Privacy Policy
This policy explains how ZEROINE LTD (“Zeroine”, “we”, “us”) handles personal data on this website and in Clause Monitor, our social listening product. If you have a question, write to hello@zeroine.com.
1. Who we are
ZEROINE LTD is a company registered in Scotland, company number SC873666, registered office 15J, 77 John Street, Glasgow, G1 1JF, United Kingdom.
When we provide Clause Monitor to a brand, we process data on the brand’s behalf and under its instructions, and the brand is responsible for how it uses the results. For this website and for our own business contacts, we are the controller.
2. What Clause Monitor does
Clause Monitor helps a brand’s marketing team find public posts and comments that mention the brand, its stores or its products, including people asking where to buy something. It sorts these findings and sends them to the brand’s team as alerts and a daily digest, with a suggested reply. A person on the brand’s team decides whether to reply and does so from the brand’s own account. Clause Monitor never posts, comments or sends messages by itself.
3. Data we process
| Category | What it includes | Where it comes from |
|---|---|---|
| Connected brand accounts | Account ID and username, access token, the brand’s own posts, comments and replies on those posts, and public posts or comments that mention or tag the brand | Threads and Instagram, through Meta’s official APIs, after the account owner authorises Clause Monitor |
| Public posts found by search | Post ID and link, text, publication time, the author’s public username and public engagement counts | Threads keyword search and Instagram hashtag search where available to our app, public search feeds such as Google Alerts, and public websites |
| Brand team members | Name and messenger account of the staff who receive alerts | The brand, our client |
| Contact with us | Your name, email address and the content of your message | You, when you write to us |
We do not access private or direct messages, follower or following lists, or any content that is not public. We do not collect data from accounts that their owners have not connected, other than public posts as described above.
4. How we use the data
- to find posts and comments relevant to the brand and remove duplicates;
- to sort findings by topic, urgency and relevance using automated text analysis, including AI language models;
- to send alerts and a daily digest to the brand’s team and to suggest replies, which a person reviews before anything is published;
- to produce aggregated statistics for the brand, such as the number of mentions per week;
- to keep the service secure and working, and to answer your messages.
We do not sell personal data, use it for advertising or profiling, combine it with other data to identify or track individuals, use it to make decisions about eligibility for credit, employment, housing or insurance, or use it to train AI models.
5. Legal bases
Under the UK GDPR we rely on:
- legitimate interests: a brand’s interest in noticing and answering public questions and feedback about it, and our interest in providing and securing the service. The posts were published publicly by their authors, we keep only what is needed for a short time, and we never contact people automatically;
- contract: to provide the service to our clients and to manage connected accounts;
- legal obligations: where the law requires us to keep or disclose information.
6. Who receives the data
- the brand’s authorised staff who use Clause Monitor;
- service providers who process data for us under contract: DigitalOcean, LLC (hosting, servers in Frankfurt, Germany), Anthropic, PBC and Google LLC (AI text analysis), and Telegram (delivery of alerts to the brand’s staff);
- authorities, where the law requires us to share data.
We do not give data obtained from Meta platforms to data brokers, advertising networks or any other third party.
7. International transfers
Our servers are in Germany. Some service providers, such as our AI providers, process data in the United States. Where data leaves the UK, we rely on UK adequacy regulations or on appropriate safeguards such as the UK International Data Transfer Addendum to the EU standard contractual clauses.
8. How long we keep data
- findings from public posts and comments: 90 days, then deleted;
- connected account data and access tokens: until the brand disconnects the account or ends its contract, then deleted within 30 days;
- encrypted backups: up to 60 days, then deleted;
- messages to us: up to 2 years, unless we need them longer for a legal claim.
9. Security
Data is encrypted in transit. Access tokens are stored encrypted. Only staff who need access have it, and actions in the service are logged.
10. Your rights
You can ask us to access, correct or delete your personal data, to restrict or object to its processing, or to receive it in a portable format. Write to hello@zeroine.com; if your request is about a post or comment, include its link. We reply within one month. If we hold the data on behalf of a brand, we pass your request to the brand and help it respond.
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
11. Deleting data
12. This website
This website does not use cookies, analytics or tracking, and does not load content from third parties.
13. Changes
If we change this policy, we will update the date at the top of this page.