Privacy Policy

This Privacy Policy explains how Zenji AB ("Zenji", "we", "us", "our"), a company registered in Sweden, processes personal data when you visit zenji.io (the "Site"). We take privacy seriously and aim to collect only what we need, keep it only as long as we need it, and be straightforward about what we do.

1. Data controller

Zenji AB is the data controller for personal data processed on the Site. You can reach us at privacy@zenji.io.

2. What we collect and why

When you use the Site, we may process the following personal data:

• Email address — when you join the waitlist. We use it to notify you about early access and the product launch, and to send you a confirmation or, if you request it, an unsubscribe. Legal basis: your consent (Art. 6(1)(a) GDPR), which you give when you submit the form.
• Hashed IP address and browser user agent — captured at the time of your waitlist submission. The IP address is passed through a one-way HMAC function before it is stored, so the value we retain cannot be used to reconstruct the raw IP. We use this solely for abuse prevention and rate limiting. Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in protecting our systems from abuse.
• Session cookie — if you access a password-protected area of the Site (for example, an investor deck), we set a short-lived, HTTP-only session cookie that contains a signed token and an expiry time. It does not contain personal data and is not used for tracking or analytics. Legal basis: strictly necessary (ePrivacy Directive, as implemented in Sweden) and our legitimate interest in access control.

We do not run third-party analytics, advertising pixels, or social-media trackers on the Site. We do not sell or rent personal data.

3. How long we keep data

• Waitlist email: until the product is launched and we have contacted you, or until you unsubscribe or request deletion — whichever comes first.
• Hashed IP and user agent: up to 12 months, after which they are deleted or further anonymised.
• Session cookies: up to 7 days, then automatically expire.

4. Who we share data with

Personal data is processed on infrastructure operated by Zenji. We may share data with the following categories of recipients, each acting as a processor under a data processing agreement with us:

• Hosting and infrastructure providers that store the waitlist database and serve the Site.
• Email delivery providers used to send you waitlist and launch communications, if and when we start sending them.

We will update this policy with named sub-processors before we begin using them for marketing communications. We may also disclose personal data where required by law or to protect our rights, property, or safety, or those of our users.

5. International transfers

Where a processor is located outside the European Economic Area, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — to ensure your data receives an equivalent level of protection.

6. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (including withdrawing consent to marketing at any time);
• restrict or object to certain processing;
• receive your data in a portable format;
• lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or the supervisory authority in your country of residence.

To exercise any of these rights, email us at privacy@zenji.io. We will respond within one month.

7. Security

We take reasonable technical and organisational measures to protect personal data, including encryption in transit, hashed storage of IP addresses, access controls, and regular review of our infrastructure. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the relevant authority as required by law.

8. Children

The Site is not directed at children under 16 and we do not knowingly collect personal data from them. If you believe we have done so, please contact us and we will delete it.

9. Changes

We may update this Privacy Policy. If we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email.

10. Contact

Zenji AB · Stockholm, Sweden · privacy@zenji.io