Privacy Policy

Zerolyst ("we", "us", or "our") operates zerolyst.com (the "Service"). This Privacy Policy explains what information we collect when you use the Service, how we use it, and how you can exercise your rights with respect to it.

By using the Service, you agree to the practices described in this Privacy Policy.

Information you provide directly:

• Email address — required for account creation and login.
• Username — required; displayed in your account settings.
• Full name — optional; stored in your profile only if you choose to provide it.
• Date of birth — required to verify you are at least 18 years old, as required by our Terms of Service.
• Password — never stored in readable form. Passwords are hashed by our authentication provider (Supabase) before storage. We cannot read your password.
• Property and investment data — any property details, analysis assumptions, and results you choose to save to your account.

Information collected automatically:

• Vercel Analytics: We use Vercel Analytics, a privacy-focused service that does not use cookies and does not store IP addresses. It collects anonymized data only: page URLs, referral sources, approximate geographic region (country/state, derived from your IP address at the moment of the request but never retained), device type, operating system, and browser version. Visitor sessions are automatically discarded after 24 hours and are not linked to any personal identifier.
• Vercel Speed Insights: We collect Core Web Vitals performance metrics (such as page load time and layout stability) to monitor and improve the Service. This data is aggregated by device type and geographic region and does not identify individual users.
• Cookies: We use two cookies. First, an authentication session cookie managed by Supabase, which is strictly necessary to keep you logged in. Second, a functional cookie (pe_free_used) that records whether you have used your one free property analysis so we can enforce the free-trial limit. Neither cookie is used for advertising, remarketing, or cross-site tracking.

• To create and manage your account
• To verify you meet the 18-and-older age requirement
• To provide the core features of the Service: property analysis, browsing, comparison, and portfolio tracking
• To diagnose technical issues and improve Service performance
• To respond to support requests you send to info@zerolyst.com

We do not use your information for advertising purposes and we do not send marketing emails.

We do not sell, rent, or trade your personal information to any third party for their own use. We share data only with the infrastructure providers necessary to operate the Service:

• Supabase, Inc. — We use Supabase as our database and authentication provider. Your account data, profile, and any saved property data are stored on Supabase's cloud infrastructure. You can review Supabase's privacy and security practices at supabase.com/privacy.
• Vercel, Inc. — We host the Service on Vercel's infrastructure. Vercel processes the anonymized analytics and performance data described in Section 2. You can review Vercel's privacy practices at vercel.com/legal/privacy-policy.

We may also disclose your information if required by applicable law, a valid court order, or to protect the rights, property, or safety of users or others.

We retain your account information for as long as your account exists. If you wish to delete your account and all associated personal data, please email us at info@zerolyst.com. We will process deletion requests within 30 days.

Aggregated, anonymized analytics data is retained by Vercel per their own retention policies and contains no personal identifiers.

The Service is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account or provided personal information through the Service, please contact us at info@zerolyst.com and we will delete that information promptly.

We implement reasonable technical measures to protect your information:

• All data is transmitted over HTTPS
• Passwords are hashed before storage — we cannot read them
• Database Row-Level Security (RLS) ensures users can only access their own data
• Session tokens are stored in httpOnly cookies, inaccessible to browser scripts

No method of transmission or storage is completely secure. We cannot guarantee absolute security and are not responsible for unauthorized access that is beyond our reasonable control.

The Service may display links to third-party websites, such as external property listing sources. We have no control over those sites and are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page with a new "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or how we handle your data, please email us at info@zerolyst.com.