Privacy Policy
Last updated: May 2026
Zaytoun is operated by Zaytoun Network. This policy applies to all services at zaytoun.network and subdomains.
Our principle
We collect the minimum data necessary to operate the platform — across every product on it. We do not track your searches. We do not build profiles. We do not sell data. This matters because the people we serve can lose their livelihood or safety for what they believe; protecting them means protecting their data and their anonymity, not just promising not to sell it. Privacy is not a feature we offer — it is the condition on which this platform exists.
What we collect
Account data
When you sign up (via Google or LinkedIn OAuth, or email magic-link), we store: your name, email address, and avatar URL (provided by the OAuth provider or set manually). We also store your membership tier and account creation date.
Profile and published content (Unlinked)
When you use products like Unlinked, you create and publish your own content — your professional record, profile details, and writing. This is data you choose to store and make visible. You control what is published and to whom, you can edit or unpublish it at any time, and deleting it removes it from the platform. This content is yours; we hold it only to host and display it for you (see retention below).
Authentication data
We issue a session cookie (HTTP-only, encrypted) to keep you logged in. We issue a JWT (RS256, 1-hour expiry) for API requests. JWT tokens include a unique ID (JTI) that can be revoked individually.
Search data
We do not log your search queries. Searches are proxied through metasearch. No query text, search results, or click-through data is stored. We may increment an aggregate counter (total searches) that is not attributable to any individual.
Server logs
Our infrastructure logs HTTP request metadata (timestamp, HTTP status, response time) for operational monitoring. Logs do not include request bodies, search queries, or user identifiers. Logs are retained for 7 days and then permanently deleted.
Payment data
We do not process payments directly. Payment links are issued via third-party providers (Revolut or Wise). We store a record of confirmed payments (amount, tier, date, provider reference) for accounting. We never see or store card numbers or bank details.
What we do not collect
- ✕Search queries or search history
- ✕Browsing history or click-through tracking
- ✕Tracking cookies or third-party analytics
- ✕Device fingerprinting
- ✕Location data
- ✕Behavioural profiles or advertising identifiers
Who we share data with
We do not sell, rent, or share your personal data with third parties for commercial purposes. We share data only as required to operate the service:
- •OAuth providers (Google, LinkedIn) — for authentication only. We receive your name, email, and avatar. We do not send data back.
- •Payment providers (Revolut, Wise) — we generate payment links. Providers see transaction details. We store only confirmation records.
- •Legal requirements — we may disclose data if required by law. We do not log search queries, so we cannot hand them over.
Data retention
| Data type | Retention |
|---|---|
| Account data | Until you request deletion |
| Profile & published content (Unlinked) | Until you unpublish or delete it |
| Payment records | 7 years (legal requirement) |
| Server logs | 7 days |
| Search queries | Not stored |
| Session cookies | 24 hours (rolling) |
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- •Access — request a copy of the personal data we hold about you
- •Rectification — correct inaccurate data
- •Erasure — request deletion of your data ("right to be forgotten")
- •Portability — receive your data in a structured, machine-readable format
- •Objection — object to processing based on legitimate interests
- •Withdrawal — withdraw consent at any time (applies to marketing emails only; we do not send marketing emails)
To exercise any of these rights, contact us at privacy@zaytoun.network. We will respond within 30 days.
Data controller
Zaytoun Network is the data controller for all personal data processed through this platform. For data protection inquiries:
privacy@zaytoun.network
Changes to this policy
We may update this policy as the platform evolves. Substantial changes will be announced via email to registered users and posted on the transparency page. The "last updated" date at the top always reflects the current version.