Privacy Policy

1. Who We Are

Zeloric.io (“Zeloric”, “we”, “us”, or “our”) is a technology company building infrastructure for the digital economy.

We operate Zeloric, a simulated support desk where people work real tickets: a free tier, The Desk and the Desk Pro, which adds career tools to the Desk. The Residency is no longer sold; it applies to existing Residents only.

This policy covers free-ticket users and Desk subscribers. The Residency and Community membership are not sold today; when they open, this policy will be updated before they take payment or data. Payment and transaction data for The Desk comes with buying it.

What you pay and how billing works is set out in our Terms of Service.

For all privacy-related matters, you can reach us at residents@zeloric.io.

2. Data We Collect

When you apply

When you submit a Residency application through our website, we collect the following personal data:

• Identity: First name, last name
• Contact: Email address, phone number
• Background: whatever you choose to tell us in your application, and your résumé
• Location: Country of residence
• Professional profiles: GitHub URL and LinkedIn URL (both optional)
• Application materials: Resume or CV (uploaded file), personal statement
• Residency preference: Selected track

When you pay

The Residency and Community membership are paid. Payment is processed by Stripe, and we never receive or store your full card number. In connection with a purchase we collect and hold:

• Billing identity and contact: The name and email address you check out with, and the billing address our payment processor collects from you.
• Transaction records: Your payment-processor customer and subscription identifiers, the amount and currency of each payment, how many instalments you have paid, your payment status including whether a payment has failed, the date your access is paid through, and any refund, cancellation or payment dispute.
• Country signals: A country derived from your IP address and, where you provide one, from your billing address. We use these to establish where a sale takes place, which we need for tax and compliance purposes.

• Your acceptance record: When you accept our Terms of Service and Refund Policy at checkout, we record which versions you accepted, the date and time, your IP address, and your browser user agent.

  This is how we can show what you actually agreed to, and it is recorded before any payment is taken.

While you take part in the programme

Once you are on the programme or in the Community, we collect the data your participation produces:

• Your work: The tickets and incidents you handle, the comments and resolutions you write, and the deliverables you produce.

  This includes the requests you send from the workbench’s API client: the method, the address and the status it answered, never the headers or body you send.

• Assessment and certification: The skill scores recorded against your account, your progress through the programme, and the records issued to you.
• Profile content: The experience, projects and credentials you choose to add to your Zeloric profile, including anything you publish on your public work record.

• AI feature inputs and outputs: Everything you type into the Career Copilot, and the complete transcripts of the practice interviews you run in the Interview Gym, along with the scores and written feedback generated from them.

  These are stored against your account, and they are sent to Anthropic in order to produce a response. Section 7 sets out that sharing in full, and you should read it before using these features.

When you work a free ticket

To work a free ticket, you give us your name and an email address. We store both as you typed them. We do not check at that point that the address is yours.

• What we use them for: Only to send you the report on your ticket and, at most, one reminder if you do not finish it. Nothing else is sent to that address unless you keep your record or apply.
• Stopping the emails: The link in the report or reminder lets you stop further emails about the ticket. After that, we do not send free-ticket emails to that address again.
• Keeping your record: If you open that link and choose to keep your record, the address becomes your account's email address.

• How long we keep them: If you do not keep your record, we delete your name, email address and the ticket you worked 90 days after you last used them.

  You last used them when you most recently gave us your details, worked on the ticket, opened your report link for the first time, or were sent your report or reminder.

  We do not delete them while your report link still works, or if you have applied or paid. You can ask us to delete them sooner at any time.

• Erasure: If you ask us to erase your data, the name and email address you gave are deleted with it. We keep a fingerprint of the address only so that we never send it free-ticket emails again.

Information collected automatically

When you visit our website, we may automatically collect basic technical data including your IP address, browser type and version, device type, pages visited, and time spent on the site. This data is used solely for security monitoring and improving website performance.

We also keep a first-party interaction log recording the type of event, the page it happened on, and a random session identifier, so we can tell which parts of the site are working.

When you are not signed in, it is not tied to your name. It is not shared with any advertising network.

When you are signed in and working in the workbench, we also record what you click and which tools and tickets you open. This record is tied to your account. We record the name of the button or link, never what you type.

We use it to see how the workbench is used and which parts of it are hard to use. Zeloric staff can see it. We keep it for 180 days and then delete it.

You can ask to see it, or ask us to delete it sooner, at any time.

If you use Team chat in the workbench, we keep the messages you write and the replies you receive. Your conversations with the simulated colleagues are visible only to you and to Zeloric staff.

Messages you post in a shared channel are visible to the other members in it. We keep Team chat messages for 180 days and then delete them, and we delete them sooner if you ask us to erase your data.

The workbench leaderboard

The workbench has a leaderboard. It shows your name, as you registered it, and the number of your tickets that have been graded. These are shown to other learners signed in to the workbench.

Nothing else about you is shown there: no email address, no employer, no photo, and no score.

This is on by default. You can turn it off. Open the workbench, choose “Your standing”, and clear the box marked “Show my name on the board”.

Your name is then not shown to other learners, and you can turn it back on in the same place at any time. You can also email us and we will do it for you.

