Privacy Policy

Last updated October 18, 2026 · Zoti Software LLC

This Privacy Policy explains how Zoti Software LLC (“Zoti,” “we,” “us” or “our”) collects, uses, shares and protects personal information, and the choices you have. We do not sell your personal information.

1. Who we are and what this covers

Zoti Software LLC is a Florida limited liability company located at 1000 Brickell Avenue, Suite 715 PMB 802, Miami, FL 33131. This policy applies to personal information we collect through zoti.io (the “Site”), when you contact us or buy our services, and when you use software we host and operate for you (“Hosted Software”). Together these are the “Services.”

When we process information on behalf of a business customer, for example their own customers’ data stored in Hosted Software, that customer controls it and Section 6 applies.

2. Information we collect

Information you give us

• Contact and enquiry details: name, email address, phone number, company name and the content of messages or forms you send us.
• Account details: login email, name, role, password (stored in hashed form) and settings.
• Billing details: billing name, address and transaction history. Card and bank details are collected and stored by our payment processor, Stripe. We do not store full card numbers.
• Project and business content: brand assets, website content, business profile information, posts, files and other materials you give us to deliver the Services.

Information collected automatically

• Device and usage data: IP address, browser type, device type, pages viewed, referring pages, and dates and times of access, collected through server logs and similar technologies.
• Cookies and local storage: see Section 8.

Information from third parties

• Connected accounts: if you connect a third-party account to Hosted Software (for example Google Business Profile, Google Search Console, Facebook or Instagram), we receive the information that account makes available with your permission, such as business listings, reviews, posts and performance data.
• Payment processor: confirmation of payments, refunds and disputes from Stripe.
• Agency partners: if an agency provides Hosted Software to you under its own brand, it may give us your name, email and business details to set up your account.

3. How we use information

• to provide, operate, maintain and support the Services, and to deliver the work you order;
• to respond to enquiries and send quotes, invoices, receipts and service messages;
• to process payments, manage subscriptions and prevent fraud;
• to secure the Services, troubleshoot problems and monitor for abuse;
• to improve the Services and develop new features;
• to send you news about our services if you have not opted out (you can unsubscribe at any time using the link in the email);
• to comply with law, enforce our Terms of Service and protect our rights and the rights of others.

4. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process personal information on these legal bases: to perform a contract with you; our legitimate interests in running, securing and improving our business (balanced against your rights); your consent, where we ask for it (you may withdraw it at any time); and to comply with legal obligations.

5. How we share information

We share personal information only as described here:

• Service providers that help us run the Services under contracts that limit their use of the data, including hosting and infrastructure (such as Netlify and Supabase), payment processing (Stripe), email delivery and customer support tools.
• Third-party platforms you connect, when you ask us to publish or sync content to them.
• Agency partners that provide Hosted Software to you, limited to the account and service information they need to support you.
• Legal and safety: when required by law or legal process, or to protect the rights, property or safety of Zoti, our customers or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this policy.
• With your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Data we process for our customers

When our customers use Hosted Software or software we build for them to store information about their own customers or contacts, we process that information as a service provider (or processor) on their behalf. We use it only to provide the Services to that customer, following their instructions and our agreement with them. If you are a customer of one of our clients and want to exercise privacy rights, please contact that business directly. We will help them respond.

7. Google user data

If you connect a Google account to Hosted Software, we access only the Google data needed for the features you use, such as managing your Business Profile, reading reviews or reporting on search performance. Zoti’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train general AI models. You can disconnect access at any time in the software or in your Google account’s security settings.

8. Cookies and similar technologies

The Site uses only cookies and browser storage that are needed for it to work, for example to remember that you have already seen the intro animation during your visit and to keep you signed in to Hosted Software. We do not currently use advertising cookies. If we add analytics or marketing tools, we will update this policy and, where the law requires, ask for your consent first. You can control cookies through your browser settings. We honor Global Privacy Control (GPC) signals as an opt-out of any sale or sharing, as applicable law requires.

9. How long we keep information

We keep personal information for as long as needed to provide the Services and for the purposes in this policy. That includes keeping business and billing records for as long as tax and accounting laws require, generally up to seven years. When we no longer need information, we delete or anonymize it. After a subscription ends, customer content in Hosted Software is deleted after the 30-day export window described in our Terms, unless the law requires us to keep it.

10. Security

We use administrative, technical and physical safeguards designed to protect personal information. These include encryption in transit, encryption of stored credentials and access tokens, access controls and least-privilege access for our team. No system is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities as required by law, including Florida’s data breach notification law.

11. Your rights and choices

Depending on where you live, you may have the right to:

• know or access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• receive a portable copy of your information;
• opt out of marketing emails, and of any sale, sharing or targeted advertising (we do not engage in these);
• object to or restrict certain processing, or withdraw consent (EEA and UK); and
• appeal our decision on your request, and complain to your local data protection authority.

To make a request, email hello@zoti.io. We will verify your identity before acting on a request and respond within the time required by law, usually within 30 to 45 days. You may use an authorized agent where the law allows. We will not discriminate against you for exercising your rights.

12. International transfers

We are based in the United States, and we and our service providers process information in the United States and other countries. Where the law requires, we use appropriate safeguards, such as Standard Contractual Clauses, when transferring personal information from the EEA, UK or Switzerland.

13. Children

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 13 (or under 16 where the law sets a higher age). If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. We will post the new version here and change the “Last updated” date. If a change is material, we will tell active customers by email before it takes effect.

15. Contact us

For questions or requests about privacy, contact us: