Privacy Policy

ZagaPrime LLC (doing business as ZagaPrime AI Hub and ZagaPrime Solutions) ("ZagaPrime", "we", "us") is a New Jersey limited liability company. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit zagaprimeaihub.com or zagaprime.com, create an account, join our community, buy a membership, course, workshop, token pack, or digital product, book a call, or engage us for done-for-you automation, website, branding, or consulting services (together, the "Services").

This policy also applies to email, SMS, and messaging we exchange with you, and to payments processed on our behalf by Stripe. It does not apply to third-party websites we link to, or to data our clients ask us to process on their behalf during a service engagement — that is governed by our Data Processing Addendum.

Information you give us.

• Account details: name, email address, password or Google sign-in identity, profile photo, business name and type, goals you select during onboarding.
• Purchase details: billing name, email, phone, billing address, company name, tax ID (if you enter one), and the items you buy. Card and bank details are entered directly into Stripe's secure checkout — we never see or store full card numbers.
• Content you create: forum posts, comments, prompts, saved templates, workbook answers, showcase submissions, tool reviews, and support messages.
• Forms: newsletter sign-ups, strategy-call requests, intake questionnaires, workshop enrollment (attendee name, email, phone), and tool submissions.
• Client project data: for done-for-you engagements, the business systems, documents, and credentials you choose to share so we can build and run your automations.

Information collected automatically.

• Usage data: pages viewed, features used, prompts run, token balance, timestamps, referring URLs.
• Device data: IP address, browser, operating system, approximate location derived from IP, and cookie identifiers (see our Cookie Policy).
• Payment events: Stripe sends us confirmation of payments, subscription status changes, refunds, and disputes so we can grant access and keep records.

Information from other sources. Google (when you sign in with Google), Stripe (payment status and fraud signals), our CRM and scheduling tools, and publicly available business information you provide for an engagement.

We do not knowingly collect Social Security numbers, government IDs, health information, or biometric data. Please do not upload them.

• Provide the Services: create your account, deliver memberships, courses, workshops, token top-ups, and downloads; run AI features you request; build and support client automations.
• Process payments, send receipts, manage subscriptions and renewals, prevent fraud, and handle refunds and disputes.
• Communicate: transactional emails (receipts, enrollment confirmations, access changes), support replies, and — with your consent — newsletters, AI tips, and offers. Every marketing email has an unsubscribe link.
• Personalize recommendations (for example, tools and trainings matched to your business type and goals).
• Improve and secure the Services: analytics, debugging, abuse prevention, and testing.
• Comply with law, enforce our Terms, and protect our rights and the safety of our users.

AI features. Prompts and content you submit to AI tools on the site (prompt generator, AI assistants, content generators, workbook helpers) are sent to third-party large-language-model providers to generate a response. We do not use your prompts to train our own models. Do not enter confidential or regulated data into AI features.

Legal bases (EEA/UK visitors). Performance of a contract, our legitimate interests (running and improving the Services, security, marketing to existing customers), your consent (newsletters, cookies that are not strictly necessary), and legal obligations (tax and accounting records).

We do not sell personal information, and we do not share it with third parties for their own cross-context behavioral advertising. We share information only with:

Community posts, showcase submissions, and tool reviews are public by design. Anything you post there can be seen by other members and visitors.

We use strictly necessary cookies (sign-in sessions, security, checkout), functional cookies (remembering preferences), and analytics cookies (understanding which pages and features are used). Stripe sets its own cookies on checkout pages for fraud prevention. Details, and how to control them, are in our Cookie Policy.

We honor Global Privacy Control (GPC) signals as an opt-out of any sale or sharing of personal information where required by law.

• Account and community content: for as long as your account is active, then deleted or anonymized within 90 days of a verified deletion request, unless we must keep it for legal reasons.
• Purchase, invoice, and tax records: 7 years, as required for accounting and tax compliance.
• Leads and intake forms: up to 24 months from last contact, unless you become a customer.
• Client project data and credentials: for the term of the engagement plus 30 days, then deleted or returned, unless a signed agreement says otherwise.
• Server logs and analytics: typically 12–26 months.

We use HTTPS everywhere, hosted authentication, role-based access, least-privilege credentials, and encrypted storage from our providers. Payment card data is handled entirely by Stripe, a PCI DSS Level 1 service provider. No method of transmission or storage is 100% secure; if we learn of a breach affecting your personal information we will notify you and the relevant authorities as required by law, including the New Jersey Identity Theft Prevention Act.

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and receive a copy in a portable format.
• Correct inaccurate information.
• Delete your personal information (subject to legal exceptions such as completed transactions and tax records).
• Opt out of targeted advertising, the sale of personal information, or profiling that produces legal or similarly significant effects. We do not sell personal information or use it for targeted advertising by third parties.
• Limit the use of sensitive personal information (we do not use sensitive information for anything beyond providing the Services).
• Not be discriminated against for exercising these rights.
• Appeal a decision we make about your request.

New Jersey residents: the New Jersey Data Privacy Act gives you the rights above. We respond within 45 days (extendable once by 45 days when reasonably necessary) and you may appeal a denial by replying to our decision; if the appeal is denied, you may contact the New Jersey Division of Consumer Affairs.

California residents (CCPA/CPRA): you have the rights to know, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and non-discrimination. In the last 12 months we have collected the categories listed in Section 2 and disclosed them to the service-provider categories in Section 4 for business purposes. We have not sold or shared personal information. You may designate an authorized agent to make requests on your behalf.

Other U.S. states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island): you have similar rights, which we honor for all U.S. residents regardless of state.

EEA, UK, and Switzerland: you have the rights above plus the right to object to processing, restrict processing, withdraw consent, and lodge a complaint with your supervisory authority. Transfers to the United States rely on standard contractual clauses and equivalent safeguards offered by our providers.

How to exercise your rights: email kzee@zagaprime.com with the subject "Privacy request", or use the account settings page to update or delete your profile. We will verify your identity using the email on your account. There is no fee for a reasonable number of requests.

• Newsletters and promotional email are sent only if you opt in. Unsubscribe with the link in any email or by contacting us; transactional emails (receipts, access, security) continue while you have an account.
• SMS: if you give us your mobile number and agree to receive texts, message frequency varies and message/data rates may apply. Reply STOP to opt out and HELP for help. Consent to SMS is not a condition of purchase.
• We comply with CAN-SPAM and the TCPA. We never sell your contact details.

The Services are for adults and businesses. We do not knowingly collect personal information from anyone under 18, and never from children under 13 (COPPA). If you believe a minor has provided us information, contact us and we will delete it.

We are based in the United States and our providers store data in the U.S. and other countries. By using the Services from outside the U.S., you understand your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.

We will post any changes here and update the effective date. For material changes we will also email account holders or show a notice on the site before the change takes effect.

ZagaPrime LLC
New Jersey, USA
Email: kzee@zagaprime.com

Related policies: Terms of Service · Refund & Cancellation Policy · Cookie Policy · Data Processing Addendum