Privacy Policy

This Privacy Policy explains how Zen Media Consulting, LLC (“Zen Media,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with SitePOV (the “Service”), available at sitepov.com and app.sitepov.com and through our Shopify application.

SitePOV is a business tool that deploys AI “shopper” personas to navigate an online store, identify points of friction in the buying journey, and produce a ranked report of recommended fixes. The Service is intended for businesses and their authorized personnel, not for personal, family, or household use.

Zen Media is located in Miami, Florida, United States. We are based in the United States and the Service is primarily directed to users in the United States.

1. Who This Policy Covers

This Policy applies to:

• Account users — merchants, store owners, agencies, and their team members who create an account, sign in, or use the Service.
• Site visitors — anyone who visits our marketing site or submits a store URL or email address to start a free run.
• Recipients of emails we send (such as audit reports and weekly monitoring summaries).

This Policy does not cover the practices of third-party websites we analyze on your instruction, third-party platforms (such as Shopify, Stripe, or Google), or any third-party services that link to or from the Service. Those parties have their own privacy policies.

2. Information We Collect

2.1 Information you provide to us

• Account and identity data: name, email address, and (where you sign in with Google or Shopify) the identifiers and basic profile information returned by that provider.
• Organization and team data: organization name, logo, team-member email addresses, and role assignments (owner, admin, member).
• Store and audit inputs: the store URL(s) you ask us to analyze, brand information, persona/audience definitions, and any goals or scenarios you configure.
• Communications: information you provide when you contact support, request a refund, or otherwise communicate with us.

2.2 Information collected automatically

• Authentication and session data: secure, HTTP-only session cookies used to keep you signed in. We do not use third-party advertising or behavioral-analytics cookies (no Google Analytics, Google Tag Manager, or Segment).
• Device and connection data: IP address, browser type, and similar technical data, collected by our hosting and security providers and used for security, rate-limiting, and abuse prevention.
• Diagnostic and error data: crash reports, stack traces, and performance data collected by our error-monitoring provider (Sentry) to keep the Service reliable.

2.3 Information collected from third parties

• Shopify: when you install our Shopify app, we receive your shop domain and the shop owner's email address from Shopify's authorization flow, plus app install/uninstall and subscription events.
• Store qualification data: we use a third-party data provider (StoreLeads) to estimate whether a store meets our eligibility thresholds (for example, a revenue or plan tier). We send the store domain to obtain this assessment.
• Payment data: we receive transaction and subscription status (but not full card numbers) from our payment processors.

2.4 Data generated by the Service

When you run an audit, the Service generates and stores:

• Records of the AI shopper's journey: pages visited, time on page, calls-to-action encountered and clicked, trust signals found, scroll depth, friction points, conversion outcome, and the audit verdict and recommendations.
• Screenshots and a session recording (replay) of the automated browsing session, used to show you what the AI shopper did.
• Usage and billing records (credits used, costs, subscription status).

2.5 Information we do not intentionally collect

We do not request or intend to collect sensitive personal information (such as government IDs, health, biometric, or precise geolocation data). Please do not submit such information through the Service.

3. How We Use Information

We use information to:

1. Provide, operate, and maintain the Service, including running AI shopper audits and generating reports.
2. Create and manage your account, organization, and team access.
3. Process payments, manage credits and subscriptions, and prevent payment fraud.
4. Send you transactional and Service-related communications, including audit reports, weekly monitoring summaries, and account notices.
5. With your consent or where otherwise permitted by law, send you product updates and marketing, and route you to our affiliated services partner, Optimum7, for implementation help (see Section 6).
6. Secure the Service, enforce our Terms, prevent abuse, and debug and improve the Service.
7. Comply with legal obligations and exercise or defend legal claims.

3.1 AI processing

To produce audits, we transmit relevant inputs — such as the content of the pages being analyzed, your persona/audience definitions, and journey logs — to third-party AI/LLM providers (currently Anthropic, Google, and OpenAI) that generate navigation decisions, summaries, and recommendations. These providers process the data to return results to us. We do not use this data to train our own public models, and our providers act as our service providers/processors under their respective terms. We do not sell your inputs.

4. The Service Analyzes Websites You Direct Us To

A core function of SitePOV is to operate an automated browser that visits and interacts with the website(s) you submit. You are responsible for ensuring you are authorized to submit a website for analysis and for the legality of analyzing it. We collect and store the content, screenshots, and interaction data resulting from that browsing as described above. If you submit a website you do not own or control, you represent that you have the necessary rights or authorization to do so. See our Terms of Service for the full authorized-use requirements.

5. Cookies and Tracking

We use a minimal set of strictly necessary cookies and similar technologies for authentication, security, and session management. We do not use cookies for cross-site advertising or third-party behavioral profiling. Because our cookies are limited to essential functions, the Service may not respond to “Do Not Track” signals; however, we honor applicable opt-out preference signals where required by law (see Section 9).

6. How We Share Information

We do not sell your personal information for money. We share information only as follows:

• Service providers / subprocessors: vendors that process data on our behalf under contract (see Section 7).
• Affiliated brands: SitePOV is a Zen Media product, and qualified merchants may be referred to our services partner, Optimum7, for paid implementation help. If you engage with an Optimum7 call-to-action or request, we may share your contact and audit context with Optimum7 to follow up. You can decline these communications.
• Payment processors: to complete transactions and manage subscriptions.
• Legal and safety: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of Zen Media, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your direction: for example, when you create a shareable report link.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

7. Subprocessors

We rely on the following categories of third-party providers, who may process limited data to deliver the Service. This list may change; we will update it as our vendors change.

8. Data Retention

We retain personal information and audit data for as long as your account or organization is active and as needed to provide the Service, then for a reasonable period afterward to comply with legal, accounting, security, or dispute-resolution obligations. Store screenshots are cached for a short period (about one week) and regenerated as needed. When an organization is deleted, its associated audit records, events, reports, and monitoring runs are deleted on a cascading basis. You may request deletion as described in Section 9.

9. Your Privacy Rights

9.1 All users

You may access, correct, or delete your account information, or close your account, by contacting us at [email protected] or through your account settings where available.

9.2 Florida residents

Florida's Digital Bill of Rights (FDBOR) grants certain rights to consumers when it applies. The FDBOR's substantive controller obligations apply only to businesses meeting high revenue and data-volume thresholds, which Zen Media does not currently meet. Regardless, as a matter of practice we honor reasonable requests from Florida residents to access, correct, or delete their personal information, and we do not sell personal information.

9.3 California residents

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to:

• Know what personal information we collect, use, and disclose;
• Access a copy of your personal information;
• Delete personal information we hold about you, subject to exceptions;
• Correct inaccurate personal information;
• Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising — note that we do not sell or share your personal information in this sense; and
• Non-discrimination for exercising your rights.

To exercise these rights, contact us at the address in Section 9.1. We will verify your request and respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf.

9.4 Other U.S. states

Residents of other states with comprehensive privacy laws may have similar rights to access, correct, delete, and opt out. We will honor verifiable requests to the extent those laws apply to us.

9.5 Email communications

Every marketing and monitoring email we send includes an unsubscribe link, and we honor opt-outs promptly in accordance with the CAN-SPAM Act. We may still send you essential transactional or account-related messages.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Users

The Service is hosted and operated in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

12. Children's Privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

13. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date, and where required by law we will provide additional notice. Your continued use of the Service after an update constitutes acceptance of the revised Policy.

14. Contact Us