This Privacy Policy explains how Enki Holdings LLC DBA ZipSage ("ZipSage," "we," "us," or "our") collects, uses, and shares information about you when you use ZipSage.com and its services.
Plain English summary: You give us a lot of information when you take the survey. We also automatically collect data when you visit any page on our site (your IP address, approximate location, browser type, and pages viewed). We use this data to generate your report, improve our service, and share with business partners who may contact you with relevant offers. You can opt out of partner sharing at any time by emailing us.
We collect information you provide directly when completing the ZipSage survey or using our tools:
| Category | Examples | Required? |
|---|---|---|
| Contact | Name, email address | Yes |
| Location | Current city, state | Yes |
| Financial | Income range, housing cost, net worth range | Yes |
| Employment | Industry, job title, work arrangement | Yes |
| Household | Age, household size, family situation, children | Yes |
| Lifestyle | Transportation preferences, priorities, preferred setting | Yes |
| Demographic | Gender identity, ethnicity, political lean, religion, language | Optional |
| Sensitive | LGBTQ+ identity, veteran/disability status, retirement income sources | Optional |
| Payment | Billing email for receipts (card data handled by Stripe, not stored by us) | If purchasing |
When you visit any page on ZipSage.com, we automatically collect the following technical data, even if you do not fill out a survey, purchase a report, or otherwise interact with the Service:
| Data Type | Purpose |
|---|---|
| IP address | Security, fraud prevention, deriving approximate location |
| Approximate geographic location (country, region, city derived from IP) | Analytics, localized content, regional usage patterns |
| User agent / browser type | Compatibility, debugging, analytics |
| Device type (desktop, mobile, tablet) | Responsive design, analytics |
| Pages visited and timestamps | Understanding what content is useful, improving the Service |
| Referring URL | Understanding traffic sources, marketing attribution |
| Session ID (stored in your browser's sessionStorage, not a persistent cookie) | Linking page views within a single browsing session for analytics |
| UTM parameters | Marketing campaign attribution |
This automatic collection occurs on every page of the Service and is stored in our database (Supabase) for analytics purposes. We use this data internally to understand how the Service is used, identify bugs, and improve performance. We do not attempt to identify individual visitors solely from this technical data, though if you later submit your email through the survey, your earlier page views from the same session may be associated with your account.
We filter out automated traffic (search engine crawlers, bots, monitoring tools) where reasonably detectable.
Data sharing is central to how ZipSage operates. By using ZipSage, you consent to us sharing your information with third parties as described below.
Business Partners & Advertisers. We share your name, email, location, income range, and relevant survey responses with partners in real estate, mortgage lending, insurance, financial services, moving services, recruiting, and other industries. These partners may contact you directly with relevant offers. We do not share IP addresses, session IDs, or raw page-view logs with these partners.
Service Providers. We share data with vendors who help us operate the Service:
These providers process data on our behalf under their own terms and confidentiality obligations.
Analytics. Where Google Analytics is enabled, Google may collect and process data in accordance with its own privacy policy. You can opt out via Google's opt-out tool.
Legal Requirements. We may disclose information if required by law, court order, subpoena, or government authority, or to enforce our Terms of Service or protect our rights, property, or safety.
Business Transfers. If ZipSage is acquired, merged, or sold, your data may be transferred to the acquiring entity as part of that transaction.
Information you provide about LGBTQ+ identity, religious affiliation, veteran status, disability rating, and retirement status is used to personalize your city report with relevant data (HRC equality scores, VA facilities, retirement tax analysis, etc.).
We do not sell this sensitive information as individually identifiable standalone data. It may be used in aggregated or anonymized form and may inform targeting within the ZipSage platform and partner communications.
Providing sensitive information is always optional and voluntary. Skipping these questions will not prevent you from receiving a city match.
ZipSage uses a small amount of browser storage and tracking to operate:
You can control cookies through your browser settings. Disabling cookies will not stop our server-side page-view logging, but it may affect optional analytics features. We honor browser-level Do Not Track signals where technically feasible.
We retain different categories of data for different periods:
You may request deletion of your data at any time (see Section 10).
We implement reasonable technical and organizational measures to protect your data, including encrypted database storage via Supabase, HTTPS/TLS encryption in transit, access controls limiting internal access on a need-to-know basis, and payment processing via PCI-compliant Stripe (we never see or store your card numbers).
No system is one hundred percent secure. We cannot guarantee absolute security, but we work to limit risk and respond promptly to any incident affecting your data.
You have the following rights regarding your personal data:
To exercise any of these rights, email support@zipsage.com. We will respond within 30 days.
California residents have additional rights under the CCPA including the right to know what personal information is collected, the right to opt out of sale of personal information, the right to limit use of sensitive personal information, and the right to non-discrimination for exercising privacy rights.
EU/UK residents: If you are accessing the Service from the European Economic Area or United Kingdom, you have additional rights under the GDPR and UK GDPR including data portability and the right to lodge a complaint with your local data protection authority. Our legal basis for processing is your consent (survey data, marketing) and our legitimate interests (security, analytics, fraud prevention).
ZipSage is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such data, contact us immediately at support@zipsage.com and we will delete it.
ZipSage is operated from the United States. If you access the Service from outside the US, you understand that your data will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time as our service evolves or as required by law. We will notify users of material changes by email or prominent notice on the site. The effective date at the top of this page indicates when it was last revised. Continued use of the Service after a change constitutes acceptance of the updated policy.
For privacy questions, data requests, or to opt out of data sharing:
Enki Holdings LLC DBA ZipSage
Email: support@zipsage.com
Website: zipsage.com