Privacy Policy

1. Quick summary

Zinc provides an API and services that enable programmatic purchasing from merchant URLs and related account, billing and support functions (the "Services"). This Privacy Policy explains what personal data we collect, how we use and share it, and how to contact us. Zinc does not sell personal data.

2. Scope

This Policy applies to personal data Zinc collects and processes in connection with zinc.com, the Zinc API and related services. When a business customer sends data to Zinc through the Zinc API, Zinc acts as a processor and processes that data on the customer's instructions. For data Zinc collects directly (for example, site visitors and account registrants), Zinc acts as a controller.

3. Data we collect

We collect the personal data necessary to provide the Services, including:

1. Account & contact: name, email, company, billing address, and support communications.
2. Order & shipping: merchant URLs, product descriptions and prices, seller identifiers, order confirmations, tracking numbers, recipient names, shipping addresses, phone numbers and emails.
3. Payments & funding: transaction records, preloaded fund balances and payment references (we use Stripe and in-house payment systems).
4. API logs & telemetry: API keys, request/response payloads, IP addresses, user-agent strings, timestamps, and error logs. Zinc logs API requests and responses; these logs may contain personal data present in API payloads and may be accessed by internal staff and permitted third parties for operations, support, and evaluation.
5. Human review data: data included in orders may be viewed by internal reviewers and permitted third-party reviewers when manual handling or support is needed.
6. Cookies & analytics: IP address, device/browser info, pages visited and analytics collected via cookies and similar technologies.

4. How we use personal data

We use personal data to: provide and operate the Services; execute, track and fulfill purchases; process payments and refunds; authenticate and manage API usage; detect and prevent fraud and abuse; provide support; and improve and develop our products (including limited internal evaluations and backtests). Customers must ensure they have any necessary legal basis or consents to provide personal data to Zinc.

5. Human reviewers and third parties

Orders that require manual handling may be reviewed by Zinc's internal staff. Zinc permits use of third-party reviewers where required by operations. Reviewer access is logged to the extent of our operational controls. Reviewers may see full order contents, including personal data.

6. Model evaluations and backtesting

Zinc may run internal evaluations or backtests using historical inputs (for example, historical merchant URLs) to validate and improve services. Where feasible we avoid using customer names or direct identifiers in such evals.

7. Payments and card data

We use Stripe and in-house payment systems to process payments. Customers are responsible for ensuring they have the authority to provide any payment data they transmit to Zinc.

8. Security

We use TLS (HTTPS) for data in transit. Access controls and operational logging are used where available.

9. Retention and deletion

We retain data as necessary to provide Services, meet legal and accounting obligations, prevent fraud, and support operations. Zinc retains historical data and archives; deletion requests will be handled where technically feasible and legally permitted, but archived or backup copies may remain until they are rotated.

10. Cookies & tracking

We use cookies and similar technologies for site functionality and analytics. We use HTTPS endpoints. We do not currently operate a public cookie-preference center.

11. International transfers

Zinc is a U.S. company and personal data may be transferred to and processed in the United States and other countries. For transfers from the EU/UK, we rely on appropriate legal safeguards and contractual protections.

12. Your rights

Where applicable, you may have the right to access, correct, delete, or port your personal data, and to object to certain processing. To exercise rights, contact support@zinc.com. We will verify requests and respond in accordance with applicable law and our technical capabilities.

13. Law enforcement and legal requests

We may disclose personal data to comply with legal obligations or to protect the rights, safety or property of Zinc, its customers, or others. Where permitted, we will notify affected customers before making compelled disclosures.

14. Changes to this policy

We may update this Policy. Material changes will be posted with a new effective date.

Contact

For privacy-related questions or requests, contact support@zinc.com.