Privacy policy

In force since October 2, 2026

In short

The controller is ZUNEX Team EI (ZUNEX), reachable at info@zunex.tech.
We collect what is needed to answer you, build your website and invoice you, nothing more.
Your data is never sold or used for advertising.
Traffic to the website is measured without cookies and without any third-party service. You can object to it at any time, below.
You can access, correct or erase your data, or object to its processing, by writing to info@zunex.tech.

1. Controller

ZUNEX Team, sole trader trading as ZUNEX, whose full identity is given in the legal notice. Contact: info@zunex.tech, +91 63619 72160.

No data protection officer has been appointed: any question about your data can be sent to the same address.

2. Data, purposes and retention

Message sent from the website

Data: Email, message
Purpose: Answering you
Legal basis: Legitimate interest in answering requests (art. 6(1)(f) GDPR)
Retention: 3 years after the last exchange

Booking a call

Data: Name, email, chosen time
Purpose: Organising the call and creating the video link (Google Calendar, Google Meet)
Legal basis: Pre-contractual steps taken at your request (art. 6(1)(b))
Retention: 3 years after the last exchange

Order and subscription

Data: First name, last name, email, company, billing address, SIRET and VAT number if given, plan, options, payment history. Card and IBAN details are entered with Stripe and never reach ZUNEX.
Purpose: Concluding and performing the subscription, invoicing
Legal basis: Performance of the contract (art. 6(1)(b)) and accounting obligations (art. 6(1)(c))
Retention: Length of the subscription, then 5 years. Invoices: 10 years

Client space

Data: Sign-in email, Google or Microsoft identifier if you use them, sign-in codes, questionnaire answers, files, requests and messages
Purpose: Building and developing your website, following up your requests
Legal basis: Performance of the contract (art. 6(1)(b))
Retention: Length of the subscription, then 5 years. Uploaded files: 1 year after the subscription ends. Sign-in codes: 10 minutes

Service security

Data: IP address, technical logs, sign-in attempts
Purpose: Protecting the service, preventing fraud and abuse
Legal basis: Legitimate interest (art. 6(1)(f))
Retention: 12 months at most

Audience measurement

Data: Pages viewed, domain of the referring website, device type, browser and system without detailed version, country, reading time, scrolling, loading times, features used. Daily identifier computed without cookies from the truncated IP address
Purpose: Measuring traffic and performance to improve the website
Legal basis: Legitimate interest (art. 6(1)(f)), within the consent exemption for audience measurement, with a right to object
Retention: Daily identifier: 48 hours. Details: 25 months. Anonymous totals: no limit

Data marked as required in the forms is needed to handle your request or order. ZUNEX sends no advertising messages and makes no decision based solely on automated processing.

3. Audience measurement

To know which pages are read and whether the website works well, ZUNEX measures its traffic with its own tool, without cookies and without any third-party service. Nothing is stored on your device for this measurement. It covers:

the page viewed and the website you came from, reduced to its domain name (for example google.com);
the device type, the browser and the system without their detailed version, and the country;
the reading time, the scrolling and the pageâs loading times;
the use of a few features: booking a call, sending a message, paying, opening a question, following a link to another website.

Your IP address is never stored. To count visitors without cookies, an identifier is computed from your IP address with its last part removed, your browser, and a random value that changes every day and is not kept. It cannot follow you from one day to the next or across other websites, and it is erased after 48 hours.

This data is only used to produce statistics for ZUNEX. It is not combined with any other data, not used for advertising and not shared with anyone. It is stored by Supabase in Paris. Details are kept for 25 months; beyond that, only anonymous totals are kept.

This measurement relies on ZUNEXâs legitimate interest in knowing how its website is used and falls within the consent exemption for audience measurement (art. 82 of the French Data Protection Act). You can object to it at any time below; your choice is kept in this browser. If your browser sends the Global Privacy Control signal, nothing is measured.

ZUNEX also counts visits from search engine and artificial intelligence assistant robots, recognised by their name. They do not concern people.

4. Recipients and service providers

Your data is available only to the members of the ZUNEX team who need it, and to the providers below, who act on ZUNEXâs instructions under a contract compliant with article 28 GDPR.

Provider	Role	Location	Safeguard
Cloudflare, Inc.	Website hosting and server	United States and European Union	EU-US Data Privacy Framework and standard contractual clauses
Supabase, Inc.	Database, client space sign-in, project files, audience measurement statistics	European Union (Paris)	Data stored in the European Union; standard contractual clauses for support access
Stripe Payments Europe, Ltd.	Payment, subscription and invoices	Ireland, with transfers to the United States	EU-US Data Privacy Framework and standard contractual clauses
Resend (Plus Five Five, Inc.)	Service emails	United States	European Commission standard contractual clauses
Google Ireland Limited	Email, calendar and video calls (Google Workspace)	Ireland, with transfers to the United States	EU-US Data Privacy Framework and standard contractual clauses

If you sign in with Google or Microsoft, these companies process the sign-in data under their own policy. Stripe and PayPal also process some payment data as controllers, in particular to prevent fraud. Your data is never sold or rented, and is disclosed to authorities only on a lawful request.

5. Transfers outside the European Union

Some providers are based in the United States or transfer data there. These transfers rely on the European Commissionâs adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for certified companies, and on the European Commissionâs standard contractual clauses for the others. A copy of these safeguards is available on request.

6. Your rights

At any time, you can:

access your data and obtain a copy;
have it corrected or completed;
have it erased, unless the law requires it to be kept (invoices in particular);
ask for its processing to be restricted;
object to processing based on legitimate interest, including audience measurement;
receive the data you provided in a machine-readable format (portability);
set instructions for your data after your death (art. 85 of the French Data Protection Act).

Write to info@zunex.tech. You will receive an answer within one month, which may be extended by two months for a complex request; proof of identity may be requested in case of reasonable doubt.

You may also lodge a complaint with the CNIL, the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the authority of the country where you live.

7. Security

Traffic is encrypted (HTTPS). Each client can only reach their own projects, with a one-time code or a Google or Microsoft account. Administration is restricted to the ZUNEX team, through a verified Google account. If a data breach puts you at risk, you will be informed as provided by the GDPR.

8. Visitors to our clientsâ websites

When ZUNEX hosts and maintains a clientâs website, the data of that websiteâs visitors is processed on behalf of the client, who is the controller (see the terms of sale). To exercise your rights, contact the publisher of that website first.

9. Changes

This policy may change. The date of the version in force is shown at the top of the page; clients are notified by email of any significant change.