Privacy Policy

Last Updated: December 25, 2025

This Privacy Policy is written to be clear enough for everyday use, but robust enough for enterprise review. It does not replace independent legal advice.

1. Introduction

Zyro (“Zyro”, “we”, “us”, or “our”) provides an orchestrated AI growth platform that connects analytics, SEO, content, social, experimentation, and reporting into one system (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you:

  • Visit our website at zyro.world;
  • Create or use a Zyro account;
  • Install the Zyro script on your own website or application (“Your Site”); or
  • Interact with our Strategy, Content, Social, and Conversion Copilots and related tools.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, you should not use the Service.

2. Scope and Definitions

For the purposes of this Privacy Policy:

  • Customer means an organisation or individual that has created a Zyro account.
  • Customer Data means data submitted to Zyro by or on behalf of a Customer (for example, data from Your Site, content briefs, campaign details, and configuration settings).
  • End User means an individual who visits or interacts with Your Site where the Zyro script is installed.
  • Personal Information means any information that identifies or can be used to identify an individual.

3. Information We Collect

3.1 Information You Provide Directly

  • Account and Profile Information: When you sign up for Zyro, we collect details such as your name, email address, password, company name, and role.
  • Billing Information: If you sign up for a paid plan, our payment processor collects payment details (e.g. card number, billing address). We do not store full card numbers on Zyro servers.
  • Content, Briefs, and Settings: We collect information you provide when you create content briefs, AI articles, experiments, goals, campaigns, internal notes, and configuration data (for example: target keywords, URLs, value per conversion, audiences, and messaging preferences).
  • Support and Communications: If you contact us, we collect the content of your message and associated contact details so we can respond.

3.2 Information We Collect Automatically from Your Use of the Service

When you access the Service or when the Zyro script runs on Your Site, we automatically collect certain information, which may include:

  • Usage and Log Data: IP address, browser type, device type, operating system, language settings, date and time of access, pages viewed, and referring/exit URLs.
  • Event and Interaction Data: On Your Site, the Zyro script can record events such as pageviews, sessions, scroll depth, clicks on elements, rage/dead clicks, funnel steps, and experiment assignments and conversions.
  • Device and Network Data: Approximate geolocation (country/region), user agent, and network information used for security, analytics, and product optimisation.
  • Cookies and Similar Technologies: We use cookies and similar technologies to remember settings, authenticate sessions, measure usage, and help protect the Service. Where required by law, we will obtain consent before setting non-essential cookies.

Data collected from Your Site is generally aggregated and used to produce analytics, heatmaps, funnels, and other reports for you. We do not attempt to identify individual End Users by name from this data, and we expect Customers to configure Zyro in a way that aligns with their own legal obligations and privacy notices.

3.3 Information from Third-Party Services

At your direction, Zyro can connect to third-party platforms to enhance the Service. When you connect an integration, you authorise Zyro to access data from that provider in accordance with their terms and your settings. Examples include:

  • Google services: Google Search Console, YouTube, and other Google properties for search performance, content discovery, and channel analytics.
  • Social platforms: Meta (Facebook and Instagram), LinkedIn, TikTok, Pinterest, Reddit, and similar platforms for post performance, audience metrics, and campaign analytics.
  • Analytics and Marketing Tools: Where supported, we may use data from your analytics or marketing tools to tie activity to goals and value.
  • AI and Data Providers: We use trusted third-party AI and data providers to support features such as content generation, SERP analysis, topic discovery, and language processing. We only send the minimum necessary context to deliver the requested feature.

You can disconnect integrations at any time. Disconnecting prevents new data from being pulled, but does not automatically delete previously imported data.

3.4 Google User Data & Limited Use Policy

Zyro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • Restricted Scopes: We do not request access to Restricted scopes (like Gmail) for general functionality.
  • Data Usage: Data accessed via Google APIs (e.g., YouTube, Analytics, Ads) is used solely to provide the user-facing features of the Service.
  • AI Training: We do not use your private Google user data to train generalized AI models shared with other customers.
  • No Sale: We do not sell Google user data.

