Privacy Policy

Last updated: April 20, 2026

This privacy policy describes how Zaira Labs LLC (“Zaira Labs,” “we,” “us,” “our”) collects, uses, and protects information when you use our website at zairalabs.ai, our developer tool directory (Zaira Guide), our REST API, and our MCP server (collectively, the “Services”).

We believe privacy is a right, not a feature. We collect only what we need, and we are transparent about every category of data we handle.

1. Information We Collect

1.1 Website Visitors

When you visit zairalabs.ai, we collect aggregate, non-identifying analytics data through Cloudflare Web Analytics. This includes:

Pages viewed
Referral source (the website that linked you to us)
Device type and screen size
Country (derived from IP address, not stored at the individual level)
Browser type

What we do not collect from website visitors: We do not use Google Analytics or any other invasive tracking service. We do not build behavioral profiles. We do not track you across websites. Our analytics tools do not set tracking cookies and do not collect personally identifiable information.

1.2 Form Submissions

When you submit a form on our website (such as “Get Listed,” waitlist sign-up, or contact forms), we collect the information you provide, which may include:

Your name
Email address
Company name
Tool or product name and URL

We collect this information because you provided it to us for a specific purpose, and we use it only for that purpose.

1.3 API and MCP Server Users

When you use our REST API or MCP server, we collect:

Your API key (which you create when registering for API access)
Usage logs: endpoints called, timestamps, response sizes, and request counts
IP address associated with API requests

We collect this data to enforce rate limits, prevent abuse, monitor service health, and provide usage reporting to you.

2. Information We Do Not Collect

We want to be explicit about what we do not do:

We do not use Google Analytics or any advertising-based analytics platform.
We do not sell, rent, or trade personal data to anyone, for any reason.
We do not run advertisements on our website or services.
We do not use tracking cookies. We may use essential cookies for session management if you have an account, but never for tracking or advertising.
We do not collect data about end users of the tools listed in the Zaira Guide. Our Guide describes tools, not the people who use them.
We do not build behavioral profiles of our visitors or users.
We do not engage in cross-site tracking.

3. How We Use Your Information

3.1 Website Analytics

We use aggregate analytics data to understand which pages are useful, where visitors come from, and how we can improve our content. This data is never tied to an individual person.

Legal basis (GDPR): Legitimate interest in understanding how our website is used and improving our services.

3.2 Form Submissions

We use information from form submissions to:

Review tool submissions for inclusion in the Zaira Guide
Respond to inquiries and correction requests
Notify waitlist members about product availability
Communicate about the status of your submission

We will not contact you for unrelated marketing unless you have separately opted in to receive such communications.

Legal basis (GDPR): Consent (you chose to submit the form).

3.3 API and MCP Server Operations

We use API usage data to:

Enforce rate limits and usage quotas
Detect and prevent abuse
Monitor service availability and performance
Generate aggregate usage statistics
Provide you with your own usage data

Legal basis (GDPR): Performance of a contract (your API terms of service agreement). Legitimate interest in maintaining service security and availability.

4. Third-Party Services

We use third-party service providers to operate our Services. We share data with these providers only to the extent necessary:

Category	Purpose
Hosting and content delivery provider	Website hosting, edge compute, security
Email delivery provider	Transactional emails (submission confirmations, account notifications)

We do not share your personal information with data brokers, advertising networks, or social media platforms. We require all third-party service providers to handle your data in accordance with applicable data protection laws.

5. Cookies

Our cookie usage is minimal.

Analytics cookies: None. Cloudflare Web Analytics does not use cookies.

Essential cookies: If you create an account for API access, we may use a session cookie to keep you logged in. This cookie is strictly necessary for the service to function.

Tracking cookies: None. We do not use any cookies for tracking, advertising, or behavioral profiling.

Because we do not use non-essential cookies, most visitors will not see a cookie consent banner on our website. If we ever introduce non-essential cookies in the future, we will update this policy and implement appropriate consent mechanisms.

6. Data Retention

We retain data for the minimum period necessary for its purpose:

Data Category	Retention Period
Website analytics	26 months (aggregate data only, no personal identifiers)
Form submissions (Get Listed, corrections)	Until the submission is processed, plus 12 months
Waitlist sign-ups	Until you unsubscribe, or until the waitlist is no longer relevant
API usage logs	90 days
API account information	Duration of your account, plus 30 days after deletion
Email correspondence	3 years, unless required longer for legal purposes

When retention periods expire, we delete or anonymize the data. You may request earlier deletion of your personal data at any time (see Section 7).

7. Your Rights

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights regarding your personal data:

Right to access. You can request a copy of the personal data we hold about you.
Right to rectification. You can request that we correct inaccurate or incomplete personal data.
Right to erasure. You can request that we delete your personal data, subject to certain legal exceptions (such as data we are required to retain for tax purposes).
Right to restrict processing. You can request that we limit how we use your data while a complaint or request is being resolved.
Right to data portability. You can request your data in a structured, machine-readable format.
Right to object. You can object to our processing of your data based on legitimate interests. We will stop processing unless we have compelling legitimate grounds.
Right to withdraw consent. Where we process data based on your consent, you can withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
Right to lodge a complaint. You have the right to file a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at privacy@zairalabs.ai. We will respond to your request within 30 days.

7.2 Rights Under CCPA (California)

Zaira Labs likely does not currently meet the revenue or data volume thresholds that trigger CCPA obligations. However, we provide these disclosures proactively because we believe California residents deserve transparency regardless of thresholds.

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose.
Delete your personal information, subject to certain exceptions.
Correct inaccurate personal information.
Non-discrimination. We will not discriminate against you for exercising your privacy rights.

Categories of personal information collected in the preceding 12 months:

Identifiers (name, email address, IP address, API keys)
Internet or electronic network activity (API usage logs, pages viewed)
Professional or employment-related information (company name, role — only when voluntarily provided)

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Because we do not sell or share personal information as defined by the CCPA, a “Do Not Sell or Share” opt-out is not applicable, but you can contact us at privacy@zairalabs.ai with any concerns.

7.3 Rights Under Other US State Privacy Laws

Several US states (including Colorado, Connecticut, Virginia, Oregon, Texas, and others) have enacted privacy laws with rights similar to those described above. If you are a resident of any state with an applicable privacy law, we extend the same access, correction, deletion, and objection rights described in this section. Contact us at privacy@zairalabs.ai to exercise these rights.

8. International Data Transfers

Zaira Labs is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States. We take steps to ensure appropriate safeguards are in place for international transfers, consistent with applicable law. You may request additional information by contacting us at privacy@zairalabs.ai.

9. Data Security

We use appropriate technical and organizational measures to protect your information. If we discover a data breach that affects your personal information, we will notify you and any applicable regulatory authorities within the timeframes required by law.

10. Children’s Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected personal information from a person under 16, we will delete it promptly. If you believe we have inadvertently collected data from a minor, please contact us at privacy@zairalabs.ai.

11. Changes to This Privacy Policy

We may update this privacy policy as our products and practices evolve. When we make changes:

We will update the “Last updated” date at the top of this page.
For material changes that reduce your rights or expand our data collection, we will provide at least 30 days notice through email (if we have your email address) or a prominent notice on our website before the changes take effect.
We will not retroactively apply material changes to data collected under a previous version of this policy without your consent.

We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this privacy policy, want to exercise your data rights, or have concerns about how we handle your information:

Email: privacy@zairalabs.ai General inquiries: team@zairalabs.ai Website: https://zairalabs.ai

Zaira Labs LLC United States

We aim to respond to all privacy-related inquiries within 30 days.