Privacy Policy

Effective date: 2026-03-01
Last updated: 2026-03-01

This Privacy Policy explains how Zenq (“we”, “us”, “our”) collects, uses, and shares information when you use zenq.io and related pages (the “Website”).

1) Who we are (Data Controller)

For the purposes of the EU General Data Protection Regulation (“GDPR”) and similar laws, the data controller is:

Controller: Zenq (operated by OSVČ Yevhenii Tsakh, IČO: 21271224, registered address: Karla Kryla 2679/7, 155 00, Praha 5 - Stodůlky, Czech Republic)

Contact email: support@zenq.io

If you have questions about this policy or want to exercise your rights, contact us at support@zenq.io.

2) What information we collect

2.1 Information you provide to us

Depending on how you use the Website, we may collect:

• Contact details (e.g., email address) if you contact us
• Message content you send us (e.g., via email or support chat)

2.2 Information collected automatically

When you browse the Website, we may automatically collect:

• Device and browser information (e.g., browser type, OS, language)
• Usage data (e.g., pages viewed, clicks, referrer URLs, timestamps)
• Approximate location (derived from IP address, typically city/region level)
• Identifiers stored via cookies or similar technologies (see Section 5)

3) How we use information

We use personal data to:

• Operate and maintain the Website
• Provide customer support and respond to inquiries
• Monitor performance, debug issues, and improve user experience
• Understand how the Website is used (analytics)
• Protect the security and integrity of the Website (fraud/abuse prevention)

4) Legal bases for processing (EEA/UK)

If you are in the EEA/UK, we process personal data under one or more of these legal bases (depending on context and applicable law):

• Consent — where required (typically for non-essential cookies/analytics)
• Legitimate interests — to run, secure, and improve the Website (e.g., basic measurement, debugging, security)
• Contract / pre-contract steps — to respond to your requests (e.g., support inquiries)
• Legal obligation — if we must comply with law

5) Cookies and similar technologies

Cookies are small files stored on your device. Similar technologies (like local storage or pixel tags) may also be used.

5.1 No cookie settings (for now)

We do not currently provide an in-website cookie preference center. You can still control cookies using your browser settings (including blocking or deleting cookies).

If you block cookies, some functionality may not work as intended (for example, support chat may not load correctly and analytics may be limited).

5.2 Essential vs. non-essential cookies

• Essential cookies: required for basic website functionality and security.
• Non-essential cookies: used for analytics and support chat features. Depending on your location, these may require consent.

6) Analytics (PostHog – EU)

We use PostHog for website analytics. We configure PostHog Cloud to use an EU data region.

PostHog may process:

• Event data (e.g., page views, clicks)
• Device/browser metadata
• IP address (often used for approximate location and security; handling depends on configuration)
• Cookie identifiers (if enabled)

Purpose: understand usage and improve the Website.

Legal basis: consent where required; otherwise legitimate interests.

Opt-out: You can block analytics cookies via your browser settings or use privacy extensions that block tracking scripts.

Data retention (PostHog)

• Product analytics data: retained according to our PostHog plan and settings (see Section 10).
• Session recordings: we do not currently intend to use session recording on the Website. If we enable it in the future, we will update this policy.

7) Support chat (Crisp)

We use Crisp to provide a support chat widget on the Website. When you open or use the chat widget, Crisp may process information to enable messaging and support.

What Crisp may collect

• Chat content (messages you send and our replies)
• Contact details you choose to provide (e.g., name, email)
• Technical/usage data such as device/browser information, pages visited, timestamps, and referrer information (depending on configuration)
• Approximate location derived from IP address (depending on configuration)
• Cookies/identifiers to keep the chat session working

Purpose and legal basis

Purpose: provide customer support and maintain reliability/security of the support channel.

Legal basis: contract/pre-contract steps (responding to your request) and/or legitimate interests (support and security). Where required by law, we rely on consent for non-essential cookies.

Opt-out (Crisp)

If you do not want Crisp to process data, do not open the chat widget and contact us via email at support@zenq.io instead. You can also block cookies in your browser.

8) Hosting and infrastructure (Google Cloud Platform)

The Website is hosted on Google Cloud Platform (GCP). To deliver the Website reliably and securely, infrastructure providers and our servers may process technical data such as IP address, request metadata, and timestamps (often via server logs).

Purpose: hosting, networking, storage, reliability, and security operations.

9) How we share information

We do not sell your personal data.

We may share personal data with:

• PostHog (EU region) — analytics and product insights
• Crisp — support chat functionality and support operations
• Google Cloud — hosting, storage, networking, and security operations
• Authorities — if required to comply with law or protect rights, safety, and security
• Professional advisors — if needed (e.g., legal/accounting), under confidentiality

10) Data retention

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer retention is required or permitted by law.

• Website analytics (PostHog): retained according to the PostHog plan and settings we use.
• Support chat (Crisp): chat conversations may be retained to handle your request and for support history, unless you request deletion where applicable.
• Server logs (GCP): retained for a limited period for security and debugging (duration depends on configuration).

You can request deletion as described in Section 13. Note that we may need to keep certain records for legal or security reasons.

11) International data transfers

We aim to process data in the EEA where possible (for example, by using EU-region services). However, some service providers may process or support services from locations outside the EEA/UK.

Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and/or other lawful transfer mechanisms.

12) Security

We use reasonable technical and organizational measures to protect personal data, such as access controls and encryption in transit. No method of transmission or storage is 100% secure.

13) Your rights (EEA/UK and similar jurisdictions)

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your data (in certain cases)
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local supervisory authority

To exercise rights, email support@zenq.io. We may ask you to verify your identity before responding.

14) Children’s privacy

The Website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child provided personal data, contact us to request deletion.

15) Third-party links

The Website may contain links to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal data.

16) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.

17) Contact

Email: support@zenq.io