3. How We Use Your Data

We use your personal data only for the following purposes:

• Application processing: To review, evaluate, and manage your residency application
• Communication: To contact you regarding the status of your application, take-home challenges, interviews, and decisions
• Onboarding: If accepted, to set up your access to Zeloric's internal tools and systems
• Programme administration: To manage the ongoing residency, including mentor assignments, deliverables, and performance tracking
• Payments and billing: To take payment for the Residency and for Community membership, manage your instalments, contact you if a payment fails, process refunds, cancellations and deferrals, respond to payment disputes, and keep the accounting and tax records we are required to keep
• AI-assisted features: To operate the Career Copilot and the Interview Gym, which generate responses, practice interviews, scores and feedback from what you enter and from the programme data held on your account
• Assessment & certification: To issueyour assessment letter and your Zeloric record upon programme completion
• Workbench activity: To see how the workbench is used and which parts of it are hard to use
• Future cohorts: With your consent, to notify you of future programme openings
• Legal compliance: To comply with applicable legal obligations

We do not use your data for automated decision-making or profiling that produces legal effects.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Legitimate interests: Processing your application and managing the residency programme
• Contract performance: Once you buy a place or a membership, processing the data necessary to take your payment and to deliver the programme or membership you have paid for
• Consent: For any marketing communications, such as notifications about future cohorts. You may withdraw consent at any time
• Legal obligation: Where we are required to process data to comply with applicable laws

5. Data Storage & Security

Your data is stored on secure cloud infrastructure provided by Supabase, Inc., a GDPR-compliant data processor. All data is encrypted in transit (TLS/HTTPS) and at rest.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Access to your data is restricted to authorised Zeloric team members who need it for the work they are doing, whether that is admissions, delivering the programme, or helping you with a billing question.

Uploaded resumes are stored in a private, access-controlled storage bucket and are not publicly accessible.

While we take reasonable precautions, no method of transmission over the internet is 100% secure. If you have concerns about data security, please contact us at residents@zeloric.io.

6. Data Retention

• Unsuccessful applications: Retained for 12 months from the application deadline, then permanently deleted. This allows us to consider your profile for the next cohort if applicable.
• Accepted Resident data: Retained for the duration of the programme plus 3 years following completion, to support assessment letter requests and alumni network participation.
• Marketing consent records: Retained until you withdraw your consent.
• Website technical logs: Retained for up to 90 days for security monitoring purposes, then deleted.
• Workbench activity: What you click and open in the workbench while signed in is kept for 180 days, then deleted, as set out in Section 2 under “Information collected automatically”.
• Team chat: Messages in the workbench’s Team chat are kept for 180 days, then deleted.

• Free tickets you did not keep: Your name, email address and the ticket you worked are deleted 90 days after you last used them, as set out in Section 2 under “When you work a free ticket”.

  We keep only the fingerprint of the address described there.

You may request early deletion of your data at any time by contacting us (see Section 8 and Section 13).

7. Sharing Your Data

We do not sell, rent, or trade your personal data to any third party.

We may share your data in the following limited circumstances:

• Service providers: We use the following sub-processors, each under their own terms, and none of them may use your data for their own purposes:
  • Supabase - database, authentication and file storage (our primary infrastructure).
  • Anthropic - AI features. This includes the Copilot and the Interview Gym, which send your name, your scores, anything you type into them, and complete practice-interview transcripts.
  • Atlassian - Jira Service Management, where programme tickets and their comments live.
  • Stripe - payments. They receive your name and email; we never see your full card details.
  • Resend - transactional email. They receive your name and address.
  • Slack - internal alerts to our team, which can include your name, email and programme status.
  • Vercel - website and application hosting.
  • Cloudflare - bot protection on our forms.
  • n8n - workflow automation between the systems above.
  • Sentry - error reporting, which can include your account identifier when something breaks.
  • PostHog - error tracking, and measuring the cost and speed of our AI features. When something breaks it receives the error and the type of page it happened on, with any private link or code removed, and your account identifier if you are signed in. For each AI response it receives counts, timings and cost tied to your account identifier, never anything you or the AI wrote.
• Other learners: The workbench leaderboard shows your name and your graded ticket count to other learners signed in to the workbench. It is on by default, and Section 2 says how to turn it off.
• Legal requirements: We may disclose your data if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights or the safety of any person.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify affected users in advance.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of any inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (“right to be forgotten”), subject to legal retention requirements
• Right to restriction: Request that we limit how we process your data in certain circumstances
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, email us at residents@zeloric.io with the subject line “Data Rights Request”. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are located in the European Economic Area (EEA), UK, or a jurisdiction with applicable data protection law and you believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.

9. Cookies & Tracking

Our website currently uses only essential functional cookies necessary for the site to operate (such as session management). We do not currently deploy third-party advertising or analytics cookies.

If we introduce additional cookies in the future, such as analytics or advertising pixels, we will update this policy and present you with an appropriate consent mechanism before any such cookies are set.

10. International Data Transfers

Zeloric operates globally and your data may be processed on servers located outside your country of residence.

If you are based in the EEA or UK, your data may be transferred to countries that do not provide the same level of data protection as your home country.

The sub-processors listed in section 7 each maintain their own transfer safeguards, such as Standard Contractual Clauses or an equivalent framework, and we choose providers on that basis.

As a small and newly formed team we are still completing our own formal data-processing agreements, and we would rather tell you that plainly than imply protections we have not yet put in writing.

If you are in the EEA or UK and want to know exactly where your data sits before you apply, email us and we will answer honestly.

11. Children's Privacy

Our programmes are paid products directed at students, graduates, career changers and people already working in support, and are not intended for persons under the age of 16. We do not knowingly collect personal data from children under 16.

If you believe we have inadvertently collected data from a person under 16, please contact us immediately at residents@zeloric.io and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Notify active applicants, Residents and Community members via the email address on file

We encourage you to review this policy periodically. Continued use of our website, submission of an application, or continued paid membership after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please contact us:

• Email: residents@zeloric.io
• Subject line: Privacy Enquiry

We are committed to resolving privacy concerns promptly and transparently.