Privacy policy — found from the homepage — Zuko

Cited by

Facts read from this source

• Tracking method Report an error

  “Zuko uses lightweight, optimized vanilla JavaScript tracking to monitor user interactions with your forms, including events such as field clicks, keypresses, and form submissions.”

• No pii collection Report an error

  “Zuko does not collect or store personally identifiable information (PII) entered by users into form fields. Only anonymized behavior data (such as clicks and keypresses) is processed.”

• Provider region Report an error

  “All data is hosted securely on Amazon Web Services (AWS) in the European Economic Area (EEA), specifically in the Republic of Ireland.”

• First party cookie Report an error

  “Zuko uses a first-party cookie (zukoVisitorId) to track unique visitors and measure form interactions.”

• Cookie client domain Report an error

  “Is stored on the client’s domain, not Zuko’s.”

• Encryption Report an error

  “All data is encrypted in transit and at rest once it enters the Zuko platform.”

• MFA access control Report an error

  “Our platform implements multi-factor authentication (MFA) and access control policies to protect data at all times.”

• Tracking code size Report an error

  “The Zuko JavaScript is 15 kb in size (only 6 kb transferred), and hosted in a globally available CDN (AWS). Our code is compressed to reduce size further.”

• No third party libraries Report an error

  “We do not rely on any third party libraries.”

• Retention after termination Report an error

  “When a client contract ends, Zuko retains data for one year unless an earlier deletion is requested. All data is securely destroyed after this period following our documented termination policy.”

• Role processor Report an error

  “Zuko acts as a data processor for end-user behavioural data that occurs on our clients’ forms.”

• Role controller Report an error

  “Zuko only acts as a data controller for information that is directly supplied to us by the client.”

• Vpc encryption standard Report an error

  “Data is encrypted at rest and in transit using AES-256 encryption.”

• Incident response Report an error

  “Zuko has a documented Incident Response Plan that outlines procedures for identifying, managing, and reporting security incidents.”

• Breach notification Report an error

  “In the event of a breach, affected clients will be notified promptly in compliance with GDPR and other applicable regulations.”

• Tracked events Report an error

  “Zuko tracks non-PII events such as: Field focus and blur. Keystroke events (anonymized). Interaction timing and submission rates.”

• Self hosting Report an error

  “Yes, clients who require additional compliance measures may opt to self-host the Zuko tracking code on their infrastructure.”

• DPA Report an error

  “Zuko provides a Data Processing Agreement (DPA) to clarify our obligations under GDPR and other privacy laws.”

15 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CRO Consultant Consent & visitor tracking
• The CRO Consultant Snippet performance & flicker
• The CRO Consultant European sovereignty
• The Data Protection Officer Consent & visitor tracking
• The Data Protection Officer Snippet performance & flicker
• The Data Protection Officer European sovereignty
• The E-Commerce Manager Snippet performance & flicker
• The E-Commerce Manager European sovereignty
• The Growth Lead Consent & visitor tracking
• The Growth Lead Snippet performance & flicker
• The Growth Lead European sovereignty
• The Product Engineer Consent & visitor tracking
• The Product Engineer Snippet performance & flicker
• The Product Engineer European sovereignty
• The Skeptic Consent & visitor tracking
• The Skeptic Snippet performance & flicker
• The Skeptic European sovereignty