Privacy Policy

Last updated: 28 July 2026. This document is published in English only. The English text is the one that applies.

Who is responsible

Zephyro is operated by Vladimir Nizovtsev, an individual based in Dubai, United Arab Emirates, at zephyro.io andapp.zephyro.io. That person is the data controller for the purposes of this document.

For anything here, including any request about your data, write tovladimirnizov@gmail.com. A postal address is available on request.

What we collect

Three kinds of data, and nothing else:

• Your account. Email address, name, profile picture and preferred language. These come from the sign-in provider when you register, including when you sign in with Google or GitHub.
• What you put into the service. Workspaces, items and their fields, comments, files you upload, and the record of who changed what and when. We treat this as yours; we do not read it except when you ask us to help with a specific problem.
• Technical records. Ordinary server logs produced by serving requests — IP address, browser identification, time and path.

We do not collect payment details, because nothing is charged.

Which advert brought you here

If you arrive from an advertisement or a campaign link, the address carries parameters naming it. Only if you agree, we keep those parameters in your browser's local storage for thirty days, and add them to the link when you go from this site to the application — so we can tell which advertising is worth paying for.

It is a campaign name, not you: nothing there identifies a person, and it is never sold or shared. If you decline, nothing is stored and we simply do not learn where the visit came from. You can clear it at any time by clearing site data for this domain.

We run no advertising or analytics services on this website today — no Google Analytics, no advertising pixels, nothing loaded from anyone else. If that changes, this document will say so before it happens, and you will be asked first.

Why we may use it

• To provide the service you signed up for. This is the bulk of it.
• To keep it working and secure — diagnosing failures, preventing abuse. This is our legitimate interest, weighed against your privacy.
• To reply to you when you write to us.

Who else receives it

We use the following providers to run the service. Each receives only what it needs, and none of them may use your data for their own purposes:

• Clerk — sign-in and account management. Receives your account data.
• Railway — hosting, database and cache. Holds everything the service stores. Currently served from the United States.
• Cloudinary — storage for files and images you upload.
• Finnhub — market prices, where the product shows them. It receives no personal data.

Neither this website nor the application loads anything from a third party in your browser. Typefaces are served from our own servers, so no request leaves for anyone else's before you have agreed to anything.

We do not sell your data, and we do not share it for advertising. We will disclose it if the law compels us to, and we will tell you unless we are forbidden from doing so.

Where it goes

The providers above operate in the United States, so data about you is transferred there. Those transfers rely on the standard contractual clauses in our agreements with them.

How long we keep it

For as long as your account exists. If you ask us to delete your account, we delete your personal data and the content you own, and it disappears from backups within thirty days. Server logs are kept for a short operational period and then discarded.

Your rights

You may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask for it in a portable form, or object to a particular use. Write tovladimirnizov@gmail.com and we will answer within thirty days. If you are in the European Economic Area or the United Kingdom and you are not satisfied with our answer, you may complain to your national data protection authority.

Cookies and local storage

This website sets no cookies at all. It uses your browser's local storage for two things, and both stay on your device: your answer to the consent prompt, and — only if that answer was yes — the campaign parameters described above.

The application sets cookies that are strictly necessary to keep you signed in; without them you cannot use it. We use no analytics or advertising cookies at present.

Children

Zephyro is a tool for work and is not intended for anyone under 16. We do not knowingly collect data about children.

Changes

When this document changes, the date at the top changes with it. If a change materially affects you, we will tell you rather than relying on you noticing.