ZOYALINK Privacy Policy
This policy explains transparently how ZOYALINK collects, uses, stores, shares, and protects your personal data, and the rights you have over it.
Effective: October 12, 20261. Introduction & Scope
ZOYALINK (“we”, “us”) is a social platform for sharing stories, images, and videos, available through the website zoyalink.com and the ZOYALINK Android app (together, the “Service”). For the purposes of this policy, ZOYALINK acts as the controller of personal data processed through the Service.
This policy applies to all visitors and registered users. By accessing or using the Service, you confirm that you have read and understood it. We process personal data in accordance with applicable laws, including Indonesia's Law No. 27 of 2022 on Personal Data Protection, the Electronic Information and Transactions Law, and their implementing regulations.
This policy should be read together with our Terms of Service.
2. Data We Collect
We collect only data that is relevant and necessary to operate the Service.
a. Data you provide
- Account data: username, full name, email address, and password.
- Profile data: profile photo, bio, and your chosen language preference.
- Your content: stories, images, videos, comments, and other interactions you post or perform on the Service, including following other accounts.
- Optional data: a region you select manually yourself, and occupation. Providing these is voluntary and not required to use the Service.
- Communications: messages, reports, or requests you send to us.
b. Data collected automatically
- Technical data: IP address, device type, operating system, browser type and version, and pages visited.
- Activity data: the time you were last active, usage logs, and interactions with Service features.
- Android app data: a device token used for push notifications.
- Cookies: as described in the Cookies section below.
About location: ZOYALINK does not request location (GPS) permission on your device and does not track your position. Region contains only information you choose yourself, manually.
We do not ask for sensitive categories of personal data (such as health, biometric, or criminal records) to use the Service, and we ask that you do not post them on public profiles.
3. How We Collect Data
- Directly from you when you register, complete your profile, select a region, post content, or contact us.
- Automatically through our systems when you use the website or app, including cookies and server logs.
- From your device when you allow notifications in the Android app. You can change this permission at any time in your device settings.
4. Purposes & Legal Bases
We process your personal data only for the following purposes, each with a valid legal basis:
- Providing the Service (account creation, authentication, profile display, content delivery and interaction). Basis: performance of our agreement with you.
- Security and abuse prevention (for example spam, fake accounts, and violations of the Terms of Service). Basis: legitimate interests and legal obligations.
- Personalization and recommendations (showing content in your language, and recommending your account to other users, and theirs to you, based on the region you select yourself, to make it easier to connect with people nearby). Basis: consent or legitimate interests.
- Communications (account security notices, feature updates, policy changes, and activity notifications). Basis: performance of agreement and legitimate interests.
- Improving the Service (performance analysis, bug fixing, and feature development). Basis: legitimate interests.
- Legal compliance (responding to official requests from competent authorities). Basis: legal obligation.
Where processing is based on your consent, you may withdraw it at any time as described in the Your Rights section.
5. Push Notifications
If you use the ZOYALINK Android app and allow notifications, we store your device token and use Firebase Cloud Messaging (Google) to deliver activity notifications, for example when there is new interaction on your account. You can disable notifications at any time in your device or app settings.
6. Cookies & Similar Technologies
We use cookies and similar technologies to:
- keep you logged in and protect your account;
- remember preferences such as language and display settings;
- support security and abuse prevention;
- understand general use of the Service so we can improve it.
You can manage or disable cookies in your browser settings. Disabling essential cookies may cause some features, such as login, to stop working properly.
7. Sharing of Data
ZOYALINK does not sell or rent your personal data. We share data only in the following circumstances:
- Service providers (data processors) that help us operate the Service, such as hosting and server infrastructure providers, and Google Firebase for push notifications. They may process data only on our instructions and for the purpose of running the Service.
- Legal obligations: when required by law, a court order, or an official request from a competent authority.
- Protection of rights and safety: to enforce our Terms of Service, prevent fraud, or protect the safety of users and the public.
- Business changes: in the event of a merger, acquisition, or transfer of the Service, with notice to you and continued protection of your data.
- Your consent: in any other case you expressly agree to.
8. International Data Transfers
Some of our service providers may store or process data on servers located outside Indonesia. In such cases, we work to ensure your data continues to receive an adequate level of protection in line with applicable law.
9. Retention & Deletion
- Account data and content are kept while your account is active and as long as needed to provide the Service.
- After your account is closed or deleted at your request, personal data will be deleted or anonymized, except data we must retain to meet legal obligations, resolve disputes, or enforce our Terms of Service.
- System backups may retain data for a limited period before being automatically overwritten.
- Security logs are kept only as long as necessary for security and abuse prevention.
10. Data Security
We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- encrypted connections (HTTPS) for data in transit;
- storing passwords as hashes rather than plain text;
- restricting internal access to authorized personnel who need it.
No system is completely risk-free. You also play a part in protecting your account by using a strong, unique password and not sharing it with anyone.
11. Your Rights
Under applicable law, you have the right to:
- Access your personal data and obtain information about how it is processed.
- Correct inaccurate or incomplete data. Most profile data, including your region, can be edited directly in your account settings.
- Delete your personal data and close your account.
- Withdraw consent for processing based on consent.
- Object to or restrict certain processing, including processing for personalization and recommendations.
- Receive and transfer a copy of your data in a commonly used format, where technically feasible.
- Lodge a complaint with us or with the competent data protection authority.
How to make a request
Email [email protected] from the email address registered to your account, stating your username and the type of request (access, correction, deletion, etc.). To protect your account, we may ask for additional information to verify your identity. We will respond as soon as possible and within the time limits set by applicable law.
12. Public Content & Privacy Controls
Stories, images, videos, comments, and profile information you share publicly can be seen by other users and visitors, and may be re-shared or indexed by search engines. Please think carefully before sharing personal information in public content or on your public profile. You can delete your own content or edit your profile data at any time, but copies already shared by others outside our control may not be removed.
13. Children's Privacy
ZOYALINK is intended for users aged 18 and older. We do not knowingly collect personal data from minors. If we learn that an account was created by a minor, we will deactivate it and delete its data. If you come across such an account, please report it to [email protected].
14. Third-Party Links
The Service may contain links to third-party websites or services, including links shared by users. We do not control and are not responsible for their privacy practices. We encourage you to read their privacy policies before using them.
15. Data Incident Handling
If a personal data protection failure occurs that may harm you, we will address it promptly and notify affected users and the competent authorities in accordance with applicable law.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the Service or the law. The latest version is always published on this page together with its effective date. For material changes, we will make reasonable efforts to notify you through the Service or by email. By continuing to use the Service after changes take effect, you accept the updated policy.
17. Contact Us
If you have questions, complaints, or requests regarding this Privacy Policy, please contact us:
- Privacy & personal data email: [email protected]
- Child safety reports: [email protected]
- Help center: Contact ZOYALINK
- Related information: Terms of Service, How ZOYALINK Works, and FAQ
Share Your Stories Safely on ZOYALINK
Share stories, images, and videos, grow your reach, and build a creative community on a platform that respects your privacy.
Create Free Account