Privacy Policy · returnzero

This policy explains what personal data returnzero ("we", "us") collects, why, and what rights you have over it. returnzero is operated by an individual based in the United Kingdom and acts as the data controller for the personal data described below. Questions or requests: support@returnzero.dev.

Data we collect

Account data. When you sign in with Google we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.
Billing data. If you subscribe, payment is processed by Stripe. We store your subscription status and a Stripe customer identifier. We never see or store your full card details - Stripe handles those directly.
Usage data. Your progress (problems started and completed), saved code drafts, ratings, and any messages you send to the in-app AI assistant or the contact form.
Technical data. Error reports and diagnostic information captured to keep the service working, and a small number of functional cookies (see below).

How we use it

To authenticate you and provide the service.
To process subscriptions and manage billing.
To save your progress, drafts, and preferences across sessions.
To respond to support requests and feedback.
To monitor errors and improve reliability and performance.

Legal bases (UK GDPR)

We process account and usage data to perform our contract with you (providing the service), billing data to perform that contract and to comply with legal obligations, and technical/diagnostic data under our legitimate interest in keeping the service secure and functional.

Processors we rely on

We share data with service providers only as needed to run returnzero, and we do not sell your personal data. These providers fall into the following categories:

Authentication - to let you sign in with your Google account.
Payment processing - to take subscription payments and manage billing.
Hosting and database - to run the application and store your account and usage data.
Error monitoring - to detect and diagnose faults.
AI model providers - to generate responses in the in-app assistant.

When you use the AI assistant, the relevant message and code context are sent to a third-party AI model provider to generate a response. Do not paste secrets or sensitive personal data into the assistant.

Some of these providers are located outside the United Kingdom. Where personal data is transferred internationally, we rely on appropriate safeguards as required by UK data protection law.

Cookies

We use a small number of strictly functional cookies: a session cookie to keep you signed in, and preference cookies that remember your theme and sidebar state. We do not use advertising cookies.

Data retention

We keep your account and usage data for as long as your account exists. If you delete your account, we delete the associated data, except where we must retain limited billing records to meet legal and tax obligations.

Your rights

Under UK data protection law you can request access to, correction of, or deletion of your personal data, and you can object to or restrict certain processing. To exercise any of these, email support@returnzero.dev. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.