Zero Spam Privacy Policy

This Privacy Policy explains how Highfivery LLC (“Highfivery,” “we,” “us,” or “our”) collects, uses, and shares information when you visit zerospam.org or use Zero Spam (the “Services”), including our website, account portal, and API.

If you have questions or privacy requests, contact info@zerospam.org

1) Key principles

• We collect information only when we have a real need (to run the Services, keep them secure, and support customers).
• We don’t sell your personal information.
• We share information only as described in this Policy (service providers, legal/safety, and business transfers).
• We retain data for limited periods where possible, consistent with security and operational needs.

2) Information we collect

A) Information you provide to us

Depending on how you use the Services, we may collect:

• Account data: email address, username, password (stored in hashed form), and account settings.
• Billing data: billing name, billing address, and phone number (if collected through checkout), subscription status, invoices/receipts, and payment-related metadata.
• Support and communications: the contents of emails, contact forms, and other messages you send us.

Payment cards: Payments are processed by Stripe. We do not store your full credit card number on our servers. We may receive limited payment information from Stripe (for example, payment status, card brand, last four digits, expiration month/year, and billing postal code) to manage your subscription and accounting.

B) Information collected automatically (website + services)

We collect certain information automatically when you visit or use the Services, including:

• Log and device data: IP address, browser type, device identifiers, operating system, language preferences, referring URLs, and timestamps.
• Usage data: pages viewed, actions taken, and general activity patterns.
• Cookies and similar technologies: described in Section 6.

C) API query data

When you use the API, we record:

• the API request payload (the values you submit),
• metadata such as timestamp, IP address, user agent, and account/API key identifier, and
• the API response/output and related operational metadata.

Retention: API query data is retained for up to 30 days for abuse prevention, intrusion detection, debugging, and reliability monitoring, then deleted from our primary systems. Encrypted backups may retain limited portions temporarily as part of standard backup and disaster recovery practices.

3) How we use information

We use information to:

• provide and operate the Services (including authentication and delivering API responses),
• process subscriptions and billing,
• secure the Services (fraud prevention, abuse detection, monitoring, auditing, and incident response),
• troubleshoot, maintain, and improve performance and features,
• communicate with you about your account and Service changes,
• send marketing or promotional communications where permitted by law (see Section 7).

4) How we share information

We do not sell your personal information.

We may share information in these situations:

A) Service providers (subprocessors)

We use trusted vendors to help operate the Services. These providers may process information only to perform services for us and are expected to protect it. Our key providers include:

• Stripe (payments and subscription processing)
• Cloudflare (security, performance, and content delivery)
• SiteGround (hosting and infrastructure)
• Mailgun (email delivery)

B) Legal and safety

We may disclose information if we believe in good faith it’s necessary to:

• comply with applicable law, regulation, subpoena, court order, or legal process,
• protect the rights, property, or safety of Highfivery, our users, or the public,
• prevent fraud, security incidents, or abuse.

C) Business transfers

If we’re involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

D) Aggregated / de-identified data

We may share aggregated or de-identified information that cannot reasonably identify you (for example, high-level usage or reliability metrics).

5) What we don’t do

• No third-party ads. We do not serve third-party advertising on zerospam.org.
• No public posting of customer communications. We do not treat your support emails or messages as public content.

6) Cookies and analytics

A) Cookies (site functionality)

We use cookies and similar technologies to:

• keep you logged in,
• maintain session security,
• protect access to your account and API keys.

If you disable cookies, some features (like login) may not work properly.

B) Google Analytics

We use Google Analytics to understand how visitors use our site and to improve performance and usability. Google Analytics may use cookies and similar technologies to collect information about your device and usage.

You can learn more about Google’s practices and opt-out options through Google’s tools (for example, browser settings and Google’s analytics opt-out mechanisms).

7) Email communications

We send emails in a few categories:

• Transactional/Service emails (required): account confirmations, password resets, billing notices, and important service-impacting messages.
• Marketing/promotional emails (optional where applicable): updates, new features, and occasional announcements.

You can opt out of marketing emails using the unsubscribe link (if present) or by contacting info@zerospam.org. You cannot opt out of critical transactional emails necessary to operate your account and subscription.

8) Data retention

We retain information only as long as reasonably necessary for operating the Services, security, legal compliance, and dispute resolution.

Current retention periods:

• API query data: up to 30 days (then deleted from primary systems; backups may retain limited portions temporarily)
• Web server logs: up to 30 days
• Account data after cancellation/deletion request: up to 30 days, unless we must keep certain records longer for legal, tax, accounting, fraud prevention, or dispute-resolution purposes (for example, invoices/receipts)

9) Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. No system is perfectly secure, so we can’t guarantee absolute security.

10) Your choices and privacy rights

You may request:

• access to the personal information we hold about you,
• correction of inaccurate information,
• deletion of your account data (subject to legal/operational exceptions).

To submit a request, email info@zerospam.org with the subject line “Privacy Request” and include the email address associated with your account. We may need to verify your identity before completing requests.

State privacy laws (US): Depending on where you live, you may have additional rights under state laws (for example, rights to access, delete, or correct). We do not sell personal information.

11) International visitors

We are based in the United States. If you access the Services from outside the U.S., you understand your information may be processed and stored in the U.S. and other locations where our service providers operate.

12) Children’s privacy

The Services are intended for users 18+ and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps.

13) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We’ll post the updated version on this page and update the “Last updated” date. Your continued use of the Services after changes become effective means you accept the updated policy.

14) Contact

Highfivery LLC
651 N Highway 183
335 PMB 3069
Leander, TX 78641-7001

Email: info@zerospam.org