Privacy Policy
Last updated: July 14, 2026
1. Overview
This Privacy Policy explains how Zentrix ("Zentrix," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit gozentrix.com or use our platform and related services (collectively, the "Services"). Zentrix is an AI store builder that helps you generate and operate online storefronts.
By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Services. This document describes our practices for both visitors to our marketing site and account holders on the platform.
2. Information We Collect
Information you provide directly. When you create an account, join our waitlist, contact us, or use Zentrix, you may provide your name, email address, business name, billing information, and any other details you choose to submit.
Business content you generate. When you use Zentrix to generate store names, taglines, brand voice, product descriptions, documents, logos, or storefronts, we store the prompts you submit and the content produced so we can deliver, save, and improve the Services.
Information collected automatically. When you use the Services, we automatically collect technical data including your IP address, browser type, operating system, referring URLs, device identifiers, pages visited, features used, and timestamps of interactions. This is collected via cookies and similar technologies (see Section 9).
Information from third parties. If you connect a third-party service (such as a social account or payment processor), we may receive information from that service as permitted by your settings with it.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and deliver the Services you request.
- Generate the AI content you ask for and personalize recommendations.
- Process transactions and send billing-related communications.
- Send technical notices, security alerts, and administrative messages.
- Respond to your support inquiries and resolve disputes.
- Analyze usage trends to maintain, improve, and secure the platform.
- Send product updates and marketing communications where you have consented or as permitted by law.
- Detect and prevent fraud and other unlawful activity, and comply with legal obligations.
We do not sell your personal information to third parties.
4. Legal Bases for Processing (GDPR)
If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases set out in Article 6 of the GDPR:
- Contract — to provide the Services you request and administer your account.
- Legitimate interests — to secure, maintain, and improve the platform, prevent fraud, and understand how the Services are used, balanced against your rights.
- Consent — for optional cookies, analytics, and marketing communications; you may withdraw consent at any time.
- Legal obligation — to comply with tax, accounting, and other legal requirements.
5. AI & Your Data
Zentrix is an AI product, so how we handle the prompts you submit and the content the AI generates is central to your privacy.
Your prompts and generated content are yours. The prompts you enter and the business names, copy, logos, and other outputs you generate are used to deliver the Services to you, saved to your account, and used in aggregate and de-identified form to monitor and improve the quality of the platform.
We do not sell your prompts or generated content, and we do not use them to train our own foundation models. To produce your content we send your prompts to third-party AI providers (see Section 6). We work to use providers on terms that do not permit your inputs and outputs to be used to train their general-purpose models. Their handling of that data is also governed by their own privacy terms.
Opt-out. If you would prefer that we not use your prompts or generated content to improve the Services, or if you want them deleted, email us at privacy@gozentrix.com. Note that some processing is required simply to generate the output you request and cannot be switched off without disabling the feature.
6. Sub-processors & Third-Party Services
We share data with trusted vendors ("sub-processors") who help us operate the Services. They are contractually obligated to use your data only to perform services on our behalf. The categories of sub-processors we rely on are:
| Category | Providers | Purpose |
|---|---|---|
| Payments | Stripe | Subscription billing and payment processing (PCI-DSS compliant). We never store raw card numbers. |
| Hosting & infrastructure | Vercel, Supabase | Application hosting, database, and storage of your account and generated content. Hosted in the United States. |
| Analytics | PostHog, Vercel Analytics, Google Analytics | Product and traffic analytics to understand usage and improve the platform. |
| Transactional & marketing email provider | Account, billing, and (with consent) product and marketing emails. | |
| AI / LLM provider | Anthropic, Recraft AI | Generating business names, copy, brand content, and logo images from the prompts you submit. |
When you interact with a third-party service through Zentrix, your data may also be subject to that provider's own privacy policy. We share only the minimum data necessary for these integrations to function, and we are not responsible for the independent practices of third parties. This list may change as our providers evolve; we will keep it current here.
7. How We Share Information
We do not sell, trade, or rent your personal information. We share it only in these limited circumstances:
- Service providers — the sub-processors described in Section 6, under contract and solely to operate the Services.
- Legal requirements — where required by law, court order, or governmental authority, or to protect the rights, property, or safety of Zentrix, our users, or the public.
- Business transfers — in a merger, acquisition, or sale of assets, your information may be transferred; we will notify you before your data becomes subject to a different privacy policy.
8. Data Retention
We retain your personal data only for as long as necessary to provide the Services and for the legitimate and legal purposes described in this policy.
- Account and generated content — kept for the life of your account.
- Billing and transaction records — retained as required by tax and accounting law (typically up to 7 years).
- Analytics and log data — retained in identifiable form for a limited period, then aggregated or deleted.
When you delete your account, or on a verified deletion request, we delete or de-identify your personal data within a reasonable period, except where we are legally required to retain it. To request deletion, contact privacy@gozentrix.com.
10. Data Security
Your data is stored on secure cloud infrastructure hosted in the United States. We implement industry-standard technical and organizational measures — including encryption in transit (TLS) and at rest, access controls, and regular security reviews — to protect against unauthorized access, alteration, disclosure, or destruction.
All payments are processed through PCI-DSS-compliant third-party payment processors, and Zentrix does not store raw payment card numbers on our servers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. Use a strong, unique password and notify us immediately if you suspect unauthorized access. If we learn of a breach affecting your data, we will notify you as required by applicable law.
11. International Data Transfers
Zentrix is operated from, and stores data in, the United States. If you access the Services from the EEA, the United Kingdom, or elsewhere outside the US, your information will be transferred to and processed in the United States and other countries where our sub-processors operate.
Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum. You may request a copy of the relevant safeguards by contacting privacy@gozentrix.com.
12. Your Privacy Rights (GDPR/UK)
Depending on where you live, you may have the following rights over your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Deletion — request erasure of your personal data, subject to legal retention obligations.
- Portability — request your data in a machine-readable format.
- Objection / Restriction — object to or restrict certain processing, including direct marketing.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, submit a data subject access request (DSAR) to privacy@gozentrix.com. We will respond to verifiable requests within 30 days (extendable where permitted by law) and may need to verify your identity first. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
13. Your California Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect, to access and delete it, to correct inaccurate information, and to be free from discrimination for exercising your rights.
Do Not Sell or Share My Personal Information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. Because we do not sell or share in this sense, there is no sale to opt out of; if this ever changes, we will update this policy and provide a clear opt-out mechanism.
The categories of personal information we collect and disclose to sub-processors are described in Sections 2 and 6. To exercise your California rights, contact privacy@gozentrix.com. You may use an authorized agent, and we will not discriminate against you for exercising any right.
14. Children's Privacy
The Zentrix platform is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If you believe a child under 18 has provided us with personal information, contact privacy@gozentrix.com and we will take steps to delete it. We encourage parents and guardians to monitor their children's internet usage.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will post the updated policy on this page, update the "Last updated" date above, and — where appropriate — notify you by email or a prominent notice on the platform. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team at privacy@gozentrix.com. Please include "Privacy Request" in your subject line for formal data subject requests so we can route your inquiry appropriately.
This policy describes Zentrix's current data practices and is provided for transparency; it is not legal advice.
Privacy Contact
For privacy-related requests or questions, please contact us at: privacy@gozentrix.com