Privacy Policy

ZeroAI Lab ("we", "us", "our") is a digital presence studio based in Pakistan. We build and optimise websites, Google Business Profiles, and search and AI visibility for Pakistani clinics, doctors, and businesses.

This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and your rights regarding it. It applies to:

• —This website (zeroailab.com)
• —Our contact form and email communications
• —Our client engagements and reporting

By using this website or contacting us, you agree to the practices described in this Policy.

We collect only the information needed to respond to your inquiry, provide our services, or improve this website.

Contact form data When you submit our contact form, we collect: your name, email address, phone number, country, clinic or business name, and your message. This information is stored securely in our CRM to manage your inquiry.

Email communications If you contact us by email, we retain those communications to manage our response and any ongoing engagement.

Analytics and usage data We use Vercel Analytics and Vercel Speed Insights — both privacy-respecting tools — to understand how visitors use this website. These tools collect anonymised data: page views, referral sources, device type, and approximate geographic region. No personally identifiable information is collected through analytics.

No cookies for tracking We do not use third-party advertising cookies, Facebook Pixel, Google Ads tracking pixels, or any behavioural advertising tools. We do not track you across other websites.

Client engagement data For clients who engage us for services, we may collect additional business data — Google Search Console access, Google Business Profile access, website credentials, and reporting information — strictly to deliver and report on our services. This data is handled under separate confidentiality obligations.

We use the information we collect for the following purposes only:

• —To respond to your inquiry via the contact form or email
• —To provide and manage our digital presence services
• —To send service updates, proposals, or reports to active clients
• —To understand website usage patterns through anonymised analytics
• —To comply with applicable legal requirements

We do not use your personal information for targeted advertising. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Contact form submissions are stored in our secure CRM (hosted on Vercel infrastructure in the EU/US). Access is restricted to ZeroAI Lab team members only and is protected by authentication.

Email communications are stored in our business email system.

Client service data (Google Search Console access, reporting data, etc.) is accessed through official platform APIs and is not stored beyond what is required for active reporting.

We implement reasonable technical and operational measures to protect your data against unauthorised access, loss, or disclosure. However, no internet-based system can guarantee absolute security.

We do not store payment card information. If invoicing is required, it is handled through secure third-party invoicing tools.

Contact form inquiries: retained for 24 months from the date of last communication, then deleted from our CRM.

Client engagement data: retained for the duration of the active engagement plus 12 months, then deleted or anonymised.

Email communications: retained for 24 months then deleted, unless an ongoing contractual relationship requires longer retention.

Analytics data: anonymised and aggregated — not personally identifiable, retained indefinitely for website improvement purposes.

If you request deletion of your data before these periods, we will action the request within 14 days (see Section 7).

We do not sell or rent your personal data to any third party.

We use the following service providers who may process data on our behalf:

Vercel (vercel.com): Website hosting, serverless functions, and analytics. Data may be processed on servers in the EU or USA. Vercel is SOC 2 Type II certified.

MongoDB Atlas: Database for contact form submissions. Hosted on AWS with encryption at rest. ZeroAI Lab controls all access.

Email provider: Standard business email for communications.

These providers are contractually obligated to process data only on our instructions and in accordance with applicable privacy law.

We may disclose personal information if required to do so by applicable Pakistani law, court order, or government authority.

You have the following rights regarding your personal information:

Access: You can request a copy of the personal data we hold about you.

Correction: You can request correction of inaccurate or incomplete data.

Deletion: You can request that we delete your personal data. We will action deletion requests within 14 days, subject to any legal retention obligations.

Withdrawal of consent: If you have given consent for marketing communications, you can withdraw it at any time by emailing us or clicking "unsubscribe" in any communication.

To exercise any of these rights, contact us at team@zeroailab.com. We will respond within 14 business days.

This website is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

This website may contain links to external sites (such as shayanbhutto.com, Google, Marham, or client websites referenced in our portfolio). This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any site you visit through a link from our website.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will update the "Last updated" date at the top of this page. For material changes, we will attempt to notify active clients by email. Continued use of this website after a policy update constitutes acceptance of the updated terms.

This Privacy Policy is governed by the laws of the Islamic Republic of Pakistan. Any disputes arising in connection with this Policy shall be subject to the jurisdiction of the courts of Karachi, Pakistan.

For any questions, data requests, or concerns about this Privacy Policy, contact us at:

Email: team@zeroailab.com Website: https://zeroailab.com/contact

We aim to respond to all privacy-related enquiries within 14 business days.