Privacy Policy
ZShot Privacy Policy Effective Date: September 4, 2026 Last Updated: September 4, 2026 (Previous versions of this policy are available upon request.) SUMMARY OF KEY POINTS Before diving into the details, here is a quick overview of how we handle your privacy at Scale Assembly: What do we collect? The minimum required to sell you a product and keep your licenses in order: purchase records, license activation data, and whatever you send us when you request a trial or contact support. What don't we collect? ZShot does not automatically send us the pages you capture or the files it produces. ZShot has no usage telemetry, no crash reporting, and no accounts. Do we intentionally collect sensitive personal information? No. ZShot requires no biometrics, health data, precise geolocation, government identifiers, or anything similar. If you contact support, please do not send sensitive information unless it is necessary for us to assist you. Who processes payments? Our merchant of record, currently Lemon Squeezy, under its own buyer terms and privacy policy. Who do we share your personal information with? Only the service providers needed to run the business. We never sell your personal data. What are your privacy rights? You can access, correct, delete, and port your data, and opt out of any marketing. How can you contact us? support@zshot-app.com. *** 1. INTRODUCTION This is the privacy policy for ZShot and its associated sites and services, a downloadable software tool that captures and formats websites locally on your machine. Because ZShot runs on your systems rather than ours, we only need a small amount of information — enough to sell you a license and keep it working. This policy explains in plain language what we collect, why we need it, and how we protect it. It applies to users of ZShot and visitors to our websites (scaleassembly.com, zshot-app.com, zshot-cli.com, and zshot-licensing.com). Questions are welcome at support@zshot-app.com. 2. WHAT WE COLLECT & WHY We believe in data minimization: we collect what running a licensed software product requires, and nothing else. Purchase records Purchases are handled by our merchant of record, currently Lemon Squeezy, which collects your payment details directly under its own terms and privacy policy. We receive the purchaser information needed to issue and manage your license — such as your name, email address, and transaction reference. We do not receive or store your card details. Legal Basis: Contract (we need this to deliver what you bought) and Legal Obligation (tax and accounting record-keeping). License activation data When ZShot activates, validates, or refreshes a license key, it contacts our licensing server and sends the license key, a machine identifier, the machine's hostname, and the ZShot version and platform. We use this to enforce activation limits, keep your license working across your machines, and — because hostnames are recognizable to you — to help you identify which of your machines holds an activation when you contact support. An unlicensed Free-tier copy does not contact our licensing server and sends us no license activation data. Legal Basis: Contract and Legitimate Interest (providing the licensed product, enforcing activation limits, preventing license abuse, and supporting activation management). Website and server access data When your browser visits our websites, or ZShot contacts our licensing infrastructure (or, for the Mac app, checks for updates), our servers and hosting providers generate standard access logs containing information such as your IP address, request time, requested URL, user-agent, and response status. We use these for security, reliability, abuse prevention, and troubleshooting, and retain them only briefly. Legal Basis: Legitimate Interest (operating and securing our services). Trial requests and support If you request a trial, you give us your name and email address so we can issue the trial key. If you email support, we receive whatever you choose to send — including, if you volunteer them, diagnostics or captures, which ZShot's documentation warns may contain private data. We use these only to help you. Legal Basis: Contract (including steps taken at your request before entering one) and Legitimate Interest (responding to you). 3. WHAT ZSHOT DOES NOT SEND US This is the most important section of this policy. ZShot processes web pages locally on your machine. It does not automatically transmit the pages you capture or the files you produce to Scale Assembly; if you voluntarily send us captures, diagnostics, or logs for support, we receive and process what you choose to provide. ZShot naturally makes network requests to the websites you ask it to capture — the privacy point is that those requests are not going to us. ZShot has no usage telemetry and no crash reporting: we disable all telemetry we are aware of in its underlying browser components. We do not take responsibility for third-party components, or for the web pages you access, including any telemetry of their own. If you configure ZShot's AI features, ZShot may send prompts, page text, screenshots or other page content, and related request information directly from your machine to the AI provider or endpoint you configure. That traffic does not pass through Scale Assembly, and the provider's handling of it is governed by your agreement and privacy relationship with that provider. Some providers can also execute tools, such as web searches, from their own infrastructure outside ZShot's control. 4. WHEN WE SHARE YOUR INFORMATION We never sell your personal data. We share information only in these limited circumstances: Merchant of Record: purchases are handled by our merchant of record, currently Lemon Squeezy, which has its own legal relationship with you as the buyer and processes your payment information under its own terms and privacy policy. Essential Service Providers: the infrastructure providers that host our licensing server and websites. A current list of service providers is available on request at support@zshot-app.com. Legal Requirements: we will disclose information if legally required to by a court order, subpoena, or other lawful request from public authorities. Business Transitions: if Scale Assembly is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, and we will notify you before it becomes subject to a different privacy policy. With Your Consent: any other sharing happens only with your explicit permission. 