Website privacy policy

Last updated: 17 October 2026

Zossoz, Inc. ("Zossoz", "we", "us") runs this website at www.zossoz.com. This policy explains what we collect when you use it, why, who else sees it, and what you can ask us to do about it. It is written to be read, not to be survived.

The short version

We collect two things: what you type into a form, and analytics about which pages get visited. We do not record your mouse movement or clicks. We do not sell your information. We do not take payments on this site, and we never ask for a social security number, a government ID, or a card number. If you want your data gone, email privacy@zossoz.com and ask us to delete it.

What you give us

The site has four forms. All are optional; you can read every page without submitting any of them.

Free homepage mock-up. Your business name, a Google Maps link or your address, and your name, plus an email address or, if you prefer, a phone number. You can also pick the kind of business you run.

Project quote. Your name, your email address, the kind of project and what you need, and optionally your current website, a budget and a timeline.

Free Website Teardown. Your website address, your name, and your email address. Three fields. We do not ask for a phone number.

Contact form. Your name, your email address, your message, and optionally your business name.

That is the entire list. Each field is capped at 2,000 characters and stored with the time you submitted it. If one of our links brought you to the site, a form also carries the short tag from that link (see "Which link brought you here" below). If you contact us directly by email or phone, we hold whatever you chose to tell us.

None of this is a legal requirement. You can read every page of this site without giving us anything. But we cannot send you a teardown or reply to a message without a way to reach you.

What we collect automatically

Basic traffic counting. We use Umami, a cookieless analytics tool, to count page views, referring sites, and rough country and device type. It sets no cookies, stores no persistent identifier for you, and cannot follow you to another site. Because it does not store anything on your device or identify you, it runs for everyone. It also respects your browser's Do Not Track setting if you have one on.

Google Analytics. We use Google Analytics 4 to count visits and understand which pages people actually read. It records approximate location derived from IP address, device and browser type, referring site, and the pages you view. Unlike Umami, it uses cookies. It does not run at all for visitors in the EEA, the UK or Switzerland, and anyone else can turn it off (see Cookies and tracking below).

Which link brought you here. Some of our links carry a short tag that says where they were shared, for example ?ref=card on our printed card, or a tag for a business that recommended us. If you arrive through one, your browser remembers that tag for 30 days and sends it with a form you send us, so we know which card, message or recommendation brought you, and who to thank. It is kept in your browser's local storage, not in a cookie. It holds only the tag and when it was saved, and it is never sent anywhere unless you send a form. It follows the same rules as Google Analytics: it is not used in the EEA, the UK or Switzerland, and the analytics opt-out, or Global Privacy Control turned on in your browser, switches it off and clears it.

Server logs. Our host, Vercel, keeps standard request logs including IP address, user agent and request time. These are used for security and debugging.

What we do not collect

We are specific about this because generic privacy policies routinely claim otherwise:

• No payment or card details. No transaction happens on this site.
• No social security numbers, passport numbers, driver's licenses or government-issued ID.
• No accounts, logins or passwords. There is nothing to sign into.
• No precise device geolocation.
• No background checks, credit checks or application data of any kind.

The fonts on this site are served from our own domain rather than loaded from Google at page view, so using the site does not send your IP address to a font provider.

Why we use it

To answer you when you contact us. To make the mock-up, quote or teardown you asked for. To know which of our links bring people to the site, and who to thank for a recommendation. To keep records of who we have worked with and talked to. To understand which pages work and fix the ones that do not. To keep the site secure and functioning.

If you write to us, we write back. We do not add you to a marketing list off the back of a form, and we will not start sending you campaigns because you asked for a teardown. If that ever changes we will ask you first, separately, and you will be able to say no without losing anything.

We do not use your information to make automated decisions that produce legal or similarly significant effects.

Who else sees it

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do use service providers who process it on our behalf:

Provider	What it handles	Needs your consent
Formaloo	Stores form submissions; our system of record for enquiries	No
Resend	Delivers form submissions to us by email	No
Umami	Cookieless page-view counting	No; sets no cookies
Google Analytics 4	Site analytics	Not used in the EEA, UK or Switzerland; opt-out everywhere else
Vercel	Hosting, content delivery and server logs	No

Each of these processes data under its own terms and privacy policy. Submissions may also pass through an automation service we run (n8n) on their way to us.

