Effective date: May 23, 2025

Privacy Policy

Zero to Sec ("we," "us," or "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights regarding that data.

If you have questions, email us at support@zerotosec.com.

1. Information We Collect

We collect only what is necessary to provide our services:

  • Email address — when you submit a form on our site (free resource download or Academy waitlist).
  • Chat data — if you use the live chat widget, Tawk.to may collect your IP address, browser type, pages visited, and any messages you send.

We do not collect payment information, passwords, or create user accounts.

2. How We Use Your Information

  • Email address: To send you the requested resource and occasional updates about IAM content, new guides, and the Zero to Sec Academy. You can unsubscribe at any time using the link in any email.
  • Chat data: To respond to your support and general questions.

We do not sell your personal information to third parties.

3. Third-Party Services

We use the following third-party processors. Each has its own privacy policy governing how your data is handled on their platforms:

  • ConvertKit — email delivery and list management. ConvertKit processes email addresses on our behalf. See the ConvertKit Privacy Policy.
  • Tawk.to — live chat widget embedded on all pages. Tawk.to may set functional cookies and collect session data. See the Tawk.to Privacy Policy.

4. Cookies

We do not set any first-party cookies. The Tawk.to live chat widget sets functional cookies necessary for the chat feature to operate. These cookies do not track you across other websites and are not used for advertising.

5. Your Rights

Depending on where you live, you may have the following rights:

  • Unsubscribe: You can opt out of email communications at any time via the unsubscribe link in any email we send.
  • Access & correction: You can request a copy of the personal data we hold about you.
  • Deletion: You can request that we delete your personal data by emailing support@zerotosec.com.
  • EU/EEA residents (GDPR): You have the right to access, correct, delete, and port your data, and to object to or restrict its processing. You may also lodge a complaint with your local data protection authority.
  • California residents (CCPA): You have the right to know what personal information is collected and sold, to opt out of the sale of your personal information (we do not sell it), and to request deletion.

To exercise any of these rights, email support@zerotosec.com. We will respond within 30 days.

6. Data Retention

  • Email: Retained in ConvertKit until you unsubscribe or request deletion.
  • Chat logs: Retained according to Tawk.to's own data retention policy.

7. Data Security

We take reasonable precautions to protect your information. However, no method of electronic transmission or storage is 100% secure. We encourage you to contact us immediately at support@zerotosec.com if you believe your data has been compromised.

8. Children's Privacy

Our site is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page will reflect the most recent revision. Continued use of the site after any changes constitutes acceptance of the updated policy.

10. Contact

Questions or requests? Email us at support@zerotosec.com.