Privacy Policy

Last updated: October 19, 2026

Zen.net ("Zen", "we", "us") is a link-in-bio and professional identity service operated by Radial Ventures LLC. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It covers zen.net, the pages our members publish on zen.net or on their own domains, @zen.net mailboxes, and the emails we send. Using Zen is also governed by our Terms of Service.

The short version

• We collect what we need to run the service: your email address, your handle, and whatever you choose to publish.
• A Zen page is public by design. Anything you put on it is visible to anyone.
• If you connect a social account such as TikTok, Instagram, X, or Bluesky, we only read your public profile and recent posts so we can show them on your page. We never post on your behalf, and you can disconnect at any time.
• We do not sell your personal information, we do not share it for advertising, and we do not use it to train AI models.
• Card payments are handled by Stripe. We never see or store your full card number.
• You can ask us to show you your data, correct it, or delete it. See how to delete your data, or email support@zen.net.

What we collect

If you visit zen.net or view someone's Zen page

Our servers and our content delivery network log ordinary technical information with each request, including your IP address, the page requested, the referring page, your browser's user-agent string, and a timestamp. Our content delivery network also derives an approximate location from your IP address, specifically country, region, and city. This is never your precise location, and we do not use GPS or device location.

We use product analytics to understand how people use Zen, for example which pages are visited and which features are used. Analytics records include the pages you view, the actions you take, your browser and device type, your approximate location, and a random identifier stored in your browser. If you are signed in, they are linked to your account.

If you fill in a form on a member's page

Members on paid plans can add newsletter and contact forms to their pages. If you submit one, we store what you entered (your email address, and your name and message if the form asks for them), together with your IP address and user-agent string. The member who owns the page can see your submission and can download it, without your IP address. We use your IP address only to stop spam and abuse.

For these submissions we act on the member's behalf: the member decides what to do with your details, and once they download them, their own privacy practices apply. To have a submission removed, ask the member, or email support@zen.net and we will delete it.

If you join the waitlist or register interest in a handle

We collect the name and email address you give us and the handle you asked for. From the request itself we also record your IP address, the approximate location derived from it (country, region, and city), your user-agent string, and any campaign tags (UTM parameters) present on the link you arrived from. We use this to hold your place, to invite people in the order they joined, to detect duplicate or automated signups, and to understand which channels bring people to Zen.

If you create an account

We collect your email address and, if you set one, a securely hashed version of your password. We never store your password in a readable form. You can also sign in with a one-time code sent to your email. We store your handle, your display name if you provide one, your language and time zone preferences, and your onboarding progress.

If you turn on two-step verification, we store what it needs: the secret for your authenticator app, your recovery codes, and the public key for any passkey you register. A passkey's private key never leaves your device.

If you choose "Continue with Google", Google tells us your email address, your name, and your profile picture URL. We do not receive your Google password, and we do not get access to your Gmail, Drive, contacts, or any other Google data.

If you ask us to add a verified badge to your page, we keep the evidence you submit, such as links or email addresses, along with our review notes, so we have a record of why the badge was granted.

What you publish

Your Zen page and everything on it is public. That includes your handle, bio, avatar and cover images, links, social accounts, and any other cards you add. Search engines can index it. Please do not put anything on your page that you would not want the world to see.

Images you upload are stored with our hosting provider and served from a public web address. We remove hidden location and camera data (EXIF metadata) from photos when you upload them.

Some cards show content from other services, such as a Substack or Medium feed or a TikTok video preview. To keep those cards up to date, our servers periodically fetch the public content at the address you gave us.

If you connect a social account

You can choose to connect an account you own on TikTok, Instagram, X, or Bluesky, so your Zen page can show your live profile details and recent posts. You sign in on that platform's own page and approve the access there. We never see your password for that platform.

How we treat data from connected accounts:

• Our access is read-only. We never post, like, follow, comment, or send messages on your behalf.
• We use this data only to display your profile and posts on your own Zen page, where you choose to show them. We do not use it for anything else.
• We do not sell it, share it with advertisers or data brokers, use it to build profiles of you or your followers, or use it to train AI models.
• We store the access token the platform gives us, encrypted, and a cached copy of the profile details and recent posts we display. We refresh the cache regularly, so a post you delete or make private on the platform is removed from your Zen page at the next refresh.
• When you disconnect an account, or delete your Zen account, we delete the access token and the cached profile and posts for that account. You can also revoke our access at any time from the connected apps section of that platform's own settings.

Your use of each platform is also covered by that platform's own privacy policy: TikTok, Instagram, X, and Bluesky.

If you use an @zen.net mailbox

Pro members get an @zen.net email address. To provide it we store and transmit the messages you send and receive, the forwarding address you set if any, and the technical headers of a test message used to check your mailbox is set up correctly. Your mailbox is hosted by our email provider, listed below. We do not read the content of your mail, except where you ask us to for support or where the law requires it.

If you use a custom domain

Pro members can point their own domain at their Zen page. We store the domain, the DNS records needed to connect it, and the security certificate issued for it, and we may ask which registrar you use so we can give you the right instructions.

If you subscribe to a paid plan

Payments are processed by Stripe. You enter your card details on Stripe's own payment page, not ours. Your full card number never reaches our servers and we cannot see it. We pass Stripe your account ID, email address, and name so the subscription is linked to your account.

Stripe sends us back the information we need to run your subscription: a customer and subscription identifier, which plan you are on, your billing interval, your invoice and payment history, the billing email you used, and limited card details such as the brand and last four digits. We use this to give you the features you paid for, to show you your billing history, and to keep the tax and accounting records the law requires.

