Legal
Privacy Policy
Last updated: 2026. Please review with counsel before launch.
Who we are
Zortia is an independent product operated from India. For any privacy question, or to reach the data controller, email privacy@zortia.com.
What we collect
Your email and account details; read-only business metrics from Stripe (MRR, churn, ARPU, charges, refunds, never card numbers); personal financial figures you enter manually (assets, debts, burn); and privacy-respecting, cookieless usage analytics. We never ask for or store bank-account credentials.
How it's stored
Encrypted in transit (TLS) and at rest. Your Stripe key is encrypted and scoped read-only. Per-user isolation is enforced with database row-level security. We store no raw card data; Stripe handles PCI scope.
We never sell your data
No ads, no data brokerage, no selling or sharing of your financial data with third parties for marketing. Our revenue is subscriptions, nothing else.
Cookies & analytics
We use privacy-first, cookieless analytics (Plausible) that sets no cookies and collects no personal or cross-site data, so no consent banner is required. The only cookies we set are the essential ones that keep you securely signed in.
Subprocessors
Stripe (read-only metrics), Supabase (database, auth, and account emails), Vercel (hosting), Anthropic (AI narration over your numbers), Dodo Payments (billing as Merchant of Record), and Plausible (cookieless analytics). Each handles a defined function; a DPA is available on request.
Retention, export & deletion
We keep the minimum data necessary. You can export all of your data and permanently delete your account at any time from your account settings; deletion is honored promptly.
Your rights (GDPR & India DPDP)
You can access, correct, export, delete, and restrict processing of your data, and withdraw consent at any time. Our lawful bases are performance of your subscription contract and your consent. Under India's Digital Personal Data Protection Act, you may contact our Grievance Officer at grievance@zortia.com. Under GDPR, you may also lodge a complaint with your local supervisory authority. To exercise any right, email privacy@zortia.com.
Changes to this policy
We may update this policy as the product evolves. Material changes will be posted here with a new date.