Privacy Policy

Who we are

Zenda is an early prelaunch project. For anything relating to this policy or your personal data, contact us at hello@zenda.lt. We act as the controller of your data within the meaning of the EU General Data Protection Regulation (GDPR) and the Lithuanian Law on Legal Protection of Personal Data.

What we collect

When you join the waitlist, we record:

• Email address. So we can put you on the list and email you.
• Role. Whether you are signing up as a user or a coach, so we can tailor what we send you.
• Optional message. Anything you choose to write in the feedback box.
• Updates preference. Whether you ticked the box asking us to send you occasional product updates.
• Technical signals. Your IP address, browser user agent, and the result of the bot-protection check. We use these to prevent abuse and spam.
• Consent record. The version of this policy that was live when you signed up, and the time at which you gave any marketing consent. This lets us prove what you agreed to.

We do not collect any special categories of personal data. We do not knowingly collect data from anyone under 16.

Why we collect it, and on what basis

• To manage the waitlist and contact you about launch. Legal basis: GDPR Article 6(1)(b), steps taken at your request before entering a contract, and Article 6(1)(f), our legitimate interest in running a prelaunch waitlist.
• To send you product updates and news, if you opted in. Legal basis: GDPR Article 6(1)(a), your consent. You can withdraw this at any time.
• To prevent spam and abuse on the form. Legal basis: GDPR Article 6(1)(f), our legitimate interest in keeping the service running.
• To send you a one-off confirmation that you are on the list. Legal basis: GDPR Article 6(1)(b), necessary to act on your signup request.

Who else sees your data

We use a small number of service providers to actually run the waitlist. They process your data on our behalf, under written terms, and only for the purposes described here.

• Vercel Inc. Hosts the marketing site and runs the form submission code. United States. Transfers protected by Standard Contractual Clauses.
• Neon Inc. Hosts the database where your signup is stored. European Union region. Where any sub-processing occurs in the United States, transfers are protected by Standard Contractual Clauses.
• Resend (Resend, Inc.). Sends the confirmation email and any future product updates. United States. Transfers protected by Standard Contractual Clauses and the EU-US Data Privacy Framework.
• Intuition Machines, Inc. (hCaptcha). Provides the bot-protection challenge on the form. United States. Transfers protected by Standard Contractual Clauses.
• Hostinger International, Ltd. Manages our domain DNS and receives email sent to the zenda.lt mailbox. European Union.

We do not sell your personal data to anyone. We do not share it for advertising. We will only disclose it to a third party outside the list above if we are legally required to.

How long we keep it

We keep your waitlist entry until Zenda launches publicly, or until you ask us to delete it, whichever happens first. After launch we will review the list and delete entries we no longer need. The technical signals (IP, user agent, captcha verdict) are kept only as long as needed to investigate any abuse, and in any case no longer than 12 months.

Your rights

Under the GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted ("right to be forgotten");
• restrict how we process your data;
• receive your data in a portable format;
• object to processing based on legitimate interest;
• withdraw any consent you have given, at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email hello@zenda.lt. We will respond within one month. If you believe we are mishandling your data, you have the right to lodge a complaint with the Lithuanian supervisory authority, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), vdai.lrv.lt.

Cookies and similar storage

This site does not use analytics cookies, advertising cookies, or any third-party trackers. We do not set cookies for marketing purposes and we do not show a cookie banner because we have no non-essential cookies to ask permission for.

The bot-protection widget (hCaptcha) may set storage on your device when it shows you a challenge. This is necessary for the widget to work and is used only to tell humans and bots apart, not to track you across sites.

The companion app at app.zenda.lt uses a service worker so it can work offline and install as a progressive web app. This stores only the files needed to run the app on your device.

International transfers

Some of our providers are based in the United States. When your data is transferred outside the European Economic Area, that transfer is protected by appropriate safeguards under GDPR Chapter V: either the European Commission's Standard Contractual Clauses, or, where the provider is certified, the EU-US Data Privacy Framework. You can request a copy of the relevant safeguards by emailing us.

Automated decisions

We do not make any automated decisions, including profiling, that have legal or similarly significant effects on you.

Changes to this policy

If we change this policy in a material way we will publish a new version here, update the version number at the top of this page, and record the new version against future signups. For changes that affect the legal basis on which we contact you, we will reach out before the change takes effect.