Emails we send

We send emails you need to use the service, such as sign-in codes, waitlist invitations, setup steps for your mailbox or domain, and billing notices. We keep a record of which of these emails we sent you. We do not send marketing email today. If we start, we will ask first where the law requires it and every marketing email will include an unsubscribe link.

Security and administrative records

We keep a log of security-relevant account events, such as sign-ins and handle changes, together with the IP address they came from. We use these records to investigate abuse, fraud, and account takeovers. Our support staff can view the service as a member sees it when needed to resolve a problem or investigate abuse.

Cookies

We use these cookies and similar browser storage:

• A session cookie that keeps you signed in.
• A security token that protects forms against cross-site request forgery.
• A cookie that remembers your language preference, if you set one.
• A cookie that remembers a trusted device for two-step verification, if you choose that option.
• An analytics identifier, used by our product analytics provider to count visits and understand how the service is used.

We do not use advertising cookies, and we do not allow advertising networks to track you on our site. You can clear or block cookies in your browser. Blocking the analytics identifier does not affect the service, but blocking the others will stop you staying signed in.

Who we share information with

We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising. We share it only with the service providers that make Zen work, and only so they can perform that work for us:

We may also disclose information if the law requires it, for example in response to a valid legal request, or where we need to in order to protect our rights, our users, or the public. If Zen is ever involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, and we will say so before it takes effect.

Content loaded from other companies

Some parts of members' pages load directly from other companies' servers. When that happens, your browser contacts them, and they can see your IP address and which page you were on, even though we do not send them any account information. Specifically:

• Embedded players that a member adds, from YouTube (in its privacy-enhanced mode), Spotify, Apple Podcasts, SoundCloud, Vimeo, Audiomack, and Loom. Each is governed by its provider's own privacy policy.
• Images that a member links to from another website, and preview images for feed and video cards, which load from the service that hosts them.
• Profile pictures and posts from a member's connected social account, which may load from that platform's servers.

On your own account settings page, if you have not uploaded an avatar, we show a default picture from Gravatar, operated by Automattic. Your browser requests it using a one-way hash of your email address. Uploading your own avatar stops this request.

Why we are allowed to use your information

If you are in the United Kingdom or the European Economic Area, the legal bases we rely on are:

• Performance of a contract, for creating and running your account, hosting your page and mailbox, showing your connected accounts, and taking payment.
• Our legitimate interests, for operating the waitlist, keeping the service secure, preventing spam, fraud and abuse, monitoring the service for errors, and understanding in aggregate how Zen is used.
• Legal obligation, for keeping tax and accounting records of payments.
• Consent, where we ask for it, which you can withdraw at any time.

How long we keep it

We keep personal information only as long as we need it for the purposes described above.

• Waitlist entries are kept until you become a member or ask us to remove you.
• Account and page content is kept while your account is open. When it is deleted, we remove it from our live systems, and it then disappears from routine backups in the ordinary course.
• Connected account tokens and cached posts are kept until you disconnect the account or delete your Zen account.
• Form submissions are kept until the member deletes them, the member's page is deleted, or you ask us to remove them.
• Uploaded images that are never attached to a page are deleted automatically within a day.
• Security logs, analytics, and monitoring logs are kept for a limited period for investigation and to understand trends.
• Payment and invoice records are kept for as long as tax and accounting law requires, which is longer than the life of your account. Stripe keeps its own copy under its own policy.

How to delete your data

You can remove data from Zen in these ways:

• To disconnect a social account, open your settings, go to Integrations, and choose Disconnect next to the account. We delete its access token and cached posts straight away. You can also revoke access from the platform, as described in connected accounts.
• To remove your page from public view, unpublish it from the editor.
• To delete form submissions people sent you, use the delete option on your Leads page.
• To delete your whole account and everything in it, email support@zen.net from the address on your account, with the subject "Delete my account". We will confirm the request and complete the deletion within 30 days, including your page, uploads, mailbox, connected accounts, and form submissions. Records we must keep by law, such as payment history, are kept only for as long as required.
• If you are not a member, for example you joined the waitlist or filled in a form on a member's page, email support@zen.net with the email address you used and we will delete what we hold about you.

Your rights and choices

Wherever you live, you can ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it. You can also ask us to stop using it for a particular purpose, or to send you a copy in a portable format. Email support@zen.net or write to us at the address below, and we will respond as required by the law that applies to you.

Depending on where you live you may also have the right to object to or restrict certain uses, to withdraw consent, to be free from discrimination for exercising these rights, and to complain to a regulator. If you are in the United Kingdom or the European Economic Area you can complain to your national supervisory authority. If you are in California, we confirm that we have not sold or shared your personal information, and we do not use or disclose sensitive personal information beyond what is needed to provide the service.

Security

We take reasonable measures to protect your information. Traffic to zen.net is encrypted in transit, passwords are stored only as salted hashes, access tokens for connected accounts are encrypted, card details are handled entirely by Stripe, and access to production systems is limited to the people who need it. No service can promise perfect security, but if a breach affects your personal information we will notify you and the relevant regulators where the law requires it.

Where your information is held

Zen is hosted in the United States. If you use Zen from outside the United States, your information is transferred there and to the service providers listed above. Where those transfers involve personal information protected by United Kingdom or European Economic Area law, we rely on the safeguards our providers offer for international transfers, such as standard contractual clauses.

Children

Zen is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@zen.net and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top. If the change materially affects how we handle your personal information, we will tell you directly, for example by email or a notice in the product, before it takes effect.

Contact us

Zen.net is operated by Radial Ventures LLC, Seneca One Tower, 1 Seneca Street, Buffalo, NY 14203, United States. For any privacy question, or to exercise any of the rights above, email support@zen.net.