Privacy Policy
Last updated: June 2026
Zaytoun Network is operated by a company registered in the United Kingdom, which is the data controller for your personal data. This policy applies to all products and features at zaytoun.network and its subdomains that are publicly available. Products not yet open to the public (such as Deploy, which is currently accessible to administrators only) are not covered here until they open.
Our principle
We collect the minimum data necessary to operate the platform — across every product on it. We do not track your searches. We do not build profiles. We do not sell data. This matters because the people we serve can lose their livelihood or safety for what they believe; protecting them means protecting their data and their anonymity, not just promising not to sell it. Privacy is not a feature we offer — it is the condition on which this platform exists.
What we collect
Account data
When you sign up (via Google or LinkedIn OAuth, or email one-time code), we store: your name, email address, and avatar URL (provided by the OAuth provider or set manually). We also store your membership tier and account creation date.
Profile and published content (Unlinked)
When you use products like Unlinked, you create and publish your own content — your professional record, profile details, and writing. This is data you choose to store and make visible. You control what is published and to whom, you can edit or unpublish it at any time, and deleting it removes it from the platform. This content is yours; we hold it only to host and display it for you (see retention below).
Authentication data
We issue a session cookie (HTTP-only, encrypted) to keep you logged in. We issue a JWT (RS256, 1-hour expiry) for API requests. JWT tokens include a unique ID (JTI) that can be revoked individually.
Search data
We do not log your search queries. Searches are proxied through metasearch. No query text, search results, or click-through data is stored. We may increment an aggregate counter (total searches) that is not attributable to any individual.
Server logs
Our infrastructure logs HTTP request metadata (timestamp, HTTP status, response time) for operational monitoring. Logs do not include request bodies, search queries, or user identifiers. Logs are retained for 7 days and then permanently deleted.
Payment data
We do not collect any payment data right now. Membership is free during launch. No payment information, card details, or billing data of any kind is collected or stored. If and when paid tiers open, this section will be updated before any payments are taken.
What we do not collect
- ✕Search queries or search history
- ✕Browsing history or click-through tracking
- ✕Tracking cookies or third-party analytics
- ✕Device fingerprinting
- ✕Location data
- ✕Behavioural profiles or advertising identifiers
Who we share data with
We do not sell, rent, or share your personal data with third parties for commercial purposes. We share data only as required to operate the service:
- •OAuth providers (Google, LinkedIn) — for authentication only. We receive your name, email, and avatar. We do not send data back.
- •Payment providers — none currently. No payments are taken during the launch period. This will be updated before any payment processing begins.
- •Legal requirements — we may disclose data if required by law. We do not log search queries, so we cannot hand them over.
Data retention
| Data type | Retention |
|---|---|
| Account data | Until you request deletion |
| Profile & published content (Unlinked) | Until you unpublish or delete it |
| Payment records | Not collected during launch period |
| Server logs | 7 days |
| Search queries | Not stored |
| Session cookies | 24 hours (rolling) |
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- •Access — request a copy of the personal data we hold about you
- •Rectification — correct inaccurate data
- •Erasure — request deletion of your data ("right to be forgotten")
- •Portability — receive your data in a structured, machine-readable format
- •Objection — object to processing based on legitimate interests
- •Withdrawal — withdraw consent at any time (applies to marketing emails only; we do not send marketing emails)
To exercise any of these rights, contact us at privacy@zaytoun.network. We will respond within 30 days.
Data controller
Zaytoun Network is operated by a company registered in the United Kingdom, which is the data controller for all personal data processed through this platform. Full registered company details are available on request.
For data protection inquiries:
privacy@zaytoun.network
If you believe your data has been handled unlawfully, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. EU/EEA residents may also complain to their local data protection authority.
Changes to this policy
We may update this policy as the platform evolves. Substantial changes will be announced via email to registered users and posted on the transparency page. The "last updated" date at the top always reflects the current version.