zu.lk
zu.lk

Privacy Policy

Last updated: August 27, 2025

Privacy at a Glance

Zu.lk is a product of Veventii (PVT) LTD, and we are committed to protecting your privacy. We collect minimal data necessary to provide our URL shortening service, use it transparently, and retain it only as long as needed. You have full control over your data.

Legal Entity: Veventii (PVT) LTD operates zu.lk and is responsible for data processing under this privacy policy.

Data Collection

Information You Provide

  • Account Information: Email address, name, and profile information when you sign up via Google OAuth
  • Link Data: Original URLs, custom short link keys, UTM parameters, expiration dates, and passwords you set
  • Organization Data: Organization names, member roles, and team collaboration settings
  • Support Communications: Messages and information you provide when contacting our support team

Information We Collect Automatically

  • Click Analytics: User agents, referrer URLs, click timestamps, and geographic location (country/city level)
  • Usage Data: Feature usage patterns, API calls, and service performance metrics
  • Technical Data: Browser type, device information, operating system, and connection details
  • Cookies: Authentication tokens, session data, and preference settings

How We Use Your Data

Service Provision

  • Creating and managing your short links
  • Redirecting users to original URLs
  • Providing click analytics and performance insights
  • Managing your account and organization memberships
  • Enabling team collaboration features

Analytics and Insights

  • Generating click statistics and performance reports
  • Providing geographic and demographic insights
  • Tracking campaign performance and UTM parameter effectiveness
  • Identifying usage trends and popular content

Service Improvement

  • Analyzing service performance and reliability
  • Developing new features and capabilities
  • Preventing fraud and abuse
  • Ensuring security and system integrity

Communication

  • Sending service-related notifications and updates
  • Providing customer support and technical assistance
  • Sharing important policy changes or security alerts
  • Sending optional marketing communications (with your consent)

Data Retention

Retention Periods

Account Data

Retained for the lifetime of your account plus 30 days after deletion

Link Data

Retained indefinitely while your account is active, or until you delete specific links

Click Analytics

Retained for 7 years for business analytics purposes, with IP addresses anonymized after 90 days

Usage Logs

Retained for 1 year for security and performance monitoring

Support Communications

Retained for 3 years for quality assurance and legal compliance

Data Deletion

You can delete your data at any time by:

  • Deleting individual links through your dashboard
  • Requesting account deletion via your account settings
  • Contacting our support team for bulk data deletion
  • Using our API to programmatically manage your data

Third-Party Services

Analytics Partners

  • Google Analytics: Helps us understand website usage patterns and improve user experience

Authentication Services

  • Google OAuth: Enables secure login without storing your password

Infrastructure Partners

  • Cloudflare: Provides complete hosting infrastructure, data storage, content delivery, and security protection with premium-grade encryption and global edge network

Your Rights and Controls

You Have the Right To:

  • Access all data we have about you
  • Correct inaccurate or incomplete information
  • Delete your account and associated data
  • Export your data in a portable format
  • Opt out of marketing communications
  • Restrict certain data processing activities
  • File complaints with data protection authorities

Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Controls: Role-based access with multi-factor authentication for team members
  • Regular Audits: Security assessments and vulnerability testing
  • Incident Response: 24/7 monitoring and rapid response procedures
  • Data Minimization: We collect only what's necessary for service provision

International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) with all data processors
  • Adequacy decisions from relevant data protection authorities
  • Additional safeguards for sensitive data transfers

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy periodically. We'll notify you of significant changes via email or through our service. Your continued use after changes indicates acceptance of the updated policy.

Contact Us

For privacy-related questions, data requests, or concerns, contact us: