Privacy Policy
What we collect and how we use it.
Last updated: July 27, 2026
Notice: this document is not finished
The contracting party's details have not been filled in yet, so the fields marked below are placeholders, not real values. Until they are completed, do not rely on this document; write to support@zugo.dev and we will tell you who you are contracting with. Outstanding fields: entity, companyNumber, address, dmcaAgent, dmcaAddress, dmcaPhone, dmcaDirectory.
Overview
This Privacy Policy explains what we collect when you use Zugo, and how we use and share it. We aim to collect only what we need to run the Service.
1. Who we are
The controller of your personal data is [TO BE COMPLETED: registered company name], company number [TO BE COMPLETED: company registration number], registered at [TO BE COMPLETED: registered postal address]. For any privacy question or request, write to support@zugo.dev.
2. What we collect
Account data: your email address and authentication data, managed through Supabase Auth. If you sign in with Google, we receive your name, email address, and profile picture from Google to create and secure your account, consistent with Google's API Services User Data Policy. Content: the prompts you submit and the builds you generate. Payment data: when you buy credits, payment is processed by Stripe; we receive confirmation and limited details but do not store your full card number. Usage data: logs, credit balances and transactions, and basic technical information. Abuse-prevention signals: to stop one person farming free credits from many accounts, we derive a salted, one-way hash of your IP address and of a lightweight device fingerprint at the moment you claim free credits. We store only these hashes, never your raw IP or fingerprint, and use them solely for fraud prevention, not to track you across other sites.
3. How we use it
To provide and operate the Service; to process payments; to grant and meter credits and prevent abuse; to provide support; to maintain security; and to comply with legal obligations.
4. Who we share it with
We use service providers ("processors") who handle data on our behalf: Supabase (database and authentication), Stripe (payments), AI providers (to generate your builds from your prompts), and Vercel (hosting). We do not sell your personal data. We may disclose data if required by law or to protect our rights and users.
5. Pages published through Zugo
A page you publish is served from our infrastructure, so we can count views on it for you. That view counter records the page path, the host name of the referring site (never the full URL or its query string), and a coarse device class (phone, tablet or desktop) read from the browser's user-agent. It sets no cookie, stores no raw IP address, and is not used to build a profile of any visitor or to follow them to other sites. It is on by default and a project owner can have it turned off for a project by asking us at support@zugo.dev. If you publish a page, you are the controller of your own visitors' data and it is your responsibility to give them whatever notice your jurisdiction requires.
6. Cookies & local storage
We use cookies and browser local storage for essential functions such as keeping you signed in and remembering preferences (theme, language). We do not use third-party advertising trackers. See our Cookie Policy for the full list.
7. Retention
We keep your data while your account is active and as needed to provide the Service, comply with law, and resolve disputes. You can ask us to delete your account and associated personal data.
8. Security
We use technical and organisational measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we work to keep your data safe.
9. Your rights
Depending on where you live (including under the GDPR and CCPA), you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these, contact us at support@zugo.dev.
10. International transfers
We and our processors may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers.
11. Children
The Service is not directed to children under 13, and we do not knowingly collect their data.
12. Changes & contact
We may update this policy and will revise the "last updated" date. Questions or requests: support@zugo.dev, or by post to [TO BE COMPLETED: registered company name], [TO BE COMPLETED: registered postal address].
Language
This document is published in English and in Russian. The English version is the controlling version: if the two differ in meaning, the English text governs. The Russian translation is provided so you can read what you are agreeing to, and we will correct any translation error you report to support@zugo.dev.