Privacy Policy

This policy covers zoulty.com — the Zoulty brand site and the free PCI DSS field guide offered here.

The Zoulty Sentinel compliance platform is a separate product with its own accounts, billing, and assessment data, and it is governed by its own policy at zoulty.securityhub.com.co/privacy. Nothing you do on this site creates a Zoulty Sentinel account.

• Your guide request — the full name, company, and email address you enter on the download form, plus the date and time you submitted it. That is the entire record.
• Technical basics — standard server logs (such as IP address, request time, and browser user agent) kept for security, troubleshooting, and to rate-limit abuse of the form.

We check that the email domain you give us can actually receive mail. That check looks up the domain's public mail records — it does not send anything to your address, and nothing about the check is stored.

• No cookies, and no browser storage. This site sets no cookies of any kind and writes nothing to your browser's local storage. There is no cookie banner here because there is nothing to consent to.
• No analytics or advertising trackers. No Google Analytics, no advertising pixels, no cross-site tracking, no session recording.
• No payment details. Nothing is sold on this site and there is no payment form. We never see a card number.
• No cardholder data. Zoulty never asks for, needs, or stores card numbers belonging to you or your customers.

• To give you the guide you asked for.
• To send you occasional updates about Zoulty and PCI DSS — which is what you're agreeing to when you submit the form. Every one of those emails has a one-click unsubscribe, and you can ask us to stop at any time.
• To keep the site secure and diagnose problems.

We do not sell your data, rent it, or share it with anyone for their marketing.

Only what is required to put this page in front of you and answer you:

• Hosting infrastructure — the server and database that run this site, operated for us by our hosting provider.
• Email delivery — to send you the updates you opted into.
• Google Fonts — this site loads its typefaces from Google's font service, so your browser makes a request to Google that necessarily includes your IP address and user agent. We send Google nothing else, and we set no Google cookies.

We may also disclose information if the law genuinely requires it — and if that ever happens, we'll tell you unless we're legally prevented from doing so.

• All traffic between you and Zoulty is encrypted in transit (TLS).
• Your guide request is stored separately from the Zoulty Sentinel platform. It lives in its own database collection that is never joined against platform accounts or assessment data. Asking for a book does not put you anywhere near the compliance product's data.
• The form endpoint is rate-limited and access to stored data is restricted and authenticated.

We keep your guide request until you ask us to remove it, or until it's clear you no longer want to hear from us. Ask, and we delete it — there's no waiting period and no retention we're obliged to keep, because this record exists only so we can write to you. Server logs are kept on a short rolling window for security and troubleshooting.

Whatever your jurisdiction, we honor the same baseline for everyone:

• Access — ask us for a copy of what we hold about you.
• Correction — tell us what's wrong and we'll fix it.
• Deletion — ask us to delete your record and we will, promptly.
• Objection — opt out of any email with one click. You keep the book either way.

For any of these, write to hello@zoulty.com.

This site uses none. No cookies are set, nothing is written to local storage, and there are no advertising or cross-site tracking technologies anywhere on zoulty.com. The Zoulty Sentinel app does use local storage to keep you signed in — that's covered by its own policy.

Zoulty is a business tool and is not directed at children. We don't knowingly collect personal information from anyone under 16.

If we change this policy in a material way, we'll update the “Last updated” date at the top, and we'll email you if you're on our list and the change affects you. Earlier versions are available on request.

Questions, concerns, or requests about your data? Write to hello@zoulty.com. Zoulty Sentinel is developed by Arrow Labs LLC.