Privacy Policy

This Privacy Policy explains how Kupia Lab (“we”, “us”, “our”) collects, uses, and protects information when you use Zarek (the “Service”). We collect only what we need to run your launches, and we don't sell your data.

1. Information we collect

• Account data — your email address, used for magic-link sign-in and to send you product notifications and your daily launch briefing.
• Product & launch data — the product URLs you add and the public content we read from them, the fact-sheets, roadmaps, copy, assets, channel research, and submission records Zarek generates for you.
• Engagement data — clicks on the tracked links Zarek creates for your launch, which we de-duplicate and bot-filter so we can tell you which channels drove real traffic. We do not build cross-site advertising profiles.
• Technical data — basic logs and error reports needed to operate and secure the Service.

2. How we use information

• To provide the Service — plan, write, submit, verify, and measure your launches.
• To send transactional email (sign-in links, your attention digest, status updates).
• To secure the Service, prevent abuse, and debug problems.
• To improve Zarek's features and reliability.

We process the content of your product pages and your launch material with large language models to generate output. We do not use your data to train third-party foundation models, and we instruct our processors not to either where that option is available.

3. Service providers (sub-processors)

We share data with vendors only as needed to run the Service:

• Supabase — authentication, database, and file storage for your account and launch data.
• OpenRouter and its underlying model providers (e.g. Anthropic) — generating roadmaps, copy, and research from the content you provide.
• Mailgun — sending transactional and digest email.
• Vercel and Fly.io — hosting the dashboard and the launch automation runtime.

Each provider processes data under its own terms and only for the purposes above. When Zarek submits to a directory or platform on your behalf, the information you authorized for that submission is shared with that platform.

4. Email & your choices

Sign-in emails are essential to using the Service. Proactive emails such as your daily briefing include an unsubscribe link, and you can opt out at any time without losing access to your account. You can also reach us to update or correct your information.

5. Data retention

We keep your account and launch data for as long as your account is active. If you delete your account or ask us to remove your data, we delete or anonymize it within a reasonable period, except where we must retain it to comply with law, resolve disputes, or enforce our agreements.

6. Security

We use industry-standard measures — encrypted transport, access controls, and row-level security on your data — to protect your information. Any platform credentials Zarek creates on your behalf are stored encrypted, and we never send your account password to a language model. No method of transmission or storage is perfectly secure, but we work to protect your data.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below and we will respond as required by applicable law.

8. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date and, for material changes, provide additional notice where appropriate.

11. Contact

Questions or requests about your privacy? Email admin@kupia.io.