5. YOUR PRIVACY RIGHTS Depending on where you live, privacy laws (including the GDPR, UK GDPR, PIPEDA, and US state privacy laws) grant you rights over your personal data. We extend these rights to all our users globally: Access Your Data: request a copy of the personal information we hold about you. Correct Inaccuracies: tell us what's wrong and we will update it. Delete Your Data: ask us to erase your personal data; we will, unless we have a legal obligation to keep it (like transaction records). Port Your Data: request your data in a structured, commonly used, machine-readable format. Opt Out of Marketing: every marketing email we send includes an unsubscribe link. Purchasing ZShot, activating a license, or requesting a trial does not by itself subscribe you to marketing communications. Withdraw Consent: where processing relies on your consent, you can withdraw it at any time without affecting earlier processing. Lodge Complaints: you may complain to your data protection authority (in the UK, the Information Commissioner's Office; in the EEA, the authority of your country of residence). To exercise any of these rights, email support@zshot-app.com. We respond within the timeframes applicable law requires. 6. DATA SECURITY We take the security of your data seriously. What We Do: data in transit to our licensing server and websites is encrypted, access to personal data is limited to the people who need it, and we keep the amount of data we hold small — the best protection of all. What We Don't Claim: no method of transmission or storage is 100% secure. We use commercially reasonable means to protect your data, but cannot guarantee absolute security. Breach Notification: if a breach compromises your personal information, we will notify you and the relevant authorities without undue delay, as applicable law requires. 7. DATA RETENTION We keep information only as long as its purpose requires. License records: retained while your license is active, and for a reasonable period afterward so lapsed licenses can be restored and support questions answered. Transaction records: retained as long as tax and accounting laws require. Trial and support correspondence: retained as long as needed to handle the request and a reasonable period afterward. Licensing server logs: standard access logs, retained briefly for security and troubleshooting. Marketing preferences: if you opt out, your address stays on a do-not-contact list so we can honor your choice. 8. COOKIES & WEBSITES ZShot itself sets no cookies — it is a local tool. Our websites run no analytics and set no tracking cookies; the only automatic collection is the standard server access logs described in Section 2. Our checkout is provided by Lemon Squeezy, which may use cookies on its own pages under its own policy. With nothing tracking you, there is little to opt out of, and we honor applicable browser opt-out preference signals where the law requires it. 9. CHILDREN'S PRIVACY ZShot is designed for general audiences and is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact support@zshot-app.com and we will delete it. 10. INTERNATIONAL TRANSFERS Scale Assembly operates from the United States and serves customers globally, so your information may be transferred to, stored, or processed in countries other than your own. Where applicable law requires a transfer mechanism, we and our service providers rely on legally recognized safeguards appropriate to the transfer, which may include adequacy decisions or Standard Contractual Clauses. 11. CHANGES TO THIS POLICY We may update this policy as laws and our business evolve. If we make material changes, we will post a prominent notice on our websites, and where we have your email address for an active license, we will make reasonable efforts to notify you before the changes take effect. The current version is always available at the address where you found this one. 12. CONTACT US The data controller for the information described in this policy is: Scale Assembly, LLC 506 S Spring St #13308 SMB#114261 Los Angeles, CA 90013 United States support@zshot-app.com Privacy questions, requests, and feedback are welcome at that address. We aim to respond promptly. 13. CATEGORIES OF PERSONAL INFORMATION WE COLLECT This table outlines the categories of personal information we collect; it is also intended to provide the category disclosures California law calls for, where applicable. We do not intentionally collect Sensitive Personal Information as part of ZShot's normal operation, do not use or disclose Sensitive Personal Information for purposes that would require a right to limit under applicable California law, and do not sell or share personal information for cross-context behavioral advertising. CATEGORY SOURCES BUSINESS PURPOSE CATEGORIES OF THIRD PARTIES DISCLOSED TO RETENTION PERIOD Identifiers (name, email, IP address) You (trial requests, support); our merchant of record (purchases); automatic (access logs) License issuance and management, trials, support, security Merchant of record; infrastructure providers While your license is active plus a reasonable period; logs briefly Commercial information (purchase, license, and transaction records) Our merchant of record; our licensing server Delivering and managing what you bought Merchant of record; infrastructure providers Transaction records as tax and accounting law requires Device and license information (license key, machine identifier, hostname, ZShot version and platform) Automatically sent by licensed copies of ZShot during activation and validation License enforcement; identifying your activated machines in support conversations Infrastructure providers While your license is active plus a reasonable period Internet or network activity (website and licensing-server access logs) Automatic Security, reliability, abuse prevention, troubleshooting Infrastructure providers Briefly Customer-support information (messages, diagnostics, and attachments you voluntarily provide) You Helping you None As long as needed to handle the request plus a reasonable period 14. AUTOMATED DECISION-MAKING Scale Assembly does not use automated decision-making or profiling that produces legal or similarly significant effects on our users. License validation is a mechanical check of a key you purchased, not profiling. 15. CONTROLLER AND PROCESSOR ROLES For business customers who need the formal framing: ZShot does not transmit the content you capture and process to Scale Assembly as part of the service, so Scale Assembly acts as neither a data controller nor a data processor of captured content merely because you use ZShot — it is processed locally on your systems, under your control. If you separately provide captured content to us for support, we process that submitted information as described in this policy. For the license, purchase, trial, and support data described in this policy, Scale Assembly is the data controller.