4. How We Use Information

We use the information we collect for the following purposes:

  • Providing and Maintaining the Service: To operate the platform, provide dashboards and Copilots, run experiments, generate content and insights, and deliver support.
  • Orchestrated AI Functionality: To power the Strategy, Content, Social, and Conversion Copilots, including:
    • Identifying opportunities and risks across pages, channels, and campaigns;
    • Generating briefs, drafts, schema, and recommendations tailored to your data;
    • Re-using winning messages and insights across Copilots (for example, test winners informing future content).
  • Security, Fraud Prevention, and Abuse Detection: To protect the Service and our Customers from misuse, unauthorised access, and security incidents.
  • Analytics and Product Improvement: To understand how the Service is used, improve performance and features, and develop new capabilities.
  • Billing and Account Management: To process payments, manage subscriptions, and provide invoices.
  • Communications: To send service-related emails (for example, security alerts, updates, onboarding guidance), respond to your requests, and share product changes. You can opt out of non-essential marketing emails at any time.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell your personal information. We do not use your Customer Data to train a global model that is shared across customers. We may use aggregated or de-identified information to improve the Service and for benchmarking, provided it cannot reasonably be used to identify you or your End Users.

5. Legal Bases (EEA/UK Users)

Where GDPR or UK GDPR applies, we rely on the following legal bases to process personal information:

  • Performance of a Contract: To provide the Service you have requested.
  • Legitimate Interests: For product improvement, security, fraud prevention, and analytics where those interests are not overridden by your rights.
  • Consent: For certain cookies, marketing communications, and specific integrations where consent is required.
  • Legal Obligations: Where processing is necessary to comply with applicable law.

6. How We Share Information

We may share information in the following circumstances:

  • Service Providers and Subprocessors: We use carefully selected third parties to provide infrastructure, AI processing, email delivery, logging, analytics, and payment processing. These providers are bound by contractual obligations to protect your information and use it only to provide services to Zyro.
  • Within Your Organisation and With Your Agents: Data may be visible to other users you invite to your Zyro account (e.g. team members, agencies, or clients), subject to the roles and permissions you set.
  • Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our business, your information may be transferred as part of that transaction, subject to appropriate safeguards.
  • Legal and Safety: We may disclose information where required by law or in good faith belief that such disclosure is reasonably necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.

We do not share Customer Data with other customers for their independent use, and we do not sell personal information.

7. International Transfers

Zyro is based in Australia and uses infrastructure and service providers that may be located in other countries. As a result, your information may be transferred to and processed in jurisdictions that may have data protection laws different from those in your region.

Where required, we implement appropriate safeguards for these transfers, such as contractual protections, to help ensure that your personal information receives an adequate level of protection.

8. Data Retention

We retain personal information for as long as necessary to provide the Service, fulfil the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

Examples:

  • Account information is retained while your account is active and for a reasonable period after closure.
  • Log and analytics data may be retained for a limited period, subject to configuration and plan limits.
  • Support communications are retained as needed for record-keeping and training purposes.

Where data is no longer needed, we will either delete it or de-identify it in line with our retention policies.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, loss, misuse, or alteration. These measures include encryption in transit, access controls, and logging.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your information.

10. Your Rights and Choices

Depending on your location, you may have certain rights in relation to your personal information, such as:

  • Accessing the personal information we hold about you;
  • Requesting correction of inaccurate or incomplete information;
  • Requesting deletion of your personal information, subject to legal exceptions;
  • Objecting to or restricting certain processing;
  • Portability of your personal information; and
  • Withdrawing consent where processing is based on consent.

To exercise these rights, please contact us at support@zyro.world. We may need to verify your identity before responding. For End Users of a Customer’s site, we may direct requests to the relevant Customer, as they are typically the data controller of your information in that context.

11. Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the Service, measure performance, and support security. Depending on your location, you may be able to manage cookie preferences through your browser settings or via a consent banner on our site.

12. Children’s Privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.

13. Third-Party Sites and Services

The Service may link to or integrate with third-party websites and services. This Privacy Policy does not apply to those third parties. Their own privacy policies govern their handling of your data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of the page. If changes are material, we will provide additional notice (for example, via email or in-product notification) as required by applicable law.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us at support@zyro.world or via our Contact Page.