Privacy Policy

ZeroFocus ("we," "us," or "our") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Hungarian law. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at zerofocus.app (the "Service").

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Email address, password (encrypted)
• Make a purchase: Name, billing address, payment information (processed by our payment provider)
• Use the Service: Tasks, schedules, and planning data you create
• Contact us: Name, email, and message content
• Subscribe to newsletter: Email address

1.2 Information Collected Automatically

• Device information: Browser type, operating system, device type
• Usage data: Pages visited, features used, time spent
• Cookies: Session cookies for functionality (see Section 5)

2. How We Use Your Information

Purpose	Legal Basis
Provide and maintain the Service	Contract performance
Process payments and subscriptions	Contract performance
Send transactional emails	Contract performance
Send marketing emails (if subscribed)	Consent
Improve the Service	Legitimate interest
Prevent fraud and abuse	Legitimate interest

3. Data Sharing and Disclosure

We may share your information with:

3.1 Service Providers

• Payment processing: Lemon Squeezy (processes payments, handles VAT)
• Email services: MailerLite (sends newsletters and transactional emails)
• Hosting: Our web hosting provider

3.2 Legal Requirements

We may disclose information if required by law, court order, or government request.

4. Data Retention

Data Type	Retention Period
Account data	Until you delete your account
Task and planning data	Until you delete your account
Payment records	7 years (legal requirement)
Newsletter subscriptions	Until you unsubscribe
Server logs	90 days

5. Cookies and Tracking

5.1 Cookies We Use

• Session cookies: Keep you logged in, remember preferences
• Security cookies: Prevent cross-site request forgery

5.2 Cookies We Do NOT Use

• Third-party advertising cookies
• Cross-site tracking cookies
• Social media tracking pixels

6. Your Rights

6.1 For All Users

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Unsubscribe: Opt out of marketing emails at any time

6.2 Your Rights Under GDPR (EU/EEA Users)

As we are based in the EU and process data under GDPR, you have the following rights:

• Right of access (Article 15) - Request a copy of your personal data
• Right to rectification (Article 16) - Correct inaccurate data
• Right to erasure (Article 17) - Request deletion of your data
• Right to restrict processing (Article 18)
• Right to data portability (Article 20) - Receive your data in a machine-readable format
• Right to object (Article 21) - Object to processing based on legitimate interest
• Right to withdraw consent - At any time, without affecting lawfulness of prior processing

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

6.3 Right to Lodge a Complaint

If you believe your rights have been violated, you may lodge a complaint with a supervisory authority. For Hungary, this is:

6.4 For California Residents (CCPA)

You have the right to know what personal information is collected, opt out of the sale of personal information (we don't sell data), and request deletion.

7. Data Security

We implement appropriate security measures to protect your data:

• HTTPS encryption for all data transmission
• Password hashing using industry-standard algorithms
• Regular security updates and monitoring
• Limited access to personal data on a need-to-know basis

8. International Data Transfers

As we use service providers based outside the EU (such as payment processors), your data may be transferred to countries outside the European Economic Area. For such transfers, we rely on:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Service providers' certification under applicable frameworks

You may request a copy of the safeguards in place by contacting us.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and sending an email notification for material changes.

11. Contact Us