Privacy Policy

Account information. When you create an account we collect your name, email address and a password (stored only as a one-way hash). You may add a profile photo, headline, bio, company and public social links.

Sign-in with Google, GitHub, LinkedIn or Facebook. If you choose to sign in with one of these providers, we receive your name, email address, whether the provider has verified that email, your profile picture and a provider account identifier. We never see or store your password for those services, and we do not store their access tokens after sign-in completes. We request only the basic profile and email permissions.

Product listings. When you submit a product we store the details you provide, such as name, descriptions, website, logo, screenshots, pricing and company details. Listings are public once published. To help you fill in the form, we can fetch the public web page at the URL you enter and read its title, description, images and links.

Reviews, collections and favorites. Reviews you post are public and show your name. Private collections and favorites are visible only to you.

Payments. Paid plans are processed by Stripe or Razorpay. Card and bank details go directly to the payment provider; we never receive or store them. We keep order records, amounts, and the payment provider’s reference numbers.

Usage and analytics. To show founders how their listings perform and to keep the service secure, we record events such as page views, searches and clicks on product links. We store the referring site’s domain, device type, an approximate country and campaign (UTM) tags. We do not store raw IP addresses with analytics events; instead we use a short-lived hashed identifier that rotates daily so repeat views can be counted without identifying you.

Communications. If you contact us, we keep your message and our reply.

• To create and secure your account and let you sign in.
• To publish, moderate and display product listings, reviews and collections.
• To process purchases, grant the plan benefits you bought, and send receipts.
• To provide listing analytics to product owners (in aggregate; owners never see who you are).
• To send essential emails: account verification, password resets, submission and payment updates.
• To detect spam, fraud and abuse, and to enforce our Terms of Service.
• To improve the directory, for example by understanding which searches return no results.

We send marketing emails only if you opt in, and every such email includes an unsubscribe link. We do not sell your personal information.

If you sign in with Google, we use your Google account’s name, email address, email-verification status and profile picture only to create and sign you in to your ZoraHunt account. We do not use this information for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the service or as required by law.

ZoraHunt’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Some features, such as suggested descriptions and categories, use a third-party AI model. We send the product information needed for the task (for example the public text of a product’s website). We do not send your account details or other personal information unless you include it in the product content yourself. AI suggestions are always shown to you for review and are never published without approval.

We share information only with service providers that help us run ZoraHunt, under contracts that limit their use of it:

• Hosting, database and file storage providers.
• Payment processors (Stripe, Razorpay).
• Transactional email delivery.
• AI model providers, for the features described above.
• Sign-in providers you choose to use (Google, GitHub, LinkedIn, Facebook).

We may also disclose information if required by law, or to protect the rights, safety and property of our users or the public.

We use only cookies that are needed for the site to work: a session cookie that keeps you signed in, and a security cookie that protects forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies.

• Account information: for as long as your account is open.
• Analytics events: up to 13 months, after which only aggregated daily totals remain.
• Order and payment records: as long as tax and accounting laws require.
• Published listings: until the listing is removed by its owner or by us.

You can view and update your profile at any time from your dashboard. You can also ask us to give you a copy of your personal information, correct it, or delete your account. When you delete your account we remove your personal details. Order records that we are legally required to keep are retained without your profile information. Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023 and the EU/UK GDPR, you may have additional rights, such as the right to object to or restrict certain processing.

To make a request, email [email protected] from the address on your account.

We protect information with encryption in transit (HTTPS), hashed passwords, access controls and audit logs for sensitive actions. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect unauthorized access to your account.

ZoraHunt is intended for professionals and is not directed at children. You must be at least 18 years old, or the age of majority where you live, to create an account.

If we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email or on the site before the changes take effect.

Questions about privacy? Email [email protected].