Privacy Policy

Last updated: August 2026

Zen in the Noise ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our evidence-based earnings intelligence service.

1. Who We Are

The data controller is [Legal Entity Name], [Address], [Country].

[EU/UK Representative (Art. 27 GDPR): Name, Address — if applicable.]

Contact: master@zeninthenoise.com

2. Information We Collect

Account: your email address and authentication data (Google OAuth or Magic Link) to create and manage your account.
Billing: handled entirely by Creem (creem.io). We never see or store your card details.
Usage: basic analytics (pages visited, time spent, features used), pseudonymized where possible.
Feedback: the message you send us and the page URL.
Technical: IP address, browser, and device data via security logs.

3. How We Use Your Information — and Why (Legal Basis)

To provide the dashboard and briefings — performance of contract.
To manage your subscription, process payments, and send transactional emails (receipts, trial-end notices, and renewal reminders; renewal notices are sent by Creem) — performance of contract and legal obligation.
To improve the product and our models — legitimate interest, using aggregated or pseudonymized data. You may object at any time.
We do not send marketing emails.
To protect security and prevent abuse — legitimate interest.

4. AI Transparency

Verdicts and scores are produced by deterministic algorithms over historical market data. Narrative briefings may be drafted with the assistance of a language model (DeepSeek) and may be reviewed by a human ("Machine-computed. Human-read.").

The Service does not carry out automated decision-making that produces legal or similarly significant effects about you; outputs are informational only.

5. Cookies & Consent

We use Cookiebot as our consent management platform. On your first visit, a banner lets you choose which cookies to allow:

Strictly necessary: authentication and security (Supabase). These are always set.
Marketing: Meta Pixel (advertising measurement and attribution; sets the _fbp cookie). Loaded only after you consent.

You can change your choice at any time via the banner or the cookie declaration below. We never set marketing or tracking cookies before you consent. Server-side conversion tracking (Meta Conversions API) also respects your consent choice: conversion events are only sent for advertising purposes when you have consented, or when you are outside the EEA/UK.

6. Sharing

We share minimal data with trusted processors: Supabase (database and authentication), Creem (payments), Cloudflare (hosting and security), and Google (OAuth identity). We do not sell personal data. We may disclose data to authorities where legally required.

7. International Transfers

Some processors operate outside the EEA/UK. Where required, transfers rely on adequacy decisions or EU/UK Standard Contractual Clauses.

8. Retention

Account data: kept while your account is active and deleted within [30 days] of a verified deletion request.
Billing records: kept as long as tax law requires (typically 7–10 years).
Analytics: kept in aggregated form only.

9. Your Rights (EEA & UK)

You may access, correct, delete, restrict, or export your personal data, object to processing, and withdraw consent at any time. Contact us to exercise any right; we respond within one month. You also have the right to complain to your local supervisory authority (e.g., the ICO in the UK).

10. Security

Data is encrypted in transit and access is restricted. No method of transmission or storage is 100% secure.

11. Children

The Service is not directed at anyone under 18.

12. Changes

Material changes will be announced on this page and, where significant, by email.

13. Contact

If you have any questions about this Privacy Policy, contact us at: master@zeninthenoise.com