Privacy Policy

1. Who we are

The controller of your personal data is Zeta Cortex, 141 Tsarigradsko shose Blvd, 1784 Sofia, Bulgaria (“we”, “us”). You can reach us about anything in this policy at contact@zetacortex.ai.

2. What we collect

Waitlist and early access requests

When you join the waitlist we collect your full name, work email, company, role and anything you choose to tell us in the “What are you securing?” field. If you type your email into the form on our homepage, it is only carried over to the waitlist form and is not stored until you submit that form.

Newsletter

When you subscribe to the Agent Security Brief we collect your email address.

Emails you send us

If you write to us, we keep your message, your email address and any details you include so we can reply.

Technical data

Like any website, our hosting provider automatically processes technical data when you visit, such as your IP address, browser type, the pages requested and the time of the request. This is used to deliver the site, keep it secure and investigate errors. We also store your cookie choices in a strictly necessary cookie described in our Cookie Policy.

We do not currently use analytics, advertising or tracking tools. If we add any, they will only run after you opt in through the cookie settings.

3. Why we use it and our legal basis

• Waitlist and early access: to contact you about access to Zeta Cortex and to understand your use case. Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in developing our business (Art. 6(1)(f)).
• Newsletter: to send you the monthly Agent Security Brief. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Replying to you: to answer your questions. Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f)).
• Security and operation of the site: to deliver pages, prevent abuse such as spam submissions and fix errors. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f)).
• Legal obligations: where we must keep or disclose data by law (Art. 6(1)(c)).

We do not sell your personal data, use it for automated decision-making that has legal effects on you or share it with advertisers.

4. Who we share it with

We use a small number of service providers who process data on our behalf under data processing terms and only on our instructions:

• Vercel Inc. hosts the website and processes the technical data described above.
• Google stores waitlist and newsletter submissions in Google Sheets.

We may also disclose data to professional advisers under a duty of confidentiality, to a successor in the event of a merger or acquisition, or where required by law.

5. International transfers

Some of our providers are based in, or access data from, the United States. Where personal data leaves the European Economic Area, it is protected by an adequacy decision such as the EU-US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

6. How long we keep it

• Waitlist data: until early access outreach is complete and at most 24 months after our last contact with you, unless you become a customer.
• Newsletter: until you unsubscribe or withdraw consent.
• Correspondence: as long as needed to handle your request and for up to 24 months after.
• Technical logs: for the limited period set by our hosting provider, typically days to weeks.
• Your cookie choices: 6 months, after which we ask again.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we process it, including processing based on legitimate interest
• receive your data in a portable format
• withdraw consent at any time, without affecting processing that happened before

To use any of these rights, including unsubscribing from the newsletter or leaving the waitlist, email contact@zetacortex.ai. We will respond within one month. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or the data protection authority in the EU country where you live or work.

8. Security

We protect personal data with access controls, encrypted connections (HTTPS) and by limiting who on our team can see submissions. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

9. Children

Our website and services are intended for businesses and are not directed at anyone under 16. We do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy as our website and services change. The “last updated” date above shows when it last changed, and we will tell you directly about significant changes where we have your contact details.

11. Contact

Questions or requests about your personal data can go to contact@zetacortex.ai or by post to Zeta Cortex, 141 Tsarigradsko shose Blvd, 1784 Sofia, Bulgaria.