We may also disclose information where the law requires it, to enforce our terms, to protect against fraud or abuse, or as part of a merger, acquisition or sale of the business.

Cookies and tracking

Google Analytics is the only thing on this site that sets tracking cookies. It uses them to recognize returning visitors. There is no advertising network and no session recording on this site.

If you are visiting from the EEA, the UK or Switzerland, Google Analytics never loads. Your visit is counted by Umami alone, which sets no cookies, and any Google Analytics cookies left over from a previous visit are cleared.

Everywhere else, Google Analytics runs by default, and you can turn it off. Use the Analytics opt-out control in the footer of any page. Your choice is saved in your browser, so Google Analytics stops loading there, and its cookies are cleared. We have no way to link Google Analytics data to you by name, so the opt-out works per browser: if you use another browser or clear your site data, opt out there too. If your browser has Global Privacy Control turned on, we treat that as an opt-out automatically. The opt-out also clears the link tag described under "Which link brought you here".

Beyond that, most browsers let you block or clear cookies in settings, and Google offers a browser opt-out at https://tools.google.com/dlpage/gaoptout. Blocking cookies will not break anything here.

How long we keep it

We keep information only as long as there is a reason to. In practice that means:

• Form submissions and correspondence are kept while we are talking, and afterwards for as long as we may reasonably need the record of it, for example to pick up a conversation you started, to honor work we quoted, or to meet a tax or accounting obligation.
• Analytics data expires automatically on the retention window set in each product, and we do not extend it past 14 months.
• Server logs are short-lived and kept only for security and debugging.

When none of those reasons applies any more, we delete it. You do not have to wait for that: email privacy@zossoz.com and ask us to delete your information, and we will.

Your rights

Wherever you live, you can email privacy@zossoz.com and ask us to show you what we hold, correct it, or delete it. We will not treat you differently for asking.

Some of the rights below only bind companies above a certain size, and a business this small may sit under those thresholds. We are not going to make you work that out. We apply them to everyone who asks, whether or not the law compels us to.

If you are in the EEA or the UK, you have the right to:

• Access the data we hold about you
• Correct anything inaccurate or incomplete
• Erase it
• Restrict or object to how we process it
• Receive it in a portable, machine-readable format

Our legal bases for each activity are:

• Answering you and doing the work: performance of a contract, or steps taken at your request before entering one.
• Cookieless traffic counting (Umami), and Google Analytics outside the EEA, UK and Switzerland, plus server logs and security: our legitimate interests in running, securing and improving this site. Google Analytics does not run in the EEA, UK or Switzerland.
• Anything we are legally required to keep: compliance with a legal obligation.

You also have the right to complain to your national data protection authority.

If you are in California, the CCPA and CPRA give you the right to know what personal information we have collected, used and disclosed in the past 12 months; the right to correct inaccurate information; the right to delete; the right to a portable copy; and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined. You may use an authorized agent to make a request, and we will not discriminate against you for exercising any of these rights.

If you are in Colorado, Connecticut, Oregon, Texas, Utah or Virginia, you have comparable rights to access, correct (except in Utah), delete, obtain a portable copy, and opt out of targeted advertising. If we decline a request, you may appeal by replying to our response, and we will reconsider it.

We may need to confirm your identity before acting on a request, which usually means replying from the email address you originally contacted us from. We respond to data requests within 30 days, and we acknowledge any complaint about how we handle your information within 5 business days.

International transfers

We are based in Miami, Florida. Formaloo, which stores form submissions, hosts in the EU by default. Our other providers process data in the United States, so if you contact us from the EEA or the UK your information is transferred there.

Where a provider is not covered by an adequacy decision, that transfer is made under the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum for UK transfers. Some providers additionally self-certify under the EU-U.S. Data Privacy Framework and its UK Extension. Email privacy@zossoz.com and we will tell you which mechanism applies to a given provider and send you a copy of it.

Security

The site is served over HTTPS and we use reasonable technical and organizational measures to protect what we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us personal information, email privacy@zossoz.com and we will delete it.

Changes

We will update this policy when what we do changes, and the date at the top will always tell you when it last happened. Material changes will be noted on this page.

Contact

Zossoz, Inc.
800 NE 195th St, Unit 704, Miami, FL 33179
privacy@zossoz.com
WhatsApp