Your privacy matters
at URLZone

We collect only the data necessary to provide and improve the URLZone service. The categories of data we collect are:

Soft24 Technologies uses your data only for the following purposes:

• Service delivery: To create and manage your account, generate short links, QR codes, and provide analytics dashboards.
• Billing & payments: To process subscription payments, issue invoices, and manage plan changes — all handled by Soft24 Technologies.
• Service improvement: To analyse aggregate usage patterns, identify performance bottlenecks, and develop new features.
• Communications: To send transactional emails (account verification, password reset, ticket notifications, billing receipts) and, where you have opted in, product updates.
• Security & fraud prevention: To detect and prevent abuse, unauthorised access, spam links, and malicious activity.
• Legal compliance: To comply with applicable laws, regulations, or enforceable governmental requests.
• Support: To investigate and resolve support tickets and provide customer assistance.

We do not use your personal data for automated individual decision-making or profiling that produces legal or significant effects on you.

Legal Basis for Processing

URLZone provides link analytics as a core product feature. When a visitor clicks one of your shortened links, we automatically record:

• Click timestamp — date and time of each click
• Geographic data — country and city derived from the visitor’s IP address (IP is not stored)
• Device type — desktop, mobile, or tablet
• Browser — browser name and version
• Operating system — Windows, macOS, Android, iOS, etc.
• Referrer — the URL of the page that contained the link (if available)

Platform analytics: We use Google Analytics on the URLZone website (not on redirected links) to understand how visitors interact with our pages — including page views, session duration, and navigation paths. Google Analytics data is collected under Google’s privacy policy and may involve cookies. You can opt out via the Google Analytics opt-out browser add-on.

URLZone uses cookies and similar technologies to operate the service and improve your experience.

You can manage or withdraw cookie consent at any time via our Cookie Policy page or through your browser settings. Disabling essential cookies will affect service functionality.

We share data only in the following limited circumstances:

• Service providers: Trusted processors (hosting, email delivery, payment gateways) who act under strict data processing agreements and are permitted to use your data only to provide their services to us.
• Payment processing: Billing data is handled by Soft24 Technologies via a PCI-DSS certified payment gateway. We do not store raw card numbers.
• Legal requirements: We may disclose data when required by law, court order, or to protect the rights, property, or safety of Soft24 Technologies, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you before any such transfer takes effect.

Soft24 Technologies implements layered technical and organisational safeguards to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.

Technical Safeguards

• Encryption in transit: All data exchanged between your browser and our servers is protected using TLS 1.2 / TLS 1.3
• Encryption at rest: Sensitive data stored in our databases is encrypted at rest using AES-256
• Password security: Passwords are stored as hashed and salted values using bcrypt — never in plain text
• Two-factor authentication: URLZone supports TOTP-based 2FA and backup recovery codes — we strongly recommend enabling 2FA on your account
• Payment security: All transactions are processed via a PCI-DSS compliant gateway; we do not store raw card numbers or CVV data on our servers
• Automated backups: Database backups are performed daily and retained securely with geographic redundancy
• Access audit logging: All access to production systems is logged and auditable

Organisational Safeguards

• Production system access is restricted to authorised personnel only, verified via multi-factor authentication
• Access is granted on a least-privilege basis and reviewed periodically
• Security patches and dependency updates are applied on a regular scheduled basis
• Regular internal security reviews and third-party vulnerability assessments are conducted
• All team members with access to personal data are bound by contractual confidentiality obligations

Incident Response

In the event of a personal data breach, Soft24 Technologies will assess the risk and, where required by applicable law, notify affected users and relevant authorities within 72 hours of becoming aware of the incident. Notification will include the nature of the breach, categories of data affected, and the steps we are taking to mitigate any harm.

We retain your data only for as long as it is necessary to fulfil the purposes set out in this policy or as required by law:

Under applicable data protection law, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@urlzone.in.

We will respond to rights requests within 30 days. We may need to verify your identity before processing a request.

URLZone is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us at support@urlzone.in and we will delete it promptly.

URLZone may contain links to external websites or embed third-party services (such as Google Analytics or payment gateways). We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external sites you visit.

Short links created through URLZone may point to third-party destinations. The privacy practices of those destination sites are entirely independent of URLZone and Soft24 Technologies.

Soft24 Technologies may update this Privacy Policy from time to time. When we do, the “Last updated” date at the top of this page will be revised. We will notify registered users of material changes via email or in-app notification at least 14 days before changes take effect.

Your continued use of URLZone after the effective date of any update constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please reach out to us:

• Email: support@urlzone.in
• Company: Soft24 Technologies
• Support portal: URLZone Support Centre