What we collect, and why.

Who we are

ZocLink is operated by Zero One Creation (“we”, “us”). For any privacy question or request, email support@zoclink.com.

For content inside a workspace (links, QR codes, bio pages and the traffic they receive), the workspace owner decides what is created and shared. We process that content on their behalf to run the service.

If you have a ZocLink account

• Account details: your name, email address and, if you choose Google sign-in, the basic profile Google shares (name, email, picture). We don’t use passwords for sign-in; we email one-time codes and links.
• Workspace content: links and their destinations, titles, notes, tags, QR designs and logos, bio pages and images you upload, custom domains and team membership.
• Sessions and security: active sessions with the device’s IP address and browser, so you can review and revoke them, and an activity log of changes made in each workspace.
• Billing: your plan and subscription status. Card and UPI details are entered with Razorpay and are never sent to or stored by us.

We use this to provide the service, keep accounts secure, send messages you need (sign-in codes, invitations, payment and domain alerts), and enforce plan limits. We don’t sell personal data and we don’t send marketing email without your consent.

If you open a ZocLink link, QR code or bio page

To show the link’s owner how their link performs, each visit records:

• the time, the link or page visited, and whether it came from a QR scan;
• approximate location (country, region, city) derived by our hosting provider from the connection, never GPS;
• device type, browser and operating system;
• the referring website’s domain and any campaign (UTM) tags;
• a daily visitor key: a one-way hash of your IP address and browser, made with a secret that changes every day.

We do not store your IP address with visit records. The daily key lets a link owner count unique visitors per day; it cannot be reversed, and it cannot connect your visits across days. Link owners see totals and breakdowns, not individual visitors.

Bio pages set no analytics cookies. If your browser sends “Do Not Track”, bio-page visits are not recorded. Automated traffic such as search-engine crawlers is excluded from counts.

Some links ask for a password or offer to open a native app such as YouTube or Spotify. Passwords you type are checked and discarded; they are not stored. We cannot see whether an app opened.

Cookies

The ZocLink app (app.zoclink.com) uses cookies that are needed to keep you signed in, remember your last workspace and remember whether the sidebar is open. The marketing site, short links and bio pages don’t set tracking or advertising cookies.

Service providers

We use these providers to run ZocLink. They process data only to provide their service to us.

These providers may process data outside your country. We rely on their contractual safeguards for those transfers.

How long we keep data

• Visit records: each plan shows a history window (30 days on Free, longer on paid plans). Records are kept for the longer of that window or 400 days, so an upgrade can restore recent history, and are then deleted automatically.
• Deleted links: stop working immediately and stay restorable from “Recently deleted” in the workspace. They are removed permanently when the workspace is deleted.
• Workspaces and accounts: kept until you delete them. Deleting a workspace removes its links, QR codes, pages, domains and visit records. Deleting your account removes your profile and any workspace where you are the only owner.
• Billing records: kept as long as tax and accounting law requires.

Your choices and rights

You can update your profile, review sessions, export your links to CSV and delete your account from the app at any time. You can also ask us to access, correct, export or delete personal data, or object to how we use it, by emailing support@zoclink.com. We respond within 30 days. If a request concerns a workspace’s content or visit records, we may refer you to that workspace’s owner.

ZocLink is not intended for children under 13 and we don’t knowingly collect their data.

Security

Data is encrypted in transit. Access inside the product is checked on the server for every request. Read more on our security page. If we learn of a breach that affects your personal data, we will notify you as the law requires.

Changes

When this policy changes materially we’ll update the date above and tell account holders by email or in the app before the change applies.