Privacy Policy
What ZeroHostCMS collects, why, who processes it on our behalf, and how to exercise your rights over your data.
By SAGOZEN Labs · Reviewed
Scope and who controls your data
SAGOZEN controls personal data collected through zerohostcms.com, your workspace and the sites you publish there. This policy does not cover third-party products, Labs downloads or a custom domain's own separate services beyond this platform.
What we collect
Account email, display name and a hashed password; the site content, briefs and media you create or upload; billing identifiers from Stripe or SePay (we never receive or store your full card or bank details); support tickets you submit; and, only if you connect one, the limited data an AI assistant's consent-scoped MCP tools can access. Product analytics are privacy-safe by design: a fixed allowlist of event names and non-identifying properties only, with no raw URLs, query strings, emails, prompts or payment evidence ever accepted or stored.
How we use it
To operate and secure your account and sites, send transactional email (password reset, verification, notices) through Amazon SES, process payments through Stripe or SePay, provide support through our self-hosted Frappe HelpDesk, and run a daily automated review of your site's public homepage and links for specific Vietnam-restricted categories (unlicensed forex, binary options, gambling and disguised pyramid schemes). That review is report-only, reads only already-public pages, and never reads private account data. We also record which setup steps your account has reached (signup, site created, edited, published, domain connected, checkout, payment) so our team can help you finish setting up; that record holds identifiers and step names only, never page content or payment details, and is deleted with your account.
Retention and deletion
Deleting a website gives you a 30-day window to restore it before its resources are reclaimed. Deleting your account is refused while a subscription is active; otherwise it purges your portal and authentication data. Some immutable discoverability accounting rows are kept as opaque identifiers only, with no personal data attached.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data, or to object to some processing. Email hello@sagozen.digital to exercise these rights; we will confirm what we hold and act within the time your local law requires. This section does not list every jurisdiction-specific right; ask if yours is not addressed here.
Children
The service is not directed to children and we do not knowingly collect personal data from them. Contact us if you believe a child has provided us data so we can remove it.
Security
We run on Cloudflare's edge network with origin-bound authentication and encrypted transport. No online service can guarantee absolute security; tell support immediately if you suspect a breach affecting your account.
International processing
Because the service runs on a global edge network, your data may be processed outside your own country by providers such as Cloudflare, Amazon SES, Stripe and SePay. Each provider processes data under its own published terms and security certifications, such as Cloudflare's and AWS's standard contractual clauses for cross-border transfers; we do not run separate data centers or sign bespoke transfer agreements beyond those providers' own terms. Email hello@sagozen.digital for a copy of the relevant provider terms.
Changes to this policy
We may update this policy as the service changes. The date at the top of this page shows the last review; continuing to use the service after an update means you accept the revised policy.
Contact
SAGOZEN. Company and privacy: hello@sagozen.digital. Product, billing and refunds: support@zerohostcms.com. Contact address: Ste N, 30 N Gould St, Sheridan, WY 82801, US.