1. Introduction
This Privacy Policy explains how ZERO → ONE, operated under the EPOS Group brand (“we”, “us” or “our”), collects, uses, stores and shares information when you use our website, account system and digital product.
We aim to process personal information transparently and in accordance with applicable privacy and data protection laws.
2. Information We Collect
Account information
When you register or maintain an account, we may process:
- email address;
- name;
- internal user ID;
- account role;
- account access status;
- authentication and security information.
Purchase information
When you purchase ZERO → ONE, we may receive information from our commerce provider such as:
- purchase email;
- order or transaction ID;
- product identifier;
- purchase amount;
- currency;
- payment status;
- refund or cancellation status;
- purchase date.
We generally do not receive or store your complete payment card details.
Course and product data
When you use ZERO → ONE, we may store:
- course progress;
- completed lessons;
- lesson workspace content;
- tool outputs;
- saved answers and inputs;
- product submissions;
- timestamps associated with your activity.
Technical and security data
We or our infrastructure providers may process technical information such as:
- IP address;
- browser and device type;
- operating system;
- request information;
- authentication sessions;
- security logs;
- error and diagnostic data.
Analytics information
Where analytics consent is provided, we use Microsoft Clarity to understand how visitors interact with our website.
This may include interaction data such as page visits, clicks, scrolling, mouse movement, navigation, device information, performance information, heatmaps and session replay data.
Sensitive input fields are intended to remain masked by Clarity's privacy protections.
3. How We Use Information
We may use personal information to:
- create and authenticate your account;
- verify whether you are entitled to access paid content;
- provide course functionality;
- save progress, workspaces and tool outputs;
- process and reconcile purchases;
- send transactional and account emails;
- provide customer support;
- detect fraud, abuse and security threats;
- diagnose technical problems;
- understand how the website is used;
- improve ZERO → ONE and its user experience;
- comply with applicable legal obligations.
4. Legal Bases
Depending on your jurisdiction, we may process information on one or more of the following bases:
- performance of a contract with you;
- your consent;
- our legitimate interests in operating, securing and improving the Service;
- compliance with legal obligations;
- other grounds available under applicable law.
Analytics cookies and comparable non-essential tracking technologies are used only where we have an appropriate legal basis and, where required, after your consent.
5. Service Providers
We rely on third-party providers to operate ZERO → ONE.
Supabase
Used for authentication, databases, account data, course progress and application storage.
Vercel
Used for hosting, deployment and website infrastructure.
Gumroad
Used for commerce, checkout, payment-related processing and purchase information.
Resend
Used for transactional email delivery, including account and authentication emails.
Microsoft Clarity
Where analytics consent is provided, Microsoft Clarity is used for behavioural analytics, heatmaps and session replay to understand and improve the user experience.
Microsoft may process analytics and device information in accordance with its own privacy documentation.
6. Cookies and Similar Technologies
We use cookies and similar technologies for authentication, security, preferences and, where permitted, analytics.
For more information, see our Cookie Policy .
7. Microsoft Clarity
We use Microsoft Clarity to understand website usage through behavioural metrics, heatmaps and session replay.
Clarity may process website interaction data using first-party and third-party cookies and other technologies when the required analytics consent has been given.
This information helps us improve usability, diagnose friction and understand which parts of ZERO → ONE are useful to visitors.
You can refuse analytics cookies without losing access to the core functionality of ZERO → ONE.
8. International Data Transfers
ZERO → ONE is intended for an international audience and our service providers may operate infrastructure in multiple countries.
Personal information may therefore be processed outside your country of residence.
Where required by applicable law, appropriate mechanisms or safeguards are used for international transfers.
9. Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Policy, including operating your account, providing paid access, maintaining records, resolving disputes, preventing fraud and complying with applicable law.
Different categories may have different retention periods.
Microsoft currently states that standard Clarity playback data is retained for 30 days, while certain click, heatmap and labelled or favourited session data may be retained for up to nine months.
10. Security
We use technical and organisational measures intended to protect personal information against unauthorised access, misuse, alteration or loss.
No online system can guarantee absolute security.
11. Your Privacy Rights
Depending on your location, you may have rights including:
- access to personal information;
- correction of inaccurate information;
- deletion;
- restriction of processing;
- data portability;
- objection to certain processing;
- withdrawal of consent;
- the right to lodge a complaint with a relevant privacy or data protection authority.
These rights may be subject to limitations or exceptions under applicable law.
12. Deletion Requests
You may contact us to request deletion of your account or personal information.
Certain transaction, security or compliance records may need to be retained where permitted or required by applicable law.
13. Children
ZERO → ONE is not designed as a service directed specifically at children.
Users must meet any minimum age or contractual-capacity requirements applicable in their jurisdiction.
14. Changes to This Policy
We may update this Privacy Policy as ZERO → ONE, our providers or applicable privacy requirements change.
The latest version will be published on this page.
15. Contact
ZERO → ONE is operated under the EPOS Group brand.
Privacy enquiries: support@zero-0ne.com