Zayloft
Zayloft
Cookie Policy
This Cookie Policy explains how Zayloft uses cookies, local storage and similar browser or device technologies on its public websites, account experiences and related web interfaces.
Some technologies are necessary for security and basic operation. Others, if enabled, may support preferences, measurement, functionality or advertising and will be handled according to the choices and legal requirements that apply.
Translations are provided for convenience. If a translated version conflicts with the English version, the English version controls to the extent permitted by applicable law.
How browser technologies are used.
2. Why Zayloft uses these technologies
Cookies and similar technologies can be used to keep a session secure, remember settings, preserve language or appearance preferences, route requests, prevent abuse, understand website performance, support integrations and provide other functions described in this Policy.
Zayloft does not use the existence of a cookie as proof that a person consented to receive marketing communications. Consent to cookies and consent to SMS, email, voice or other communications are separate matters.
3. Strictly necessary technologies
Strictly necessary technologies support functions that are required for a requested website or account service to work. Examples can include session continuity, authentication, security, fraud prevention, load balancing, preference transmission needed for a requested feature and protection against malicious requests.
Where applicable law permits necessary technologies without prior consent, Zayloft may use them for those essential purposes. They should not be repurposed for unrelated advertising or profiling merely because they are technically available.
4. Preference technologies
Preference technologies can remember choices such as language, theme, interface state or other settings selected by a user.
Zayloft may use cookies or local storage for these preferences where appropriate. If a preference technology is not strictly necessary and local law requires consent, it will be handled through the applicable consent mechanism.
Optional measurement and functionality.
5. Analytics and performance technologies
If enabled, analytics and performance technologies can help Zayloft understand how pages are used, detect errors, measure aggregate performance and improve navigation or product experience.
Where prior consent is required for non-essential analytics, those technologies should not be activated until the required choice has been obtained. Where consent is not the applicable legal basis, Zayloft will use the basis and controls required by the law that applies.
6. Functional and integration technologies
Some third-party or embedded functionality may require storage or access technologies to operate, such as support tools, media, authentication integrations, developer tools or other optional features.
When a functional technology is not necessary for a service requested by the user, it may be treated as optional and subject to the applicable consent or privacy controls.
7. Advertising, attribution and targeted advertising
Zayloft may enable advertising, attribution or targeted-advertising technologies only where those technologies are actually part of the website deployment and the required notices and controls have been implemented.
Where applicable law requires prior consent, opt-out, or recognition of an opt-out preference signal for such technologies, Zayloft will apply the required mechanism to the relevant deployment.
The presence of this section does not mean that advertising cookies are active on every Zayloft website or account interface.
8. First-party and third-party technologies
First-party technologies are set or controlled through a Zayloft domain. Third-party technologies are controlled by another provider whose service has been integrated into the site.
A third-party provider may process information according to its own privacy terms where it acts independently. Where a provider processes information on Zayloft’s behalf, its handling is also subject to the contractual and privacy safeguards applicable to that relationship.
Your choices and controls.
9. Consent and preference controls
Where law requires consent for non-essential storage or access technologies, Zayloft will use a consent mechanism designed to allow the user to make the required choice before those technologies are activated.
A consent mechanism should make refusal or withdrawal reasonably accessible and should not present unnecessary obstacles to rejecting optional technologies.
Withdrawing consent does not affect processing that was lawful before withdrawal, and some previously stored cookies may remain on the device until they expire or are deleted unless the site actively removes them.
10. Opt-out preference signals
Where Zayloft is subject to a law that requires recognition of a qualifying browser-based opt-out preference signal, such as Global Privacy Control or another legally recognized signal, Zayloft will process the signal as required for the website practice to which that law applies.
An opt-out preference signal generally concerns specific privacy rights such as sale, sharing or targeted advertising. It does not automatically withdraw a Customer’s separate contractual instructions or a recipient’s consent to communications unless the applicable law expressly gives it that effect.
11. Browser and device controls
Most browsers allow users to delete existing cookies, block certain cookies, clear site data or change storage settings. Device and browser controls vary by provider.
Blocking strictly necessary technologies can prevent authentication, security, language, session or other requested features from working correctly.
Browser controls may supplement a Zayloft consent mechanism, but Zayloft will not treat a browser’s default acceptance of cookies as affirmative consent where applicable law requires a more specific consent standard.
12. Session and persistent storage
Session technologies generally expire when the relevant browser session ends. Persistent technologies remain for a defined period or until they are removed.
Retention should be limited to what is reasonably necessary for the technology’s purpose and should reflect the sensitivity of the data, the user’s choice, the service design and applicable legal requirements.
When a non-essential technology is deployed, the applicable interface, settings or related notice may provide more specific duration information where required.
Account, developer and regional considerations.
13. Account and developer environments
Authenticated account and developer interfaces may use security, session, anti-abuse and preference technologies differently from the public marketing website because those interfaces provide requested account functions.
API clients, SMPP clients and server-to-server integrations do not necessarily use browser cookies. They may instead use API credentials, access tokens, session identifiers or protocol-specific authentication, which are governed by the applicable security and service terms.
Customers should not copy browser cookies, access tokens or session values into public code, screenshots, logs or repositories.
14. Regional privacy requirements
Cookie and storage-access requirements vary by jurisdiction. In regions where non-essential cookies require prior consent, Zayloft will use the applicable consent approach for the relevant deployment.
In jurisdictions that provide rights concerning sale, sharing, targeted advertising or similar processing, the applicable privacy notice and opt-out controls will govern those practices.
Where Brazil’s LGPD or another data-protection law applies, cookie-related personal-data processing will also be handled under the legal bases, transparency and data-subject rights applicable to that processing.
15. Changes and contact
Zayloft may update this Cookie Policy when website technologies, integrations, legal requirements or privacy controls change. A material change will be communicated through an appropriate method where additional notice is legally required.
For questions about cookies, privacy controls or browser-based privacy requests, contact support@zayloft.com with “Cookie privacy question” in the subject line.
Because the exact technology stack can change when integrations are enabled or removed, Zayloft should ensure that any live consent interface or service-specific notice accurately reflects the non-essential technologies actually active on the relevant site.