Privacy Policy
Last updated: August 16, 2026. This policy explains how Zenora UI handles personal data, adheres to developer privacy, and safeguards your information across our website and CLI tools.
- Zero source code telemetry: The CLI installs component files locally; it never reads, scans, or uploads your codebase.
- No sale of personal data: We do not sell or monetize personal information or browsing logs.
- Secure billing: Credit card transactions are handled directly by PCI-compliant payment gateways.
- Full compliance: Adheres to the Indian DPDP Act 2023 and GDPR guidelines.
Overview & Scope
Zenora UI ("we", "us", or "our") operates www.zenora-ui.in, the Zenora UI CLI, and component registries (the "Service"). This policy describes what data we process, why we need it, and how your rights are protected.
We are committed to absolute transparency and data minimization. We only collect the minimal data necessary to deliver components, handle account authentication, and prevent malicious catalog scraping.
1. Personal Data We Collect
Data You Give Us Directly
- Waitlist & Contact: Name and email address when joining waitlists, requesting support, or submitting feedback.
- Billing Data: Billing name, address, and transaction record for commercial subscription purchases. We never store credit card numbers on our infrastructure.
- CLI Authentication: Account tokens generated to authenticate requests against private component registries.
Data Collected Automatically
- Technical Telemetry: Anonymized HTTP request logs, browser type, device OS, and IP address for rate-limiting and DDoS mitigation.
- Component Analytics: Aggregated install counts per component to determine popular effects and guide library roadmaps.
2. CLI Telemetry Policy
When you execute npx zenora-ui-registry add <component>, the CLI downloads the required .tsx file into your project. It may read local configuration files (like package.json) solely to install required peer dependencies like Framer Motion or Three.js. It does not inspect, parse, or transmit any other file or proprietary code in your workspace.
4. Why We Process Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Component delivery & CLI registry | CLI token, install count | Contract fulfillment |
| Pro billing & payment processing | Billing details via gateway | Contract fulfillment |
| Product release updates (Waitlist) | Email address | Consent (Opt-out anytime) |
| Service security & abuse prevention | IP address & request logs | Legitimate interest |
5. Third-Party Infrastructure
We do not sell personal data. We partner only with essential cloud infrastructure providers:
- Vercel: Global edge network and serverless infrastructure hosting the application and registry endpoints.
- Payment Gateways: Authorized PCI-DSS certified payment processors for secure subscription handling.
- Email Delivery: Transactional email service for waitlist invitations and billing receipts.
6. Security & Data Retention
All network communication is strictly encrypted via TLS 1.3. We retain transaction and account records only for the duration required by applicable legal, fiscal, and operational standards.
7. Your Data Rights
You have the right to request access to, correction of, or deletion of your personal data at any time. To exercise these rights, submit a request directly via email or LinkedIn.
8. Privacy Support & Contact
For questions, concerns, or data deletion requests regarding this policy:
Email: krishkli536@gmail.com
LinkedIn: linkedin.com/in/krish-koli-21291a285