Privacy Policy
Last updated: September 9, 2026
Who we are
Zion Labs LLC is an AI visibility and SEO consultancy based in Brooklyn, New York. For the purposes of UK and EU data protection law, Zion Labs LLC is the data controller for information collected through zionlabs.io. Reach us at contact@zionlabs.io.
What we collect
- Things you type into a form. Your email address on every form, and depending on which one: your name, company, phone number, the domain you asked us to scan, and any message you write. Around seventeen places on this site take an email, from the newsletter box in the footer to a report request on a free tool.
- What a free tool scanned. When you run one of the tools we record the domain or page URL you entered and the result. If a permanent report page was created, that result is stored so the link keeps working.
- Analytics. We use Google Analytics 4. It sets cookies and assigns your browser a random identifier, which under UK and EU law counts as personal data even though it does not carry your name. It records pages viewed, referrer, approximate location from your IP address, and device and browser type. We have IP anonymisation switched on.
- Billing details, if you buy something. Payments run through Stripe. Stripe collects your card and billing address directly. We never see or store your card number.
- Standard server logs. Our host records IP addresses and request metadata for security and abuse prevention.
Cookies, and how to refuse them
We use one category of non-essential cookie: Google Analytics. Nothing on this site uses advertising or cross-site tracking cookies.
If you are in the UK, the EEA or Switzerland, analytics are switched off by default and no analytics cookie is written unless you accept the banner. You can change your mind at any time through the Cookie choices link in the footer, and declining after accepting deletes the cookies already set.
Elsewhere, including the United States, analytics run without a banner, which is the normal practice under those laws. The same footer link still lets you turn them off.
Some things we set are not cookies at all and are exempt because the site cannot work without them: your consent choice itself, and a note of whether you have already unlocked a tool report. These live in your browser's local storage and never leave your device.
Who else processes your information
We use these providers. Each is bound by its own contract to process data only on our instructions.
- Cloudflare — hosting, content delivery, and storage of tool results
- Google (Analytics) — website analytics
- Formspree — receives form submissions
- Stripe — payments
- Resend — email delivery, where we send you something you asked for
Some of these are US companies. Where information about someone in the UK or EEA is transferred to the US, we rely on the providers' Standard Contractual Clauses or their certification under the EU-US Data Privacy Framework.
Why we are allowed to hold it
Where UK or EU law applies, our lawful bases are: consent for analytics and marketing email, which you can withdraw at any time; performance of a contract for anything needed to deliver work you have bought; and legitimate interests for replying to an enquiry, keeping the site secure, and preventing abuse.
What we do not do
- We do not sell, rent or trade your personal information, and we never have.
- We do not use your data to train any model.
- We do not run advertising or cross-site tracking pixels.
- We do not knowingly collect information from anyone under 13.
How long we keep it
- Form submissions and enquiries: up to 24 months from your last contact with us.
- Mailing list: until you unsubscribe.
- Tool results and report pages: up to 12 months, then automatically deleted.
- Analytics: 14 months, which is Google's setting we have chosen.
- Billing records: as long as tax and accounting law requires, currently seven years.
Report pages are unlisted, not private
A report page at /audit/… or /report has an unguessable address
and is not indexed by search engines, but it has no password.
Anyone you send the link to can read it. That is deliberate, so you can
forward a report to a colleague, and each page says so in its own footer.
Your rights
Wherever you are, you can email contact@zionlabs.io and ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We will respond within 30 days and we will not charge you.
UK and EEA. You have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You may also complain to your national supervisory authority, or in the UK to the Information Commissioner's Office.
California. You have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of, but the request route above works the same.
Security
The site is served over HTTPS. Access to the systems holding this data is limited to people who need it. No system is perfectly secure, and we will tell you and the relevant regulator without undue delay if a breach affects your information.
Changes
If we change this policy we will update the date at the top. Where a change materially affects how we use information already collected, we will say so directly rather than rely on you re-reading the page.
Contact
Zion Labs LLC, Brooklyn, New York, United States. contact@zionlabs.io