Privacy notice

Information we collect

When you register or join a waitlist, we collect your name and email address, plus any phone number, company, and role you choose to provide. Stripe collects your billing address and payment details on its hosted checkout page; Zeros Academy receives payment status, amounts, identifiers, and limited billing information, but not your complete card number.

When account creation is enabled, Continue with LinkedIn uses OpenID Connect through Supabase Auth to create a new account or sign in to an existing one. Supabase stores the authentication identity and the email claim returned by LinkedIn; Zeros Academy stores the opaque LinkedIn account identifier, association status, and authentication time. A successful sign-in confirms control of that LinkedIn login and activates the account. It does not verify the user's real-world identity, workplace, employment, or other profile information.

For site analytics, we use a randomly generated visitor identifier and record only the explicit actions listed below. When a visitor uses a valid campaign link, we may also use campaign-recipient records on our server to attach opaque identifiers for the campaigns associated with that recipient record to each analytics event. We do not send the recipient's email address or recipient identifier to PostHog. We do not use analytics autocapture, session replay, keystroke recording, or form-field capture.

Separately, the site automatically records a privacy-minimized visit when a visible page loads or changes. This operational record contains only a normalized page path and surface, receipt time, and environment. Query strings, raw URLs, IP addresses, user-agent strings, contact or form values, campaign tokens, meeting links, and arbitrary text are not stored in the visit ledger or visit alerts.

• Navigation, course, registration, cohort, checkout, waitlist, and subscription-link actions.
• Registration, waitlist, and payment outcomes confirmed by our systems.
• Stable course, cohort, campaign, and interface identifiers needed to understand the funnel, including current, first, latest, and associated campaign identifiers.

How we use information

We use personal information to create and secure accounts, associate each account with its LinkedIn login, manage capacity and registrations, process payments and refunds, send operational email and calendar invitations, respond to requests, prevent abuse, keep records, and improve Zeros Academy courses and the registration experience. Privacy-minimized visit records notify the owner about website use and support operational monitoring. We do not sell personal information.

Analytics choices

PostHog processes the limited analytics events described above in its US Cloud environment. We do not send names, email addresses, phone numbers, company and role values, billing and card details, meeting links, free-text form contents, raw URLs and query strings, IP addresses, or authentication and campaign tokens to PostHog. We use one opaque visitor identifier and do not identify, alias, or merge visitors by email.

The site uses a first-party cookie to retain the anonymous visitor identifier for up to 12 months. Where a consent choice is legally required, analytics will be operated in accordance with that requirement.

Service providers

We use Supabase for authentication, registration, and privacy-minimized visit data; LinkedIn for account creation and sign-in; Stripe for hosted payment processing; Resend for transactional email; PostHog for limited product analytics; Slack for owner visit notifications; Better Stack for privacy-minimized operational telemetry; an independently configured email route for owner visit notifications; and our hosting provider to deliver the website. Each provider processes information for the service it supplies and under its own security and privacy commitments.

LinkedIn sign-in uses essential first-party session and short-lived flow cookies. Zeros Academy does not persist LinkedIn access or refresh tokens in its application database, and email addresses, account identifiers, or LinkedIn identity identifiers are not sent to PostHog.

Retention and deletion

Registration and campaign-recipient records are retained for 24 months. PostHog person and event data is retained for 12 months. Privacy-minimized visit records, Resend records, and database backups are retained or expire within 30 days. Account and LinkedIn association records are retained while the account is active and removed after an approved deletion request, subject to legal and operational limits. Some payment, refund, dispute, fraud-prevention, tax, or legal records may need to be kept longer where required.

To request access, correction, or deletion, email rizwan@zeroshq.com. Rizwan is the accountable owner and will complete an approved deletion request within 30 days, subject to legal and operational limits. Data already present in immutable backups expires through the documented 30-day backup lifecycle.

Contact

Questions about this notice or Zeros Academy's use of personal information can be sent to rizwan@zeroshq.com.