Privacy Policy
Last Updated: November 26, 2025
This Privacy Policy explains how ZadeNor AI ("we," "us," or "our") collects, uses, discloses, and protects your personal information in compliance with global data protection regulations.
Multi-Jurisdictional Compliance
This Privacy Policy complies with data protection laws across multiple jurisdictions including GDPR (Europe), CCPA/CPRA (California), PIPEDA (Canada), LGPD (Brazil), APPI (Japan), POPIA (South Africa), PDPA (Singapore), and other applicable regulations worldwide.
Table of Contents
- 1. Company Information
- 2. Scope and Application
- 3. Information We Collect
- 4. How We Use Your Information
- 5. Legal Basis for Processing (GDPR)
- 6. Data Sharing and Disclosure
- 7. International Data Transfers
- 8. Data Retention
- 9. Your Privacy Rights
- 10. California Privacy Rights (CCPA/CPRA)
- 11. Canadian Privacy Rights (PIPEDA)
- 12. European Privacy Rights (GDPR)
- 13. Other Jurisdictions
- 14. Cookies and Tracking Technologies
- 15. Data Security
- 16. Children's Privacy
- 17. AI and Automated Processing
- 18. Changes to This Policy
- 19. Contact Us
- 20. Data Protection Officer
1.Company Information
Company Name: ZadeNor AI
Business Address: 1 Yishun Street 23, Singapore 768441
Email: customer.care@zadenor.com
Phone: +65-6215-7071
Website: https://zadenor.com
2.Scope and Application
This Privacy Policy applies to all personal information collected through:
- Our website (zadenor.com) and subdomains
- Contact forms and inquiry submissions
- Blog content interaction and view tracking
- Email communications
- Social media integrations (LinkedIn, Twitter, Facebook, WhatsApp)
- AI-powered services and solutions we provide
- Any other services or interactions with ZadeNor AI
3.Information We Collect
3.1 Information You Provide Directly
Contact Form Submissions:
- Full name
- Email address
- Company name (optional)
- Phone number with country code
- Message content
- Timestamp of submission
3.2 Information Collected Automatically
Website Usage Data:
- IP address (anonymized where possible)
- Browser type and version
- Operating system
- Device information (mobile/desktop)
- Pages visited and time spent
- Referral source
- Geographic location (country/region)
- Blog post views and engagement metrics
3.3 Cookies and Tracking Technologies
- Session cookies for website functionality
- Analytics cookies for usage statistics
- Performance cookies for optimization
- Local storage for user preferences
3.4 Third-Party Information
- Social media profile information (when you interact with our social posts)
- LinkedIn profile data (if you authorize LinkedIn integration)
- Public business information for blog content generation
4.How We Use Your Information
We use your personal information for the following purposes:
4.1 Service Delivery
- Responding to inquiries and contact form submissions
- Providing information about our AI services
- Delivering blog content and technical articles
- Processing service requests
4.2 Communication
- Responding to your messages via email or phone
- Sending service-related notifications
- Sharing blog updates and technical insights (with consent)
4.3 Analytics and Improvement
- Analyzing website usage patterns
- Improving user experience and website performance
- Understanding blog content engagement
- Optimizing AI service offerings
4.4 Legal Compliance
- Complying with applicable laws and regulations
- Responding to legal requests and preventing fraud
- Protecting our rights and property
- Ensuring cybersecurity
4.5 AI-Powered Services
- Generating blog content using AI models (Llama 3.1)
- Analyzing technology trends for content creation
- Optimizing content recommendations
- Improving AI service delivery
5.Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), UK, and Switzerland, we process personal data based on the following legal grounds:
Consent (Article 6(1)(a) GDPR)
When you submit contact forms or subscribe to communications
Contractual Necessity (Article 6(1)(b) GDPR)
Processing necessary to provide services you've requested
Legitimate Interests (Article 6(1)(f) GDPR)
Analytics, website optimization, fraud prevention, and security
Legal Obligation (Article 6(1)(c) GDPR)
Compliance with applicable laws and regulations
6.Data Sharing and Disclosure
We may share your personal information with the following categories of recipients:
6.1 Service Providers
- Cloudflare: Web hosting, CDN, and infrastructure (USA)
- TurboSMTP: Email delivery services (Italy/EU)
- GitHub: Code repository and deployment (USA)
- LinkedIn: Social media integration (USA)
- AI Model Providers: For blog content generation (Cloudflare Workers AI)
6.2 Legal Obligations
We may disclose information when required by law, court order, or government request, or to:
- Comply with legal processes
- Protect our rights and property
- Prevent fraud or security threats
- Protect the safety of users and the public
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
We Do NOT Sell Your Personal Information
We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.
7.International Data Transfers
ZadeNor AI is based in Singapore. Your information may be transferred to, stored, and processed in jurisdictions outside your country of residence, including:
- Singapore: Primary operations and data storage
- United States: Cloud infrastructure (Cloudflare, GitHub)
- European Union: Email services and potential data processing
Transfer Safeguards
When transferring data internationally, we implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Encryption in transit and at rest
- Regular security assessments
- Data Processing Agreements with service providers
Cross-Border Data Transfer Mechanisms
For transfers from the EEA/UK to countries without adequacy decisions, we rely on EU Standard Contractual Clauses (SCCs) and supplementary measures as required by the Schrems II decision.
