ZataSync syncs your files directly between your own devices, encrypted end to end. We never receive, store, or have the ability to read the contents of your files. We collect the minimum needed to run your account, bill you, and — if you subscribe to Pro — help your devices find each other across the internet.
Who we are
ZataSync is a product of BlackLeaf Digital (“we”, “us”). This policy explains what data we handle when you create an account, use the apps, and pay for the Pro tier. You can reach us at hello@zatasync.com.
What we cannot see
Your files sync device-to-device over an encrypted QUIC connection with pinned-certificate mutual authentication. The plaintext of your files never travels through our servers, because your files do not travel through our servers at all — they go directly between the devices you have paired.
When a direct connection is not possible and you are on the Pro tier, traffic may pass through our relay. The relay only ever forwards already-encrypted bytes; it cannot decrypt them and we do not retain their contents.
What we collect
Account data: your email address and authentication records, handled by our identity provider (ZAuth). We use this to sign you in and to associate your devices and subscription with you.
Billing data: if you subscribe to Pro, your payment is processed by Stripe. We store your subscription status and Stripe customer/subscription identifiers. We do not store your full card number — Stripe does.
Device and connection metadata: to coordinate sync we handle information such as device public keys/identifiers, pairing relationships, and ephemeral network addresses used to introduce your devices (rendezvous). This is connection routing information, not file content.
Operational logs: limited, short-lived diagnostic and security logs (for example, connection events and error traces) used to keep the service reliable and to prevent abuse.
What we do not collect
The contents, names, or directory structure of the files you sync.
Your encryption keys — they are generated on and held by your devices.
A behavioural advertising profile. We do not sell your data and we do not run third-party ad trackers.
Rendezvous and relay
Pro unlocks “sync from anywhere.” To provide it, we run a rendezvous service that introduces your devices to each other and, when needed, an encrypted relay that forwards traffic between them. We process the network metadata required to route that connection and hold it only as long as needed to establish and maintain the session. The relay is a blind pipe for ciphertext.
Cookies
On this website we use a session cookie to keep you signed in and a consent cookie to remember your cookie choice. We do not use advertising cookies. See the consent banner for details.
Third parties we rely on
Stripe — payment processing and subscription management for the Pro tier.
ZAuth (BlackLeaf Digital) — account authentication and identity.
Our hosting and infrastructure providers — to run the website, rendezvous, and relay.
Data retention
We keep account and billing records for as long as your account is active and as required to meet legal, tax, and accounting obligations. Connection metadata and operational logs are kept only briefly. When you delete your account, we delete or anonymise the associated personal data except where we are required to retain it.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these, email hello@zatasync.com and we will respond within the timeframe required by applicable law.
Security
End-to-end encryption and pinned-certificate authentication are core to the product, not an add-on. We apply reasonable technical and organisational measures to protect the limited account and billing data we do hold. No system is perfectly secure, but by design the most sensitive thing — your files — never leaves your control.
Children
ZataSync is not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal data.
Changes to this policy
We may update this policy as the product evolves. When we make material changes we will update the date above and, where appropriate, notify you.
Contact
Questions about privacy? Email hello@zatasync.com.