Privacy Policy
Effective Date: November 1, 2026 • Governing Entities: ZOOZ LABS LLC & ZOOZ.LK (PVT) LTD
1. Identification of Data Controller
This Privacy Policy applies to personal information collected by Zooz Labs, jointly operated by:
- ZOOZ LABS LLC: 539 W Commerce St. 7669, Dallas, Texas 75208, USA
- ZOOZ.LK (PVT) LTD: 28A Fifth Lane, Colombo 03, 03000, Sri Lanka
Contact Email: [email protected]
2. Categories of Information We Collect
We collect information directly provided by you through our website discovery questionnaire, direct emails, or initial discovery calls:
Contact Identifiers
Full name, corporate email address, phone number, and company or entity designation.
Project Specifications
Technical requirements, domain interest (AI/Web3), project readiness stage, timeline, and estimated budget parameters.
3. Purpose and Legal Basis for Processing
We process your personal and technical project information strictly under the following lawful bases:
-
✓
Contractual Necessity & Pre-contractual Inquiries: Evaluating project feasibility, issuing technical scope estimates, and entering into mutual Non-Disclosure Agreements (NDAs).
-
✓
Legitimate Interests: Operating and securing our online applications, preventing spam and automated bot traffic via Cloudflare Turnstile, and managing commercial client relationships.
4. Cloudflare Turnstile & Anti-Abuse Protection
Our contact forms utilize Cloudflare Turnstile to prevent automated spam submissions. Turnstile evaluates non-invasive telemetry (such as browser environment data and interaction metrics) to ensure requests originate from humans without collecting persistent cross-site tracking cookies.
5. International Data Transfers & Retention
Zooz Labs operates engineering and management infrastructure across the United States and Sri Lanka. When you submit inquiries, your information is securely routed to our internal review systems under strict access controls.
We retain project discovery records only for as long as necessary to complete commercial consultations or satisfy regulatory requirements, typically no longer than 24 months for non-active commercial leads.
6. Your Rights (GDPR, UK GDPR & CCPA)
Depending on your jurisdiction, you possess statutory rights concerning your personal data:
- Right to Access: Request copies of your personal data.
- Right to Rectification: Correct incomplete or inaccurate details.
- Right to Erasure: Request permanent deletion of records.
- Right to Restrict: Object to or limit processing activities.
To exercise any data rights, please submit a written request to [email protected]. We fulfill verified requests within thirty (30) calendar days.