8.Data Retention
We retain personal information for different periods depending on the purpose:
Contact Form Data
Retained for 2 years from last contact, or until you request deletion
Blog Analytics Data
Aggregated and anonymized after 26 months (GDPR Article 5)
Website Logs
Retained for 90 days for security and troubleshooting
Legal Records
Retained as required by applicable law (typically 7 years for business records)
Cookie Data
Session cookies expire when you close your browser; persistent cookies expire after 12 months
After the retention period expires, we securely delete or anonymize your personal information in accordance with industry best practices and legal requirements.
9.Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you
Right to Rectification
Request correction of inaccurate or incomplete information
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal information (subject to legal obligations)
Right to Restrict Processing
Request limitation on how we process your data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent
Withdraw consent at any time (does not affect prior lawful processing)
Right to Lodge a Complaint
File a complaint with your local data protection authority
How to Exercise Your Rights
To exercise any of these rights, contact us at:
- Email: customer.care@zadenor.com
- Phone: +65-6215-7071
- Mail: 1 Yishun Street 23, Singapore 768441
We will respond to your request within 30 days (or as required by applicable law).
10.California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
10.1 Categories of Personal Information Collected
- Identifiers: Name, email, phone number, IP address
- Commercial Information: Inquiry details, service interests
- Internet Activity: Website usage, blog views, browsing history
- Geolocation Data: General location derived from IP address
- Professional Information: Company name, business contact details
10.2 Categories of Sources
- Directly from you (contact forms, communications)
- Automatically through website interaction
- Third-party services (social media, analytics)
10.3 Business Purposes for Collection
- Providing and improving services
- Customer support and communication
- Analytics and website optimization
- Security and fraud prevention
- Legal compliance
10.4 Your CCPA/CPRA Rights
- Right to Know: Request disclosure of personal information collected, used, or shared
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate information
- Right to Opt-Out: Opt out of sale/sharing (we do not sell personal information)
- Right to Limit: Limit use of sensitive personal information
- Right to Non-Discrimination: Equal service regardless of exercising privacy rights
Notice of Right to Opt-Out of Sale/Sharing
We do NOT sell or share your personal information as defined by the CCPA/CPRA. We only share data with service providers for business purposes as described in this policy.
Sensitive Personal Information
We do not knowingly collect sensitive personal information (such as precise geolocation, racial/ethnic origin, religious beliefs, health data, or biometric data) as defined under CPRA.
10.5 How to Submit CCPA/CPRA Requests
California residents can exercise their rights by:
- Email: customer.care@zadenor.com (Subject: "California Privacy Request")
- Phone: +65-6215-7071
- Mail: Attn: Privacy Team, 1 Yishun Street 23, Singapore 768441
We will verify your identity before processing requests and respond within 45 days (may be extended by 45 days with notice).
11.Canadian Privacy Rights (PIPEDA)
For Canadian residents, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
11.1 PIPEDA Principles
- Accountability: We are responsible for personal information under our control
- Identifying Purposes: We identify purposes for collection before or at time of collection
- Consent: We obtain meaningful consent for collection, use, and disclosure
- Limiting Collection: We limit collection to what is necessary
- Limiting Use, Disclosure, Retention: We use information only for identified purposes
- Accuracy: We keep information accurate and up-to-date
- Safeguards: We protect information with appropriate security
- Openness: This policy provides transparency about our practices
- Individual Access: You can access your information upon request
- Challenging Compliance: You can challenge our compliance
11.2 Your PIPEDA Rights
- Right to access your personal information
- Right to challenge accuracy and completeness
- Right to withdraw consent (subject to legal restrictions)
- Right to file a complaint with the Privacy Commissioner of Canada
Privacy Commissioner Contact
Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca
Toll-free: 1-800-282-1376
12.European Privacy Rights (GDPR)
For individuals in the European Economic Area (EEA), United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (GDPR) and UK GDPR.
12.1 Your GDPR Rights
- Right of Access (Article 15): Obtain confirmation of processing and copy of data
- Right to Rectification (Article 16): Correct inaccurate personal data
- Right to Erasure (Article 17): Request deletion under certain conditions
- Right to Restriction (Article 18): Request processing restriction
- Right to Data Portability (Article 20): Receive data in portable format
- Right to Object (Article 21): Object to processing, especially for direct marketing
- Rights Related to Automated Decision-Making (Article 22): Not be subject to decisions based solely on automated processing
12.2 Supervisory Authority
You have the right to lodge a complaint with your local supervisory authority:
- EU: Contact your Member State's Data Protection Authority
- UK: Information Commissioner's Office (ICO) - https://ico.org.uk
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
EU Representative
For GDPR compliance purposes, if you are in the EU and have concerns, please contact our data protection team at customer.care@zadenor.com
13.Other Jurisdictions
13.1 Brazil (LGPD)
For Brazilian residents, we comply with Lei Geral de Proteção de Dados (LGPD). You have rights including access, correction, deletion, portability, and the right to revoke consent. Contact: customer.care@zadenor.com
13.2 Singapore (PDPA)
As a Singapore-based company, we comply with the Personal Data Protection Act (PDPA). You have rights to access and correct your personal data. Complaints can be filed with the Personal Data Protection Commission (PDPC).
