Who controls the data
Zarif Automates controls the personal data collected through this site for its newsletter, product sales, delivery, and support. Privacy requests can be made through the support page. Identity may need to be verified before a request is completed.
Data collected and why
- Site use: page path, referrer, campaign tags, approximate location, browser, device, and privacy-safe funnel events are used to understand aggregate traffic and improve the site. Funnel events do not intentionally include names, emails, payment IDs, or access tokens.
- Newsletter and free pack: email address, consent, and the page where signup occurred are stored in the owner-controlled lead database, used to provide the requested pack, and may be synchronized to the configured email provider for opted-in automation emails. Every marketing email includes an unsubscribe route.
- Purchases: Stripe processes payment details. Zarif Automates receives and stores the checkout and payment references, purchase email, product/version, amount, currency, payment status, timestamps, entitlement status, and delivery outcome needed to fulfill the order, prevent duplicates, recover access, handle refunds, and maintain business records. Card numbers are not stored by Zarif Automates.
- Delivery and support: the purchase email and message-delivery metadata are used to send private access links and diagnose failed delivery. Support messages and information voluntarily supplied with them are used to answer the request.
- Security: limited request information may be processed to rate-limit forms, prevent abuse, troubleshoot faults, and protect the site. Raw access tokens are not intentionally written to analytics events.
Services that process data
The site uses Cloudflare for hosting, security, D1 lead and order records, and private server code containing the paid product archive; Stripe for payment; Resend for transactional email; Kit when configured for opted-in marketing email; and Plausible for aggregate analytics. Each provider processes data under its own terms and privacy documentation:
- Cloudflare privacy policy
- Stripe privacy center
- Resend privacy policy
- Kit privacy policy and subscriber data-processing terms
- Plausible data policy
Plausible states that it does not use analytics cookies or persistent identifiers and reports site activity in aggregate. Checkout and linked third-party sites may apply their own cookies or similar technologies under their policies.
Legal grounds and disclosure
Depending on location and context, processing is based on the need to perform a purchase contract, consent for marketing, legitimate interests in operating and securing the site, and legal obligations such as accounting or fraud prevention. Data is shared with service providers only as needed for these purposes, with professional advisers or authorities where legally required, or in connection with a legitimate business transfer. Zarif Automates does not sell personal information.
Retention and international processing
Newsletter records remain until unsubscribe, deletion, or account closure, subject to suppression records needed to respect opt-out. Order and transaction records are kept as required for fulfillment, refunds, accounting, tax, fraud prevention, and legal obligations. Delivery and support records are kept only as reasonably needed for operations and disputes. Providers may process data in countries different from the visitor’s country and use their stated transfer safeguards.
Your choices and rights
Use the unsubscribe link in any marketing email to stop marketing. Depending on applicable law, a person may also request access, correction, deletion, restriction, portability, or objection, and may complain to a local regulator. Some order information cannot be deleted immediately when retention is required by law or needed to establish or defend legal claims.
Children and changes
The paid product is not offered to anyone who lacks legal capacity to purchase it, and the site does not knowingly solicit personal data from children under 13. This notice may change when products, providers, or legal requirements change; the effective date above identifies the current version.