Privacy Policy

1. Introduction

Zip2Geo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API service that provides geographic coordinate data based on postal codes (the "Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored in encrypted form)
• Subscription plan information

2.2 Authentication and Usage Data

We automatically collect certain information when you use the Service:

• Sign-in count and timestamps
• IP addresses used to access your account
• API request timestamps and usage statistics
• API keys and their associated configuration (including allowed hosts)
• Postal codes and country codes submitted in API requests

2.3 Payment Information

For paid subscriptions, we use Stripe to process payments. We collect and store:

• Stripe customer ID
• Billing information (processed securely through Stripe, not stored on our servers)

We do not store credit card numbers or other sensitive payment details. All payment processing is handled by Stripe in accordance with their privacy policy and security standards.

2.4 Technical Information

We may collect technical information including:

• Browser type and version
• Device information
• Referrer information (when configured for API key host restrictions)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and manage your account
• Authenticate your identity and secure your account
• Track API usage and enforce subscription limits
• Respond to your inquiries and provide customer support
• Send you important updates about the Service (e.g., changes to terms, security notices)
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of passwords and sensitive data
• Secure API key generation and storage
• Regular security assessments and updates
• Access controls limiting who can view your data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account information is retained while your account is active
• Usage data is retained for billing and service improvement purposes
• We may retain certain information after account closure as required by law or for legitimate business purposes

6. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

6.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as:

• Stripe: Payment processing and subscription management
• Hosting providers: Infrastructure and data storage
• Analytics services: Service usage and performance monitoring

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access and review your account information through your account dashboard
• Correction: You can update your account information at any time
• Deletion: You can request deletion of your account and associated data
• Data Portability: You can request a copy of your data in a structured format
• Opt-out: You can opt out of non-essential communications

To exercise these rights, please contact us through your account dashboard or using the contact information provided below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze Service usage. You can control cookie preferences through your browser settings, though disabling cookies may affect the functionality of the Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email or through the Service. Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

13. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to access, rectify, or erase your personal data
• The right to restrict or object to processing of your personal data
• The right to data portability
• The right to withdraw consent at any time
• The right to lodge a complaint with a supervisory authority