13.3 Australia (Privacy Act)
For Australian residents, we comply with the Australian Privacy Principles (APPs). You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
13.4 Japan (APPI)
We comply with the Act on the Protection of Personal Information (APPI) for Japanese residents. You have rights to disclosure, correction, suspension of use, and deletion.
13.5 South Africa (POPIA)
For South African residents, we comply with the Protection of Personal Information Act (POPIA). You may lodge complaints with the Information Regulator.
13.6 Other U.S. State Privacy Laws
We also comply with privacy laws in:
- Virginia (VCDPA)
- Colorado (CPA)
- Connecticut (CTDPA)
- Utah (UCPA)
- Other states with comprehensive privacy laws
15.Data Security
We implement industry-standard security measures to protect your personal information:
Encryption
TLS/SSL encryption for data in transit, encryption at rest for stored data
Access Controls
Role-based access, multi-factor authentication, least privilege principle
Security Monitoring
24/7 monitoring, intrusion detection, regular security audits
Secure Infrastructure
Cloudflare CDN, DDoS protection, secure cloud hosting
Data Breach Notification
In the event of a data breach affecting your personal information, we will notify you and relevant authorities within the timeframes required by applicable law (typically 72 hours under GDPR).
Important: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
16.Children's Privacy
Our services are not directed to children under 16 years of age (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children.
If You Are a Parent or Guardian
If you believe your child has provided us with personal information, please contact us immediately at customer.care@zadenor.com. We will take steps to delete such information promptly.
Age Requirements by Jurisdiction
- GDPR (EU/EEA): 16 years (or lower age set by Member State, minimum 13)
- COPPA (USA): 13 years
- CCPA (California): 16 years for sale of personal information
- Other jurisdictions: Applicable age of consent
17.AI and Automated Processing
ZadeNor AI uses artificial intelligence and machine learning technologies for blog content generation and service optimization:
17.1 AI Models Used
- Cloudflare Workers AI (Llama 3.1 8B): Blog content generation, summarization
- Content Validation AI: Topic relevance checking
17.2 Automated Decision-Making
We do NOT use automated decision-making (including profiling) that produces legal effects or similarly significantly affects you without human oversight.
- Blog content generation is reviewed by humans before publication
- No automated decisions are made about employment, credit, or other significant matters
- AI is used only for content creation and website optimization
17.3 Your Rights Regarding AI Processing
Under GDPR Article 22, you have the right to:
- Not be subject to solely automated decision-making with legal/significant effects
- Request human intervention in automated processes
- Express your point of view regarding automated decisions
- Contest automated decisions
Transparency in AI Use
All AI-generated blog content is clearly marked with attribution: "🤖 Generated with Claude Code" and appropriate co-authorship credits. AI models process publicly available information for content generation only.
18.Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
18.1 Notification of Changes
- Material changes will be posted prominently on our website
- The "Last Updated" date at the top will be revised
- For significant changes, we may provide additional notice (e.g., email notification)
- Continued use of our services constitutes acceptance of updated policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
19.Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
General Inquiries
Email: customer.care@zadenor.com
Phone: +65-6215-7071
Address: 1 Yishun Street 23, Singapore 768441
Business Hours: Mon-Fri 9am-6pm SGT
Privacy-Specific Requests
Subject Line: "Privacy Request - [Your Jurisdiction]"
Include: Your full name, email, request type
Response Time: Within 30 days (or as required by law)
Verification: We may request ID verification
20.Data Protection Officer
For matters related to data protection compliance, GDPR, or privacy concerns requiring specialized attention, you may contact our Data Protection Team:
Data Protection Team
Email: customer.care@zadenor.com (Subject: "ATTN: Data Protection Officer")
Postal Address: Data Protection Officer, ZadeNor AI, 1 Yishun Street 23, Singapore 768441
Our Data Protection Team handles all privacy-related inquiries, data subject requests, and compliance matters.
Governing Law and Dispute Resolution
This Privacy Policy is governed by the laws of Singapore. Any disputes arising from this policy or our data practices shall be subject to the exclusive jurisdiction of the courts of Singapore.
However, this does not affect your rights under the data protection laws of your jurisdiction, which may provide additional protections and remedies.
Acknowledgment
By using ZadeNor AI's services and website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this policy, please do not use our services or provide us with your personal information.
This Privacy Policy was created with reference to international privacy standards and best practices, including guidance from GDPR, CCPA/CPRA, PIPEDA, and other global data protection regulations, to ensure comprehensive protection of your personal information regardless of your location.
This Privacy Policy is compliant with data protection laws in 50+ jurisdictions worldwide. For jurisdiction-specific questions, please contact our Data Protection Team.