Privacy Policy

Zerafan ("we," "us," "our") provides a service for creating private, shareable "Rooms" that let you share files, links, invoices, notes, and project updates with your clients through a single link. This policy explains what information we collect, how we use it, and the choices you have.

Account information

When you create a Zerafan account, we collect your name, email address, and a securely hashed password. If you sign up or sign in with Google, we receive your name, email address, and profile photo from Google instead of a password.

Room content

Content you add to a Room — its name, client name, description, uploaded files, links, invoice details, notes, and updates — is stored so it can be displayed to you and to anyone you share the Room's link with.

Usage and analytics data

When someone views a published Room, we record basic analytics — such as the time of the view, which files or links were opened, and a general visitor identifier and browser user agent — so you can see how your Room is being used. We do not sell this data.

Payment information

Paid plans are billed through Stripe. Zerafan does not receive or store your full card number or other sensitive payment details — that information is handled directly by Stripe under its own privacy policy.

• To provide, operate, and maintain the Zerafan service
• To authenticate you and keep your account secure
• To process payments and manage subscriptions
• To send account, billing, and (if enabled) product emails
• To show you analytics about your own Rooms
• To detect, prevent, and address abuse, fraud, or security issues

We do not sell your personal information. We share data only with:

• Service providers we rely on to run Zerafan — including Supabase (database, authentication, and file storage), Stripe (payment processing), Resend (transactional email), and Google (sign-in), each bound by their own privacy and security obligations.
• Anyone you share a Room link with — Room content is visible to whoever has the link (and the password, if the Room is password-protected).
• Legal authorities, only where required by law or to protect the rights, safety, or property of Zerafan or others.

We retain your account and Room data for as long as your account is active. If you delete your account, we permanently delete your profile, Rooms, and uploaded files. Some information may be retained where required for legal, tax, or fraud-prevention purposes.

• You can update your account information at any time from Settings.
• You can permanently delete your account and all associated data from Settings.
• You can turn off non-essential email notifications from Settings.
• Depending on where you live, you may have additional rights over your personal data — contact us and we'll help.

We use essential cookies to keep you signed in and, for password-protected Rooms, to remember that a visitor has entered the correct password. We do not use third-party advertising or tracking cookies.

We use industry-standard measures — including encryption in transit, access controls, and signed, permission-checked access to files — to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data appropriately.

Zerafan is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

We may update this policy from time to time. If we make material changes, we'll notify you by email or through the app before the changes take effect.

Questions about this policy or your data? Reach us at noreply@zerafan.com.