Privacy Policy

This policy explains what Zaarm Tech (“we”, “us”) collects when you use zaarmtech.com, why, and how to get it deleted. We've written it in plain English rather than boilerplate, because most of the answer is genuinely “we don't collect it.”

The short version

• Most of our tools never send your files anywhere. Our PDF and image tools do all their work inside your browser. Your files are not uploaded to us, and we never see them.
• We run no advertising, analytics, or tracking pixels. There is no Google Analytics, no Meta Pixel, no third-party tracker of any kind on this site.
• We never sell or rent your personal information to anyone, for any purpose.
• You only have an account if you deliberately create one by signing in, and you can have it deleted at any time.

Tools that run in your browser

Every tool currently in our PDF and Facebook tool categories is browser-only. When you drop a file into one of them, that file is read and processed by code running on your own device. It is never transmitted to our servers, so we cannot read it, store it, or recover it. Closing the tab discards it entirely.

Where a tool works differently, the tool's own page says so explicitly before you use it.

If you sign in

Some tools need to save work between visits, so they ask you to sign in with Google. When you do, we receive and store your name, email address, and profile picture from your Google account. We use these only to identify your account and show you your own saved work. We do not receive your Google password, and we cannot access anything else in your Google account.

If you connect a Facebook Page

Our post scheduler can publish to Facebook Pages and connected Instagram professional accounts on your behalf. This only ever happens if you explicitly connect an account and grant permission. When you do:

• We store your Facebook user ID and display name, and the list of Pages and Instagram accounts you chose to manage, so we can show them to you and publish where you tell us to.
• We store the access tokens Facebook issues for those Pages. These are encrypted at rest and are used for one purpose only: publishing the posts you schedule, and reading the Page's own recent published posts when you ask us to draft a caption.
• We read your Page's recent published, public posts only when you use the caption-drafting feature, to match your usual writing style.
• We never post anything you did not schedule, never read your personal Facebook profile, feed, friends, or private messages, and never use your Page data for advertising or share it with anyone else.

You can disconnect at any time, from inside the tool or from your Facebook settings. Disconnecting deletes the stored tokens immediately and cancels anything still scheduled. See Data Deletion.

Content you schedule

To publish a post at a future time, we have to hold onto it until that time. Photos, videos, and caption text you add to the scheduler are stored on our own server, are not publicly listed or browsable, and are deleted automatically within 7 days after the post publishes (or when you delete the post or disconnect the account, whichever is first).

Instagram's publishing API requires that media be fetchable from a public address at the moment of publishing. To satisfy that without leaving your media exposed, each file is given a single unguessable, short-lived link that only works during the few minutes the post is actually being published, and stops working immediately afterwards.

Caption drafting and AI

Caption drafting is optional. It only runs when you press “Generate captions”, and nothing is sent anywhere unless you do.

When you do, we send three things to Google's Gemini API: the photo attached to that post, samples of that Page's own recent public posts (so the draft matches your usual voice), and any note you typed as a hint.

Please read this before using it. We use Google's free tier. On that tier, Google's API terms state that Google uses submitted content “to provide, improve, and develop Google products and services”, and that “human reviewers may read, annotate, and process your API input and output”. Google says it disconnects that data from the account and API key before any reviewer sees it. In plain terms: the photos and captions you send through this feature may be used to improve Google's models, and may be read by people at Google. Google's paid tier excludes both, and we will update this page if we move to it.

If that is not acceptable for a particular photo — anything confidential, anything showing a person who has not agreed to it, or anything you are under contract to keep private — write that caption yourself instead. The rest of the scheduler works perfectly well without this feature, and your images are never sent anywhere except to Facebook or Instagram when you publish.

Free software downloads

Our legacy software downloads ask for your name and email so we can email you a download link. We store that, plus the time of the request, so the link can be validated. We use it to send you the file you asked for. We do not add you to a marketing list.

Questions and answers

The Q&A section can be posted to without an account. We store your post and the IP address it came from. The IP address is used only to rate-limit spam and abuse.

Logs and abuse prevention

We keep minimal records of tool usage — which tool, when, whether it succeeded, and the requesting IP address and account (if signed in). These exist to enforce rate limits and stop abuse of tools that cost us money to run. They are not used to build a profile of you.

Cookies

We set one cookie, and only after you sign in: a session cookie that keeps you signed in. We use no advertising, analytics, or cross-site tracking cookies.

Who else is involved

We keep third parties to a minimum. The ones that exist:

• Google — only if you choose to sign in with it.
• Meta (Facebook/Instagram) — only if you choose to connect a Page, and only to publish what you schedule.
• Google (Gemini API) — only when you use caption drafting, and only the photo, your hint, and samples of that Page's own public posts. See the section above for what Google does with it on the free tier.
• Our email provider — to send download links and notify you if a scheduled post fails.
• Our hosting provider — the server the site runs on.

How long we keep things

• Scheduler media: until published, then up to 7 days.
• Facebook tokens: until you disconnect, the token expires, or you delete your account.
• Account details: until you ask us to delete your account.
• Download-request records: 24 months.
• Usage/rate-limit logs: 90 days.

Your choices

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it — see Data Deletion for how. Depending on where you live you may have additional statutory rights; we will honour those requests regardless of where you are.

Children

This site is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

If we change how any of this works, we will update this page and the date at the top. Material changes to how we handle data you have already given us will be announced on the site.

Contact

Questions, requests, or complaints: admin@zaarmtech.com.