Privacy Policy

Zulaa ("we," "us," or "our") operates the Zulaa platform, accessible at zulaa.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By accessing or using Zulaa, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your privacy. If you have questions or concerns about this policy, contact us at privacy@zulaa.io.

We collect information you provide directly and information collected automatically when you use our platform.

Information you provide:

• –Account registration data: name, email address, and password.
• –Artist profile information: bio, service categories, service area, booking links, social media URLs, and portfolio photos.
• –Communications you send us, including support inquiries.

Information collected automatically:

• –Usage data: pages visited, search queries, profile views, and link clicks.
• –Device information: browser type, operating system, IP address, and referring URLs.
• –Cookies and similar tracking technologies to maintain session state and improve user experience.

Information from third parties:

• –Business listing data sourced from Google Places API for unclaimed artist profiles.
• –Authentication tokens from our identity provider (Supabase Auth).

We use the information we collect to:

• –Create and manage your account and authenticate your identity.
• –Display your artist profile to clients searching on Zulaa.
• –Send you transactional emails such as account confirmations and password resets.
• –Analyze usage patterns to improve the platform's performance and features.
• –Respond to your support requests and communications.
• –Comply with legal obligations and enforce our Terms of Service.
• –Detect, investigate, and prevent fraudulent or unauthorized activity.

We do not sell your personal information to third parties. We do not use your data for advertising targeting on third-party platforms.

We rely on the following third-party services to operate the platform. Each has its own privacy practices:

Supabase — our database and authentication provider. Supabase stores your account information and profile data on servers within the United States. See the Supabase Privacy Policy.

Google Places API — used to source publicly available business information for unclaimed artist profiles. Data retrieved from Google Places is subject to Google's Privacy Policy. We display attribution as required by Google's Terms of Service.

Stripe — used for payment processing if and when paid features are introduced. Stripe handles payment card data directly and we do not store full card numbers. See the Stripe Privacy Policy.

Vercel — our hosting provider. Vercel may collect server access logs including IP addresses. See the Vercel Privacy Policy.

We use cookies and similar technologies to maintain your session after login and to remember your preferences. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but doing so may affect your ability to log in or use certain features.

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

Unclaimed profile data sourced from Google Places is retained to support platform functionality. If you are a business owner and believe your information has been listed in error, you may request removal by using the "Request removal" link on your profile page or by emailing us at privacy@zulaa.io.

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• –Access: request a copy of the personal information we hold about you.
• –Correction: request that we correct inaccurate or incomplete information.
• –Deletion: request that we delete your personal information, subject to legal retention requirements.
• –Portability: request a machine-readable copy of the data you have provided to us.
• –Objection: object to the processing of your data for specific purposes.
• –California residents: under the CCPA, you have additional rights including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at privacy@zulaa.io. We will respond to verified requests within 30 days.

We implement industry-standard security measures including TLS encryption for data in transit and encryption at rest for sensitive data stored by Supabase. Access to production systems is restricted to authorized personnel.

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but we will notify you of any breach affecting your personal data as required by applicable law.

Zulaa is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or by posting a notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact:

Zulaa
Email: privacy@zulaa.io
Website: zulaa.io