Privacy Policy

Who we are

This Privacy Policy explains how Zolyp ("we", "us") handles personal information when you use our website at https://www.zolyp.com/, the Zolyp web app, and the Zolyp mobile apps for iOS and Android (together, the "service"). It applies to visitors, trial users, and customers.

Zolyp is a tool for businesses. It is not directed to children, and you must be at least 16 years old to create an account.

Information you give us

Account details: your name, email address, and password (stored only as a one-way hash), or the name and email Google shares with us if you sign in with Google. We also store your time zone and your email preferences.

Business and brand details: your business name, website, industry, services, locations, audience, goals, tone of voice, topics to avoid, and any business contact details you add, such as a business email, phone number, or address.

Content: the photos, videos, logos, and documents you upload or take with your camera, the prompts and messages you send to our assistant, and the posts, captions, and campaigns you draft, edit, approve, or publish.

Connected social accounts: when you connect an account such as Instagram, Facebook, LinkedIn, X, TikTok, YouTube, Pinterest, Threads, or Google Business Profile, we receive the account name and the access needed to publish your approved posts, read their performance, and show and reply to comments and reviews.

Team and referrals: email addresses of teammates you invite, and, if you join our referral program, the bank details you give us for payouts. Bank account numbers are encrypted at rest.

Messages to us: feedback, content reports, and support requests you send from the app or by email.

Information collected automatically

Usage and diagnostics: which features you use, errors and crash diagnostics, and basic device and browser information, so we can keep the service working and improve it.

Logs: our servers record IP addresses and request details for security and abuse prevention. These logs are kept for a limited time (see Retention).

On the website we use cookies and similar technologies, including analytics (Google Analytics and PostHog) and error monitoring. See our Cookie Policy for details.

Permissions in the mobile apps

Camera: used only when you choose to take a photo for a post. Photos: when you add an image or video, the app uses your phone's system photo picker, so the app only receives the items you pick and never reads your whole gallery. Saving to Photos: used only when you choose to download a creative to your device.

The mobile apps do not collect your precise or approximate location, your contacts, or your advertising ID, do not contain advertising, and do not include third-party advertising or tracking SDKs. If notifications are offered, they are optional and you can turn them off in your device settings.

How we use your information

To provide the service: to research your brand, plan, write, design, schedule, and publish content on your behalf, to reply to comments and reviews you approve, and to show you how your content performed.

To operate and secure our systems, prevent fraud and abuse, enforce our terms, and provide support.

To process payments and referral payouts.

To communicate with you about your account, security, and billing, and, where you have opted in, about product news. You can opt out of marketing emails at any time.

To improve the service using aggregated usage data.

AI-generated content

Zolyp uses artificial intelligence to generate text, images, and video for your brand. To do this, the relevant parts of your brand details, content, and prompts are sent to the AI providers listed below, only to produce your results. We do not allow these providers to use your data to train their models where we can control this through our agreements and settings.

AI output can be inaccurate or inappropriate, so you review content before it is published. You can report any AI-generated content you find offensive or harmful from inside the app, and we review every report.

Your brand data is yours

The brand information you train is used only to serve your brand. It is never pooled into a shared model or used to generate content for anyone else.

Who we share information with

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share it only with service providers who process it on our behalf to run the service, or where required by law:

Hosting and storage: Railway (application servers and databases) and Cloudflare (file storage and content delivery).

AI providers: OpenAI, Moonshot AI, fal, and BytePlus, which generate text, images, and video from the inputs we send.

Publishing partners: Upload-Post (and, as a fallback, Ayrshare), which connect to your social accounts and publish the posts you approve. The social networks you connect receive the content you publish to them under their own privacy policies.

Payments: Polar, our merchant of record, which processes subscription payments and keeps billing records. We do not see or store your full card number.

Email: Google (Gmail) and Resend, which deliver account and notification emails.

Analytics and error monitoring: PostHog, Google Analytics, and Sentry.

Sign-in: Google, if you choose to sign in with Google. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition, in which case this policy will continue to apply.

Security

All data is encrypted in transit using HTTPS. Passwords are stored as one-way hashes, payout bank account numbers are encrypted at rest, and access to production systems is restricted. No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.

Retention

We keep your account and content for as long as your account is open. Server logs and diagnostic records are deleted automatically after 30 to 90 days.

When you delete your account, we delete your personal information and content from our live systems straight away. Encrypted backups are kept for up to 30 days and then overwritten. Billing records held by Polar, and records we must keep for tax, accounting, or legal reasons, are retained for as long as the law requires.

Deleting your account

You can delete your account at any time. In the mobile app, go to More, then Settings, then Profile, then Delete account. On the web, sign in and go to Settings, then Profile, then Delete account. You can also follow the steps at https://www.zolyp.com/delete-account, or email zolypofficial@gmail.com from your account's email address with the subject "Delete my account".

Deleting your account permanently removes your profile, your workspace and its brands, posts, media, and brand information, and disconnects your social accounts. Any active subscription is cancelled. If you share a workspace with another owner, that workspace stays and only your access is removed. Posts already published to social networks stay on those networks until you remove them there.

You can also disconnect any social account at any time from Connections without deleting your account.

Your rights

Depending on where you live, including under the GDPR, UK GDPR, and US state laws such as the CCPA, you may have the right to access, correct, export, or delete your information, to object to or restrict certain processing, and to withdraw consent. You can do most of this in the app. For anything else, contact us at the address below and we will respond within 30 days. You will not be treated differently for exercising these rights. You may also complain to your local data protection authority.

International transfers

Our service providers may process information in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

We may update this policy from time to time. We will change the date at the top and, for significant changes, tell you by email or in the app before they take effect.

Contact

Questions about this policy, or requests about your data, can be sent to zolypofficial@gmail.com.