Privacy Policy.
Plain-English rundown of what we collect, why, and how to delete it.
Who we are
This site (leadfinder.zayrev.com) is operated by Zay Revenue Group LLC ("ZRG," "we," "us") — a marketing agency based in South Florida. Contact: hello@zayrev.com, phone 321-666-1102.
What we collect
Account info. Email, password hash, first/last name (optional), account creation timestamp.
Tool usage. Searches you run (niche, city, ZIP), leads returned, leads you chose to enhance, coin and Zbuck balance history, purchase history.
Payments. When you buy a coin/Zbuck pack, Square processes your card. We store the Square payment ID, amount, and last-4 of the card — never the full card number. See Square's privacy policy for their handling.
Technical data. IP address, user-agent, request timestamps, referrer. Retained up to 30 days in server logs for abuse detection. Auth events (logins, password changes) retained up to 1 year in an audit log.
Cookies. Essential: session token, 2FA trusted-device flag. Optional analytics (Google Analytics 4) only if you consent.
How we use it
To deliver the tool (return lead results you searched for), bill you for coin packs, send you transactional emails (receipts, password resets), and detect abuse. We do NOT sell or rent your data. We do not use your search queries to train any AI model.
Subprocessors
- Google Places API — receives your search query (niche + city) to return business listings. Global.
- RocketReach — receives lead name + company for decision-maker enhancement when you spend Zbucks. US.
- Anthropic (Claude) — receives only the specific lead row being enhanced. Not used for training per Anthropic API terms. US.
- Square — receives recipient email + purchase amount for invoicing. US.
- Resend — transactional email delivery. US/EU.
- Fly.io — app hosting + backend. US.
- PostgreSQL (managed) — primary database. US.
Your rights (California, Florida, EU)
California residents (CCPA/CPRA): You have the right to know what we collect, the right to delete, the right to correct, and the right to opt out of "sale/sharing." We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of — but we still publish a Do Not Sell or Share My Info page per §1798.135.
Florida residents (FDBR): You have the right to access, delete, correct, and opt out of targeted advertising. Same processes apply.
EU/UK (GDPR): You have access, rectification, erasure, portability, and objection rights. Contact us with a DSR at privacy@zayrev.com.
How to delete your data
Go to /data-deletion and follow the instructions, or email privacy@zayrev.com. We respond within 30 days. Purchase/receipt records may be retained up to 7 years to meet tax and accounting obligations (Florida + federal law).
Retention
Account + tool usage data: kept while your account is active. Auth audit log: 12 months. Server logs: 30 days. Purchase + tax records: up to 7 years. Soft-deleted accounts are hard-deleted after 30 days.
Security
Passwords are bcrypt-hashed (cost 12). Sessions use JWT over HTTPS-only. 2FA + passkeys available. Payment processing handled by Square (PCI-DSS Level 1). Database access is IP-restricted and encrypted at rest.
Children
The AI Lead Finder is a B2B tool. Not intended for anyone under 18. We do not knowingly collect data from children.
Changes
We'll update this page and revise the "last updated" date. Material changes get an email notice to account holders.
Contact
Zay Revenue Group LLC · South Florida · privacy@zayrev.com · 321-666-1102