.

5. Cookies & Advertising

We offer this Service to customers in Canada and the United States. We do not use a third-party consent platform; instead we apply the rules below automatically based on your location and your choices.

Strictly necessary: authentication and security (Supabase) and payment cookies (Creem). These are always set and are required for the Service to work.
Advertising measurement: the Meta Pixel (advertising measurement and attribution; sets the _fbp cookie) and server-side conversion tracking (Meta Conversions API).

United States and Canada (outside Quebec): US and Canadian law do not require consent before loading advertising cookies, so the Meta Pixel runs by default. If you are a California resident or protected by another US state privacy law, you may opt out of the "sharing" of your personal information for cross-context behavioral advertising at any time using the Your Privacy Choices link in the footer or by contacting us (Section 9). We honor the Global Privacy Control (GPC) browser signal as an opt-out.

Quebec, Canada: under Quebec's Act respecting the protection of personal information in the private sector (Law 25), we ask for your explicit consent before loading the Meta Pixel. On your first visit from Quebec you will see a short prompt asking you to allow or decline; you can change your mind at any time via Your Privacy Choices.

Other regions (including the EEA and the United Kingdom): the Service is not currently offered there, and we do not load advertising cookies for those visitors. If we expand to those regions, we will add an appropriate consent mechanism first.

You can also block or delete cookies in your browser settings at any time. Opting out of advertising measurement does not affect the core functionality of the dashboard.

6. Sharing

We share minimal data with trusted processors: Supabase (database and authentication), Creem (payments), Cloudflare (hosting and security), and Google (OAuth identity). We do not sell personal data. We may disclose data to authorities where legally required.

7. International Transfers

Some processors operate outside Canada and the United States. Where required by applicable law, we rely on appropriate safeguards (such as adequacy decisions, model contractual clauses, or equivalent mechanisms) for those transfers.

8. Retention

Account data: kept while your account is active and deleted within [30 days] of a verified deletion request.
Billing records: kept as long as tax law requires (typically 7–10 years).
Analytics: kept in aggregated form only.

9. Your Rights

United States (California and other states): residents may request access to, correction of, or deletion of their personal data, and may opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal data. To opt out, use the Your Privacy Choices link in the footer, enable the Global Privacy Control (GPC) signal in your browser, or email us. Under the California Online Privacy Protection Act (CalOPPA), this policy discloses how third parties track you across this site.

Canada: under PIPEDA (and, in Quebec, Law 25) you may access or correct your personal information and withdraw consent where it applies, including your advertising consent, at any time.

To exercise any of these rights, email us at master@zeninthenoise.com. We respond within 30 days. If you are not satisfied, you may complain to the applicable regulator (e.g., the Office of the Privacy Commissioner of Canada or the California Privacy Protection Agency).

10. Security

Data is encrypted in transit and access is restricted. No method of transmission or storage is 100% secure.

11. Children

The Service is not directed at anyone under 18.

12. Changes

Material changes will be announced on this page and, where significant, by email.

13. Contact

If you have any questions about this Privacy Policy, contact us at: master@zeninthenoise.com