Privacy Policy
Last updated: 3 November 2026
- Who we are
- What we collect
- How we use it
- Who processes it
- How long we keep it
- Reading statistics
- Cookies and local storage
- Your rights
- Other details
Who we are
Zinewright is operated by AjajaLab, an individual sole proprietor based in Hangzhou, China. We are the controller of the personal data described here. Contact: support@zinewright.com.
What we collect
| Data | Examples | Source |
|---|---|---|
| Account | Email address, whether it is verified, an account identifier, session records | You, through the AjajaLab account sign-in |
| Your content | Manuscripts, Word and PDF files, cover images, drafts, generated pages and PDFs, publication titles | You |
| Purchases | Plan, order and subscription status, country, transaction identifiers. We do not receive your card details. | Paddle |
| Technical | IP address, browser and device type, request times and error logs | Your browser, through our hosting provider |
| Support | Messages you send us and our replies | You |
| Copyright notices | Name, postal address, telephone number, email, signature and the details of the claim in a copyright notice or counter-notice | You, when you send one; forwarded in full to the other party (Terms, section 7) |
| Moderation records | Withdrawals and their reasons, the number of withdrawals in a workspace, publishing suspensions, fingerprints of withdrawn content, and the notices we sent | Our review of reports |
| Waiting list | Your email address and account identifier, if you join the waiting list while sign-ups are limited | You |
| Reports | The reason and description you give, an optional contact email, the page you were reading, and a keyed hash of your network address (not the address itself) | You, when you report a publication |
Readers who open a published link do not create an account. We only process the technical data their browser sends to load the pages, anonymous reading statistics (see below), and what they enter if they report a publication.
How we use it
- To provide the service (performance of our contract with you): sign-in, storing and converting your files, publishing reading links, enforcing plan limits.
- To keep it secure and working (our legitimate interests): preventing abuse and automated sign-ups, rate limiting, diagnosing errors.
- To handle purchases and accounting (contract and legal obligations), together with Paddle.
- To answer you when you contact support.
- To review reports (our legitimate interest and legal obligations in keeping the service lawful): checking reported publications, contacting the reporter if they left an email, and limiting repeated reports from one network.
We do not sell personal data, do not show advertising in the workspace, and do not use your content to train machine learning models.
Who processes it
| Provider | What for |
|---|---|
| Cloudflare, Inc. | Hosting, databases, file storage, page rendering, sending sign-in codes by email, and bot protection (Turnstile) on the sign-in page. If we later add Turnstile to the report form, it will check the reporter's browser and network address in the same way; we will update this policy before we do. |
| AjajaLab account service (auth.ajajalab.dev) | Our own sign-in service, shared by AjajaLab products and run on Cloudflare; it stores your email address and sign-in sessions |
| Paddle.com | Checkout, payment, tax and invoicing as Merchant of Record. Paddle processes your payment details under its own privacy policy. |
We operate from China; these providers may process data in the United States and other countries. Where required, transfers are covered by standard contractual clauses or equivalent safeguards.
How long we keep it
- Account data: while your account is active. When you delete your Zinewright account in the workspace settings, reading links go offline at once and, after a 7-day period in which you can cancel, we erase your publications, files, settings and email address. We keep a pseudonymous record (your account identifier, usage counts and any moderation history) so that signing in again does not restart the free trial or clear earlier decisions. Your shared AjajaLab account is deleted within 30 days of a request to support, except records we must keep by law.
- Zinewright sign-in: 24 hours. Your shared AjajaLab account session lasts up to 7 days and is renewed while you use it.
- Uploaded PDF originals: deleted after successful generation; failed uploads after 7 days.
- Unpublished proofs: 7 days. For each publication we keep the published version and one earlier version.
- Drafts and publications: until you ask us to delete them or close your workspace.
- Waiting list: until we invite you or you ask us to remove you; we only use it to tell you when you can sign up.
- Invitation codes: we keep which code created which workspace, to manage the private preview.
- Moderation records and copyright notices: kept while they are needed to handle appeals, repeat violations and legal claims, including after a publication is deleted, and reviewed at least once a year.
- Reading statistics: the per-reading random number after about 48 hours; daily totals until the publication is deleted.
- Reports: the report itself, including the description you wrote, the optional contact email and the page you were reading, is kept as a record of our review for as long as moderation records are (see above), and reviewed at least once a year. The network hash used for rate limiting is erased after 30 days.
- Purchase records: as long as tax and accounting law requires.
- Technical logs: kept by our hosting provider for a limited period, typically days to weeks.
Reading statistics
So that authors can see how their publications are read, public reading pages send us a few anonymous events: that a publication was opened, which pages were shown and for how long, how far through it the reader got, whether the PDF was downloaded, the kind of device (phone, tablet or desktop, judged from the screen size), and where the reader came from (the referring website's name, a campaign tag in the link, or "direct"). Our legal basis is our legitimate interest, and the author's, in understanding readership.
- No cookies, local storage or fingerprinting are used for these statistics, and nothing is stored on the reader's device to recognize them later. Each page load gets a random number held only in memory, so we count readings, not people. (The reader separately remembers your last page in your browser's local storage so you can carry on; see Cookies and local storage. That value is not used for statistics, but the page you start on and the pages shown are part of them.)
- We do not store IP addresses, full browser details, or the full address of the referring page. The random number for a reading is deleted after about 48 hours by an hourly clean-up; after that only daily totals per publication remain.
- If your browser sends the Global Privacy Control signal, the reader sends no statistics at all.
- Private proofs, the workspace and this website send no reading statistics. Authors see only totals, never individual readings, and their own visits while signed in are not counted.
- Daily totals are deleted when the author deletes the publication.
Cookies and local storage
We use only cookies that are necessary for signing in: a session cookie for your workspace and a short-lived cookie that protects the sign-in process. Public reading pages and this website do not set advertising or analytics cookies; reading statistics work without cookies.
The reader also uses your browser's local storage (localStorage) to remember the last page you read in each publication, so you can carry on where you stopped. This stays on your device, is not sent to us, is not used for statistics and does not identify you. You can clear it in your browser settings; the reader then opens at the first page.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. Write to support@zinewright.com; we answer within 30 days. You can also complain to your local data protection authority.
Other details
Zinewright is not intended for children under 16. We protect data with encrypted connections, private storage, hashed session tokens and per-workspace access checks. If we change this policy in a material way, we will notify you by email or in the workspace before the change applies.