Privacy Policy

Last updated: 14 October 2026

This policy explains what Zoptin (“we”, “us”) collects when you use zoptin.com and the Zoptin application at app.zoptin.com, and how we use it.

Information we collect

• Account details: name, email address, agency name and role, and a securely hashed password.
• Client and location details you add, such as business names, addresses and contact information.
• Content you create in Zoptin, such as scheduled posts and review replies.
• Basic usage and technical data, such as log records and an audit trail of actions in your workspace.
• Billing details handled by our payment provider; we do not store full card numbers.

Google user data

When you connect a Google Business Profile location, Zoptin requests access through Google’s official OAuth flow. We use the access only to provide the features you ask for: reading location details, reviews and performance insights, and publishing posts and replies on your behalf. We store the access and refresh tokens required to do this, protected and scoped to your agency.

Zoptin’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising, or allow humans to read it except where needed for security, to comply with law, or with your consent. You can revoke Zoptin’s access at any time from your Google Account permissions page or by disconnecting the location in Zoptin.

How we use information

• To provide, secure and support the service.
• To send service emails such as invitations, notifications and account messages.
• To process subscription payments.
• To meet legal obligations.

Sharing

We share data only with providers that help us run Zoptin (hosting, database, email delivery and payments) and where the law requires it. We do not sell personal information.

Cookies

We use only essential cookies, for example to keep you signed in and protect your session. We do not use advertising cookies.

Retention and deletion

We keep data while your account is active. You can disconnect Google access or ask us to delete your account and data at any time; see Data Deletion. Some records may be kept for a limited period where required for legal or security reasons.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting us.

Security

See how we protect your data on our Security page.

Contact

Questions about this policy: hello@zoptin.com.