Privacy Policy

1. Who we are

ZilFox Technologies Pvt Ltd is an IT and digital marketing company registered in Nepal, with its registered office at 29, Ghattekulo Marga, Kathmandu 44600, Nepal. We build custom software and run search and paid marketing for clients in seven countries.

We are responsible for the information described in this policy. For anything relating to your data, write to connect@zilfox.com.

2. What we collect

Information you give us

Our contact form asks for your name, email address, country code and mobile number, the service you are interested in, and your message. Nothing on that form is collected secretly — what you can see is what we receive.

If you email, call or message us on WhatsApp instead, we hold whatever you choose to send: your contact details and the contents of that conversation.

If you become a client, we also handle the material a project needs — logins you provide, content, brand assets, ad account access, and business information you share with us to get the work done.

What you type into ZilFox.AI

The chat assistant on this site sends your message to OpenAI so it can generate a reply. Please do not put passwords, card details or anything confidential into the chat window. We also store a one-way hash of your IP address — not the address itself — for a short period, purely to stop a single visitor flooding the assistant with requests.

Information collected automatically

• Analytics: we use Google Analytics 4, which records the pages you visit, roughly where you are (country or city level, from your IP), your device and browser type, and how you arrived at the site.
• Server logs: our hosting keeps standard access logs, including IP address, timestamp and the page requested. These exist for security and troubleshooting.

We do not sell your data, and we do not buy contact lists.

3. Cookies and analytics

This site does not use cookies for advertising or retargeting. The cookies that are set come from Google Analytics (names beginning _ga), and they exist to tell one visit apart from another so we can see which pages are useful.

You can refuse or delete these at any time in your browser settings, or install Google's Analytics opt-out add-on. Blocking them does not break anything on this site.

4. How we use your information

• To reply to your enquiry and, if you want, quote for the work.
• To deliver, support and invoice a project you have engaged us for.
• To answer your questions through the chat assistant.
• To understand which pages and services people actually use, so we can improve them.
• To keep the site secure and prevent abuse or spam.
• To meet our legal, accounting and tax obligations in Nepal.

We send marketing email only to people who have asked us to. Every such message has an unsubscribe option, and asking us to stop is enough — you do not need to give a reason.

5. Who we share it with

We do not sell or rent your information. We do rely on a small number of service providers to run this website, and your data passes through them:

Beyond that, we share information only where we are legally required to, or where it is necessary to establish or defend a legal claim.

6. Where your data is processed

We operate from Nepal, but the providers listed above run their services from other countries, including the United States and the European Union. Sending us an enquiry or using the chat assistant means your information will be processed outside Nepal by those providers, under their own security and privacy terms.

7. How long we keep it

• Enquiries that do not become projects: kept while there is a reasonable chance of a conversation, then deleted on request.
• Client records: kept for the life of the engagement, and afterwards for as long as our accounting and tax obligations require.
• Chat rate-limit hashes: a rolling window measured in minutes, then discarded.
• Analytics: retained for the period set in our Google Analytics property.

8. Your rights

Whatever country you are in, you can ask us to:

• tell you what information we hold about you;
• correct anything that is wrong;
• delete it, where we are not required to keep it;
• stop sending you marketing messages.

We work with clients in the European Union and the United Kingdom. If you are covered by the GDPR or UK GDPR, you also have the right to restrict or object to processing, to receive your data in a portable format, and to complain to your national data protection authority.

Email connect@zilfox.com and we will respond within 30 days. We may need to confirm your identity first.

9. How we protect it

This site is served over HTTPS, our configuration files and credentials are kept outside the public web folder, and access to client accounts and project material is limited to the people working on that project. No system is perfectly secure and we will not claim otherwise — but if a breach affects your data, we will tell you and act on it.

10. Children

Our services are sold to businesses and organisations. This website is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.

11. Links to other sites

Our blog and service pages link to other websites, and our clients' sites are their own. Once you leave this website, this policy no longer applies — read the privacy policy of whichever site you land on.

12. Changes to this policy

If we change how we handle information, we will update this page and change the date at the top. Material changes will appear here before they take effect, so it is worth a glance if you are about to send us something sensitive.