Privacy Policy

Marceli Pawliński is the data controller for Zenith. For any privacy question or request, contact support@marcelipawlinski.co.uk.

Account details you provide (name, email, and a password hash or the identifier from Google/GitHub if you sign in with them); the website URLs you add; monitoring results and audit findings for those sites; screenshots and generated reports; content you draft or publish through Discover; and billing records. Payment card details are handled entirely by Stripe and are never seen or stored by Zenith.

To run monitoring and audits on the sites you add, send transactional email (verification, alerts, receipts), operate billing, secure the service, and provide support. We do not sell your data or use it for advertising.

Zenith does NOT send your website content to Anthropic or any AI provider for Monitor's “Fix with Claude”. Those prompts are generated deterministically on our own servers from the audit findings. You choose whether to paste a prompt into your own AI tool; that action happens outside Zenith.

Marketing email (product updates, monitoring tips, growth insights, security updates) is entirely separate from your account email and requires your explicit double opt-in: creating an account never subscribes you. When you subscribe — from the site footer or Settings — we send a confirmation link before anything else arrives, and store your email address, subscription status, the time and source of your consent, when you confirmed, your chosen topics, and if applicable when and why you unsubscribed. Every marketing email carries a one-click unsubscribe link; unsubscribing takes effect immediately and doesn't affect account email about your sites or billing.

Discover's AI-assisted drafting is off by default and per account. If you turn it on in Settings, when you ask for a draft, brief or metadata suggestion Zenith sends Anthropic only: the public page titles, headings and short excerpts from pages you've already published, your site profile (name, description, category, audience, topics), and the keyword or brief you chose. We never send your account details, email address, billing information, analytics or private reports. Anthropic processes this as our subprocessor and, under its current commercial API terms, does not use it to train its models by default. You can turn AI processing off at any time in Settings, effective immediately for later requests; nothing is ever published without your own action.

If you connect Google Search Console (Settings, Integrations), we store the OAuth tokens (encrypted), your Google account email for display, and read-only search performance data — clicks, impressions, position and the queries and pages behind them — for the property you choose for each site. We request the read-only webmasters.readonly scope only, through a connection separate from signing in with Google. Detaching a site's property (the site's Settings) stops syncing it and deletes that site's imported data. Disconnecting Google (Settings, Integrations) revokes our access and deletes every site's imported data.

To estimate search volume and competition for keywords related to your site, Zenith sends the keyword text (never personal data) to DataForSEO, our keyword-data subprocessor, and caches the response.

If you connect a publishing destination (WordPress, Ghost, GitHub or a webhook), any credential you give us (an API key, application password or webhook secret) is encrypted at rest and used only to publish the content you choose to that destination.

If you publish to Zenith Hosted, the resulting page is public content you chose to publish and are responsible for. We may remove content that breaches the Acceptable Use Policy and suspend publishing for repeated breaches.

We do not keep long-term full copies of your website's HTML. Audits store the findings, limited evidence samples, and screenshots needed for your report.

We keep a small amount of privacy-friendly first-party usage data (which pages and actions are used) that does not rely on tracking cookies. Separately, with your consent, we use Google Analytics 4 to understand site usage; it loads only after you accept in the cookie banner, IP addresses are anonymised, and you can decline or withdraw consent at any time.

We process account, monitoring, audit and billing data to perform our contract with you; transactional email and security processing on the basis of legitimate interests; and we rely on your consent for marketing email, AI processing and any other optional communications.

We use a small set of providers to run the service. See the Subprocessors page for the current list and what each one processes.

Account and site data are kept while your account is active. Discover content items, page analyses and search-performance metrics are kept for as long as the site they belong to exists, and are deleted with the site or the account. When you delete your account, your sites, screenshots, reports, content and monitoring data are removed and monitoring stops. Billing records are retained only as long as required for tax and accounting. Operational logs are short-lived.

You can export your data — including your email preferences and AI-processing setting — and permanently delete your account at any time from Settings; deletion also removes your marketing-email subscription record. Depending on your location you may also have rights to access, correct, restrict or object to processing, and to lodge a complaint with your local data-protection authority.

Our providers may process data in the UK, EU and US under appropriate safeguards. See Subprocessors for detail.

Questions or requests: support@marcelipawlinski.co.uk.