Privacy Policy

This Privacy Policy explains what information the Tayozola Network ("Tayozola", "we", "us") collects, why, and your choices. It covers the portal at tayozola.net, the dashboard at dash.tayozola.net, the brand and journal site at tayozola.info, and related services we operate.

1. Who is responsible

Tayozola Network LLC ("Tayozola"), based in Chicago, Illinois, USA, is the controller of your personal data. Contact: tayozola@gmail.com.

2. Information we collect

• Account information — your email, profile details you provide, and your account ID and tier/role.
• Authentication data — sign-in confirmation and session tokens; and, if you enable them, two-factor (TOTP) secrets, passkey (WebAuthn) credentials, security questions, and recovery codes.
• Inbox / email content — if you use the private email feature, the messages you send and receive (subject, body, attachments) are stored so the inbox can work.
• Usage, system & audit logs — records of account actions, sign-ins, and security events used to operate and protect the Service.
• Support content — information you provide when you contact support or open a ticket.
• Payment information — we do not currently process payments or store payment details (paid plans aren't active yet). When billing launches, payments will be handled by a third-party processor.

We do not use third-party advertising or cross-site tracking.

3. How we use information

To create and secure your account; provide the Service (virtual machines, storage, the private inbox, the Zola assistant, backups); authenticate you and prevent abuse; keep audit/security logs; respond to support requests; send essential service emails; and comply with legal obligations.

4. Legal basis

We currently offer the Service to users in the United States and operate under U.S. law, including the California Consumer Privacy Act (CCPA/CPRA) where it applies. We will update this policy before offering the Service internationally (for example, to address the EU/UK GDPR). Where a legal basis is required, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where needed, and compliance with legal obligations.

5. Cookies and local storage

We use browser local storage (not advertising cookies) to run the Service:

• tzn_session — your sign-in session token, so you stay logged in.
• tzn_theme — your light/dark appearance preference.

We don't use these for advertising or third-party tracking.

6. Third-party processors

We share data with service providers only as needed to run the Service:

• Cloudflare — hosting, content delivery, and data-at-rest storage (Workers, Pages, KV, the D1 database, and R2 object storage, including email attachments).
• Resend — delivery of transactional and outbound email.
• Google / Gmail — administrative email handling for the operator inbox.

Inbound email is received through email routing and stored in our systems. These providers process data under their own terms and security commitments.

7. Where your data is stored

Account data, sessions, mail, and attachments are stored on Cloudflare infrastructure, which may process data across global edge locations. Virtual machines and certain storage run on Tayozola-managed hardware in the United States (Chicago, Illinois).

8. Data retention

• We keep your information while your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period — except where we must keep it longer for legal, security, or audit reasons.
• Sign-in sessions expire after 7 days of inactivity and 30 days maximum.
• Free trial data may be deleted shortly after the 7-day trial ends if you don't upgrade.
• Account deletion is staged and then completed automatically.
• As a guide, audit and security logs are kept for about 12 months, backups for about 30 days, and data from deleted accounts is purged within about 30 days.

9. Security

We protect your data with email confirmation, optional authenticator-code sign-in, passkeys, session controls, audit logging, and isolation between environments (the public demo runs on a separate, isolated backend with no access to real customer data). No method is perfectly secure, but we work to protect your information.

10. Your rights and choices

• Access and export your data (the dashboard supports account export).
• Delete your account (the dashboard supports account deletion).
• Update your profile and security settings.
• Contact us to exercise privacy rights that apply to you (such as access, correction, deletion, or objection).

To make a request, email tayozola@gmail.com. We aim to respond within 30 days and may need to verify your identity first.

11. Your email content

If you use the private inbox, we store your received and sent messages and attachments so the feature works. We don't read your mail except as needed to operate, secure, or support the Service, or where legally required.

12. Children

The Service isn't directed to children under 13, and we don't knowingly collect their personal data. If you believe a child has provided us data, contact us and we'll remove it.

13. Changes to this policy

We may update this policy. If we make material changes, we'll take reasonable steps to notify you and update the "Last updated" date above.

14. Contact

Questions about privacy or this policy: tayozola@gmail.com.