Privacy Policy
Last Updated: 2026-01-27
Zelo ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform.
This policy applies to users worldwide and addresses specific requirements under:
General Data Protection Regulation (GDPR) - EU/EEAUK General Data Protection Regulation (UK GDPR)California Consumer Privacy Act (CCPA) - California, USAOther applicable privacy laws1. Data Controller
GEEN LLC
5830 E 2nd St, Ste 7000 #31975, Casper, Wyoming 82609, USA
Email: privacy@getzelo.co
For EU/UK users, our Data Protection Officer can be contacted at: dpo@getzelo.co
2. Information We Collect
2.1 Information You Provide
**Account Information**: Name, email address, phone number (optional)**Profile Information**: Display name, profile picture**Identity Verification**: Government ID, proof of address (for hosts, processed by our payment partner)**Payment Information**: Processed securely by our payment partner (we do not store card details)**Event Information**: Event details, descriptions, images you upload**Communications**: Messages, support requests, feedback2.2 Information Collected Automatically
**Device Information**: IP address, browser type, operating system, device identifiers**Usage Data**: Pages visited, features used, time spent on platform, click patterns**Location Data**: Approximate location based on IP address**Cookies and Similar Technologies**: See our Cookie Policy2.3 Information from Third Parties
**Payment Processors**: Transaction confirmations and verification status from our payment partner**Social Login**: If you sign in via social accounts (Google), we receive basic profile information3. How We Use Your Information
We use your information to:
Provide, maintain, and improve our servicesProcess transactions and send related confirmationsVerify identity for hosts (via our payment partner) to comply with regulationsSend administrative messages, updates, and security alertsRespond to your comments, questions, and support requestsMonitor and analyze usage patterns and trendsDetect, investigate, and prevent fraudulent or illegal activitiesPersonalize and improve your experienceComply with legal obligationsEnforce our Terms of Service4. Legal Bases for Processing (GDPR/UK GDPR)
For users in the European Economic Area, UK, and Switzerland, we process your data based on:
| Purpose | Legal Basis |
|---------|-------------|
| Providing services | Performance of contract |
| Payment processing | Performance of contract, Legal obligation |
| Account management | Performance of contract |
| Security and fraud prevention | Legitimate interests, Legal obligation |
| Analytics and improvements | Legitimate interests |
| Marketing communications | Consent |
| Legal compliance | Legal obligation |
**Legitimate Interests**: We have conducted balancing tests to ensure our legitimate interests do not override your rights and freedoms.
5. Information Sharing
We may share your information with:
5.1 Service Providers
**Payment Partner**: Payment processing, identity verification, fraud prevention**Cloud Providers**: Data hosting and storage**Email Services**: Transactional and marketing emails**Analytics Providers**: Usage analytics (privacy-focused)All service providers are bound by data processing agreements and must meet our security standards.
5.2 Legal Requirements
We may disclose information if required by law or to:
Comply with legal process, court orders, or government requestsProtect the rights, property, or safety of Zelo, our users, or othersDetect, prevent, or address fraud, security, or technical issues5.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
5.4 With Your Consent
We may share information with third parties when you explicitly consent.
We do not sell your personal information.
6. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place:
**EU/UK Users**: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and UK ICO**Adequacy Decisions**: Where applicable**Your Consent**: Where required and appropriate7. Data Retention
We retain your personal information for as long as:
Your account is activeNeeded to provide you servicesRequired by law (e.g., tax records for 7 years, fraud prevention)After account deletion, we may retain certain information for legal compliance for up to 7 years, after which it will be securely deleted or anonymized.
8. Your Rights
8.1 All Users
You have the right to:
**Access**: Request a copy of your personal information**Correction**: Correct inaccurate or incomplete information**Deletion**: Request deletion of your account and data**Portability**: Receive your data in a portable format**Objection**: Object to certain processing activities8.2 European Union/EEA/UK Users (GDPR/UK GDPR)
Additional rights include:
Right to erasure ("right to be forgotten")Right to restrict processingRight to data portabilityRight to object to automated decision-making and profilingRight to withdraw consent at any timeRight to lodge a complaint with your supervisory authority**EU Supervisory Authorities**: Find your local authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en
**UK ICO**: https://ico.org.uk/
8.3 California Users (CCPA/CPRA)
California residents have the right to:
**Know**: What personal information we collect, use, and share**Delete**: Request deletion of personal information**Correct**: Correct inaccurate personal information**Opt-Out**: Opt-out of the "sale" or "sharing" of personal information**Non-Discrimination**: Equal service regardless of exercising privacy rights**Limit Use**: Limit use of sensitive personal information**We do not sell or share personal information** as defined under CCPA/CPRA.
8.4 Canadian Users (PIPEDA)
Canadian users have rights to access and correct personal information, withdraw consent, and lodge complaints with the Office of the Privacy Commissioner.
8.5 Australian Users
Australian users have rights under the Privacy Act 1988 to access and correct personal information.
To exercise any of these rights, contact us at: privacy@getzelo.co
We will respond within the timeframes required by applicable law (generally 30 days, extendable to 90 days for complex requests).
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
Encryption in transit (TLS 1.2+) and at rest (AES-256)Regular security assessments and penetration testingAccess controls and multi-factor authenticationEmployee training on data protectionIncident response proceduresHowever, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
Zelo is not intended for users under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from minors. If we learn that we have collected information from a child, we will delete it promptly.
11. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
12. Automated Decision-Making
We may use automated systems for fraud detection and prevention. You have the right to request human review of any automated decisions that significantly affect you.
13. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification at least 30 days before changes take effect. Your continued use after changes constitutes acceptance.
14. Contact Us
For privacy-related questions or to exercise your rights:
GEEN LLC
Privacy Email: privacy@getzelo.coDPO Email: dpo@getzelo.coSupport: support@getzelo.coAddress: 5830 E 2nd St, Ste 7000 #31975, Casper, Wyoming 82609, USA**Response Times**: We aim to respond to all requests within 30 days.