Privacy Policy

Last Updated: April 11, 2026

Zee Solution LLC ("we," "us," or "our") operates the ProductBot platform at chatbot.zeesolution.net and related subdomains. This Privacy Policy describes how we collect, use, and protect your personal information when you use our Service.

1. Information We Collect

1.1 Information You Provide (Subscribers)

When you create an account and use our Service, we collect:

Data	Purpose	Basis
Email address	Account login, verification, password reset, service notifications	Contract
Password (hashed)	Authentication	Contract
Business name	Profile display, branding	Contract
Website URL	Profile display	Contract
Chatbot configuration	Product data, decision trees, branding settings	Contract
Payment information	Subscription billing (processed by Stripe; we do not store card numbers)	Contract

1.2 Information Collected Automatically

Data	Purpose	Retention
Session tokens	Authentication	30 days (auto-deleted when expired)
Conversation counts	Usage tracking and plan limits	Reset monthly
IP addresses	Rate limiting (in-memory only, not stored)	Not persisted

1.3 End-User Data (Website Visitors)

When visitors to our Subscribers' websites interact with an embedded ProductBot chatbot:

• We track conversation start events (aggregate count only) for usage metering.
• We do not collect names, email addresses, IP addresses, or any personally identifiable information from end-users through the standard product recommendation widget.
• Chatbot interactions (button clicks, category selections) are processed in the browser and are not transmitted to our servers beyond the conversation count.

1.4 Landing Page Analytics

Our landing page (chatbot.zeesolution.net) uses Cloudflare Web Analytics, a privacy-first analytics service that:

• Does not use cookies
• Does not track individual visitors
• Does not collect personally identifiable information
• Collects only aggregate data: page views, referrers, countries, browsers, and device types

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (verification, password reset, billing notifications)
• Monitor usage against plan limits
• Protect against fraud, abuse, and unauthorized access
• Respond to your inquiries and support requests

We will never sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.

3. Third-Party Services

We share limited data with the following service providers, solely to operate the Service:

Provider	Purpose	Data Shared	Privacy Policy
Stripe	Payment processing	Email, billing info	stripe.com/privacy
Resend	Transactional email delivery	Email address	resend.com/privacy
Railway	Application and database hosting	All account data (encrypted at rest)	railway.app/privacy
Cloudflare	CDN, DNS, and landing page analytics	Aggregate page view data (no PII)	cloudflare.com/privacy

We do not share your data with advertising networks, data brokers, or marketing platforms.

4. Cookies

We use a single essential session cookie ("session") to keep you logged in to the dashboard. This cookie:

• Is httpOnly (not accessible to JavaScript)
• Is secure (transmitted only over HTTPS in production)
• Expires after 30 days
• Contains only a random session token (no personal data)

We do not use tracking cookies, advertising cookies, or third-party cookies.

5. Data Security

We implement the following security measures to protect your data:

• Passwords are hashed using bcrypt with 12 salt rounds (never stored in plain text)
• Session tokens are generated using cryptographically secure random bytes (256-bit)
• All data in transit is encrypted via HTTPS/TLS
• Database access is restricted and encrypted at rest
• Rate limiting protects against brute-force attacks
• Stripe webhook signatures are verified to prevent spoofing
• HTTP security headers are enforced via Helmet
• Expired sessions are automatically purged every 6 hours

6. Data Retention

• Active accounts: Data is retained for the duration of your subscription.
• Canceled accounts: Account data is retained for 30 days after cancellation, then permanently deleted.
• Session data: Expired sessions are automatically deleted every 6 hours.
• Conversation counts: Reset at the start of each billing period.

7. Your Rights

You have the following rights regarding your personal data:

7.1 All Users

• Access: You may request a copy of all personal data we hold about you.
• Correction: You may update your profile information through the dashboard at any time.
• Deletion: You may request deletion of your account and all associated data by contacting us at contact@zeesolution.net.
• Portability: You may request your data in a machine-readable format.

7.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we collect, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information to third parties. As such, there is no need to opt out. However, you may contact us at any time to confirm this.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, contact us at contact@zeesolution.net. We will respond within 45 days.

7.3 Do Not Sell My Personal Information

Zee Solution LLC does not sell, rent, or trade your personal information to any third party for monetary or other valuable consideration. This applies to all users, including California residents under the CCPA.

8. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

9. International Data Transfers

Our Service is hosted in the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the dashboard at least 30 days before taking effect. The "Last Updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: contact@zeesolution.net
Website: zeesolution.net