Privacy Policy

This Privacy Policy describes how Savy Advisors LLC ("we," "us," or "our") collects, uses, and processes personal data when you visit or interact with zksecurity.io (the "Site").

We are committed to protecting your personal information and your right to privacy. By accessing or using our services, you agree to the terms described in this policy.

We only collect information necessary to provide our services and improve your experience. We do not sell or rent your personal data to third parties for marketing purposes.

Information You Provide (Contact Form)

When you submit the contact form, you may provide:

• Name — to address communications accurately.
• Email address — to send relevant information and updates regarding your inquiry.
• Project details — to understand the scope and technical requirements of your zero-knowledge security needs.

We collect this data to assess your needs, provide accurate consultation, and fulfill your request for services.

Automatically Collected Information (Analytics)

We use Cloudflare Web Analytics to understand how the Site is used: pages visited, time on site, and general traffic source. Cloudflare Web Analytics does not use cookies or an identifier that links the visit back to you. Advertising cookies are separate and are described below.

• Fulfilling requests: To respond to your inquiries, provide project proposals, and deliver ZK security advisory services.
• Communication: To communicate with you regarding updates and next steps.
• Improvement: To analyze Site traffic patterns and identify areas where we can improve content, security, and user experience.
• Security: To detect and prevent fraudulent activity, bot attacks (using Cloudflare Turnstile), and maintain the integrity of the Site.

We use reputable third-party services to operate and improve the Site. These processors act on our behalf and are contractually obligated to protect your data.

• Cloudflare — hosting, CDN, DNS, Turnstile bot protection on the contact form, and cookieless Web Analytics.
• Resend — transactional email delivery (e.g., automated confirmations). Resend processes the minimum amount of email data required for delivery.
• Google AdSense — third-party display advertising on long-form guides, research notes, and other editorial pages.

Cookies and advertising

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and other sites on the Internet.

You can opt out of personalized advertising at https://adssettings.google.com and at https://www.aboutads.info.

The Site uses cookies for Google AdSense. The contact form may set a Cloudflare Turnstile cookie to complete its bot check. Cloudflare Web Analytics does not use cookies.

Affiliate links

Some pages show affiliate links, labeled Affiliate, separately from a Google ad's Sponsored label. An affiliate click is routed through our first-party /track endpoint, which records the destination URL, the listing type and slug, and the source page. We may earn a commission on those referrals. Affiliate links do not depend on an advertising cookie. Directory listings of tools and audit firms also use that same /track path when they leave the Site.

Contact form submissions: We keep the data you provide solely for the duration required to assess your request and complete service fulfillment. Once this period is over, we securely delete the data within 90 days.

Analytics data: General, anonymized usage data is retained in an aggregated format for statistical purposes and is not linked to identifiable individuals.

Depending on your location, you have specific rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: If any data we hold is inaccurate or incomplete, you can ask us to correct it.
• Right to Deletion: You can request deletion of your personal data, subject to certain legal requirements.
• Right to Portability: You can receive your data in a structured, commonly used, machine-readable format.

Regional Compliance

• CCPA (California): California residents have the right to know what personal information is being collected, the right to delete that information, and the right to opt-out of the sale of personal information. We confirm we do not sell your personal information.
• GDPR (EU): We commit to processing your personal data transparently and securely. Your data rights under GDPR, including the right to object and restriction of processing, are fully respected.
• Children's Privacy: The Site is not directed at individuals under the age of 13. We do not knowingly collect information from minors.

We implement technical and organizational measures to protect your data, including:

• Secure hosting and CDN services (Cloudflare).
• Encryption for data transmission (SSL/TLS).
• Limiting staff access to personal data on a need-to-know basis.
• Strict data retention and deletion protocols.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page and update the date at the top. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your data rights, contact us at privacy@zksecurity.io.