Legal

Privacy Policy

Effective date: June 2025. Questions? Email support@zorenax.com

1. Who We Are

Zorenax ("we", "us", "our") provides an AI-powered SEO and blog automation platform. This Privacy Policy describes how we handle information when you use Zorenax at app.zorenax.com.

2. Information We Collect

Account information: When you register, we collect your email address and (if using Google OAuth) your Google profile name.

Project data: Website URLs, business descriptions, keyword preferences, and SEO settings you enter into the platform.

WordPress credentials: If you connect a WordPress site, we store your site URL, WordPress username, and application password. These are stored securely in our database and never shared with third parties beyond the WordPress API calls you initiate.

Generated content: Blog articles, keywords, and featured images created through the platform are stored on your behalf so you can access them later.

Usage data: We collect basic technical information including your IP address, browser type, and pages accessed in order to operate and improve the service.

3. How We Use Your Data

We use the information we collect to:

  • Provide and operate the Zorenax platform
  • Generate AI-powered keyword research, blog content, and featured images on your behalf
  • Publish content to your connected WordPress sites at your instruction
  • Send transactional emails (account confirmation, password changes, credit updates)
  • Detect and prevent abuse, fraud, or policy violations
  • Improve the platform and fix bugs

We do not sell your personal data to third parties.

4. AI-Generated Content

Zorenax uses third-party AI services (DeepSeek for text, fal.ai for images) to generate content on your behalf. Your project context — including website URL, industry, and keyword targets — is sent to these services as part of the generation request. We do not use your data to train AI models.

AI-generated content may be imperfect, inaccurate, or require editing before publication. You are responsible for reviewing content before publishing it.

5. WordPress Connections

When you connect a WordPress site, your application password is stored in our database to enable publishing on your behalf. This credential is used only to perform actions you explicitly initiate (publishing posts, attaching images). We recommend using a WordPress Application Password with limited permissions rather than your main admin password.

6. Cookies and Analytics

We use session cookies required for authentication (managed by Supabase). We do not use advertising cookies or third-party tracking pixels. We may use basic server-side analytics to understand usage patterns. No user-level analytics data is shared externally.

7. Data Storage and Security

Your data is stored on Supabase infrastructure (PostgreSQL database hosted on AWS). Data is encrypted at rest and in transit. We use Row Level Security (RLS) to ensure users can only access their own data.

Generated images are stored in Supabase Storage with access controls. Your WordPress credentials are stored in our database and protected by infrastructure-level encryption.

8. Data Retention

We retain your account data for as long as your account is active. When you delete your account, we delete your profile, projects, keywords, blog content, images, and WordPress connections.

Some anonymised or aggregated data may be retained for analytics purposes after account deletion.

9. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (you can do this directly from Settings → Account → Delete Account)
  • Object to or restrict certain processing
  • Export your data in a portable format

To exercise any of these rights, contact us at support@zorenax.com.

10. Third-Party Services

We use the following third-party services to operate the platform:

  • Supabase — database and authentication
  • DeepSeek — AI text generation
  • Anthropic Claude — AI content processing
  • fal.ai — AI image generation
  • Resend — transactional email delivery

Each service has its own privacy policy and data handling practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Continued use of Zorenax after changes constitutes acceptance of the updated policy.

12. Contact

For privacy questions or data requests, contact us at support@zorenax.com.