Skip to main content

Effective August 6, 2026

Privacy Policy

Plain language, no burying. This covers what we collect, why, where it goes, and how to make us delete it.

Who we are

ZSTronics LLC, a limited liability company registered in the United States (“ZSTronics”, “we”). Contact for anything privacy-related: info@zstronics.com.

What we collect, and why

Forms (audit, contact, chatbot). Name, email, and what you tell us about your business — used solely to reply and prepare your automation plan. Submissions flow through our own self-hosted n8n workflow to our lead log (Google Sheets), our email (Resend), and a WhatsApp notification to our team. That pipeline is the same kind we build for clients.

Booking. If you book a call, Cal.com processes your name, email, and slot per its own privacy policy.

Analytics. Off by default. Only if you click “Allow analytics” do we load Google Tag Manager / GA4 (Consent Mode v2, default-deny). Declining changes nothing about how the site works.

WhatsApp. Clicking a WhatsApp link opens Meta’s WhatsApp with a pre-filled message; WhatsApp’s terms apply from there.

Server logs. Standard request logs (IP, user agent) for security and rate limiting, rotated automatically.

What we don’t do

We don’t sell or rent your data. We don’t run third-party ad trackers without consent. We don’t train AI models on your data — yours or your company’s. We don’t send marketing sequences; you get replies from a person.

Legal bases (GDPR) and your rights

Where GDPR/UK-GDPR applies: we process form data under legitimate interest / pre-contractual steps, and analytics only under consent. You can request access, correction, deletion, or export of your data at any time — email info@zstronics.com and we’ll action it within 30 days. California residents have equivalent rights under CCPA/CPRA; we honor them for everyone rather than gating by state.

Processors we use

  • Self-hosted n8n (lead routing — our infrastructure)
  • Resend (transactional email)
  • Google Sheets (lead log)
  • Cal.com (scheduling, only when you book)
  • Google Tag Manager / GA4 (analytics, only with consent)
  • WhatsApp Business (only when you open a WhatsApp chat)

Retention & security

Lead records are kept while the conversation is live and for up to 24 months after last contact, then deleted. Transport is TLS-only (HSTS preloaded); form endpoints are rate-limited and bot-filtered; secrets live outside the codebase.

Changes

Material changes get a new effective date at the top of this page. No silent rewrites.