Privacy Policy
How Zulu Alpha Inc., trading as ZuluLab, handles information in connection with this website.
Operator
This website, zulualpha.net, is operated by Zulu Alpha Inc., a business based in West Covina, California. “ZuluLab” is the brand this website trades under. “We”, “us” and “our” in this policy mean Zulu Alpha Inc.
Privacy contact: admin@zulualpha.net.
What this policy covers
This policy covers the public website at zulualpha.net.
It does not cover software we build and operate for clients, which runs on separate systems under separate arrangements with those clients. It also does not cover websites we link to. Our portfolio and case studies link to client sites such as Tad’s Construction, Zulu Estate Media, AI Assisted POS System for Restaurants and Greenger Powersports; once you follow a link, that site’s own privacy policy applies.
Information we collect
Information you give us directly
Our contact form asks for your name, email address, subject and message. Company and phone number are optional. When you submit the form, it also includes the page you contacted us from so we can understand your request. The form sends your inquiry to zarni@zulualpha.net through our email provider. We do not keep a separate contact-submission database.
You can also choose an ordinary email or telephone link. Email links open your email app, where you remain in control of sending the message. We receive whatever you include in the email. There is no newsletter signup, account registration or file upload.
Information collected automatically
Our origin web server keeps standard access logs. Each entry records the connecting IP address, the date and time, the page or file requested, the response status and size, the referring URL where the browser supplies one, and the browser user-agent string.
The site is served through Cloudflare. Depending on the proxy configuration, origin logs can record Cloudflare’s edge address or the visitor address supplied by the trusted proxy. Cloudflare itself receives your IP address because it sits between you and us.
The contact email handler uses temporary, hashed network identifiers to limit repeated submission attempts. These counters expire after approximately one hour and are held in memory. The handler does not log your message contents or create a separate submission database.
Cloudflare also sends browsers a Network Error Logging instruction, which means your browser may report network-level errors about this site directly to Cloudflare.
How we use information
- To read and reply to inquiries you send us, and to discuss, scope and quote work.
- To provide the free initial consultation and scope estimate when you ask for one.
- To operate, secure and troubleshoot the website.
- To keep records of our own business correspondence.
We do not run advertising on this site, do not build visitor profiles, and do not sell personal information.
Service providers and disclosures
We keep the number of third parties involved in this website deliberately small. Fonts, images, stylesheets and scripts are all served from our own domain; the one off-domain request a page makes is the Cloudflare Web Analytics script described below. Two providers are involved:
- Cloudflare, Inc. — content delivery, DNS and security. As the proxy in front of the site, Cloudflare receives your IP address and request metadata, and may receive browser network-error reports.
- Google LLC (Google Workspace) — hosting for our business email. Contact inquiries are delivered to our mailbox and retained as business correspondence.
We may also disclose information where we are legally required to, or where it is necessary to establish or defend legal claims. If the business is ever sold or reorganised, business records may transfer as part of that.
AI and your information
This website has no AI features. There is no chatbot, no assistant and no AI endpoint. Nothing you do on this site is sent to an AI provider.
Separately from the website, we describe our development work as AI-assisted: our developers use AI tooling to help write code, generate tests and draft documentation, with human review and testing before anything ships. How client material is handled in that workflow is agreed with each client as part of the engagement, and is governed by that agreement rather than by this website policy.
International access and processing
We are based in West Covina, California, and work with clients internationally, collaborating across Eastern and Western time zones. Members of our team work from outside the United States, so business correspondence — including inquiry emails — may be read from other countries.
Our service providers also operate globally: Cloudflare serves this site from data centres worldwide, and Google Workspace stores email on its own infrastructure. If you are contacting us from outside the United States, your information will be handled in the United States and potentially in other countries, where privacy laws may differ from those where you live.
How long we keep information
- Server access logs: rotated daily and kept for approximately 14 days before being deleted. This is the rotation our server is configured for.
- Inquiry emails and correspondence: kept in our mailbox as business records. A specific retention period for these has not yet been set.
If you would like correspondence you have sent us deleted, email admin@zulualpha.net and we will tell you what we hold and what we can remove, subject to any records we are required to keep.
Privacy requests
You can ask us what personal information we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email admin@zulualpha.net with enough detail for us to find the right records.
We will need to be reasonably satisfied of who you are before acting on a request, which normally means replying from the address you originally contacted us from. We will not charge you for making a request or treat you differently for having made one.
Depending on where you live, local law may give you additional rights. Tell us where you are writing from and we will handle your request accordingly.
How we protect information
The public pages are served over HTTPS behind Cloudflare. A separate server-side handler validates contact requests and sends them by authenticated, encrypted email. There is no public account login or contact-submission database. Mailbox access is limited to the people who need it.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send passwords, payment card details or other highly sensitive information by email.
Children’s information
This site offers business services and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, email admin@zulualpha.net and we will delete it.
Changes to this policy
If we change our analytics setup, contact forms or other information handling, we will update this policy and change the effective date below.
Effective date: 27 October 2026.