Zurag.online

Zurag.online Privacy Policy

Effective Date: 2026-02-22

At Zurag.online ("we", "our", or "us"), your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services ("Service"). By using Zurag.online, you consent to the practices described in this policy.

1. Information We Collect

We collect various types of information in order to provide and improve our Service, including:

1.1 Personal Information

  • Account Information: When you register for an account, we collect personal information such as your name, email address, phone number, and password.
  • Transaction Data: When you make a purchase or a sale, we collect payment and transaction-related information such as billing details, commission amounts, payout requests, and earnings history for photographers.
  • Banking Information: For photographers requesting payouts, we collect bank name and account number to process transfers.

1.2 Non-Personal Information

  • Log Data: When you use our Service, we automatically collect information such as your IP address, browser type, device information, and the pages you visit on our site.
  • Cookies and Tracking Technologies: We use cookies, web beacons, and other tracking technologies to enhance your experience on Zurag.online and gather data on site performance, preferences, and user activity.
  • Storage Usage Data: For photographer accounts, we track file sizes of uploaded content, storage consumption, and peak usage for billing purposes.

1.3 Uploaded Content

  • Photographs: Photographers who use our platform upload images, which may contain metadata such as location data, camera settings, or other embedded details (EXIF data). We extract and store certain metadata for organizational purposes.
  • Face Recognition Data: When face detection is enabled for an album, we process uploaded images using AI (InsightFace) to detect faces and generate mathematical representations (512-dimensional vector embeddings). These embeddings are stored in our database and used to group photos by person and enable selfie-based photo search. Face embeddings are not shared with third parties and cannot be reverse-engineered into facial images.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain the Service: Including processing transactions, managing accounts, tracking storage usage, and delivering customer support.
  • To Improve the Service: Analyzing usage trends, performing analytics, and enhancing functionality based on user feedback.
  • To Facilitate Sales and Purchases: Processing payments via QPay, calculating commissions, providing purchased content, and tracking sales for photographers.
  • To Manage Billing: Tracking storage usage, calculating overage charges, processing payout requests, and maintaining transaction records.
  • To Communicate With You: Sending transactional emails (purchase receipts, sale notifications, payout updates, account verification) via AWS SES. We do not send unsolicited marketing emails.
  • To Ensure Security: Preventing fraud, enforcing our Terms of Service, and securing your data.

3. How We Share Your Information

We do not sell or rent your personal information to third parties. However, we may share your data with:

  • Service Providers: Third-party vendors who assist with operations including Amazon Web Services (AWS) for cloud hosting, file storage (S3), and transactional email (SES); QPay for payment processing; and Neon for database hosting.
  • Legal Requirements: We may disclose your information if required by law or in response to valid legal requests (e.g., subpoenas or court orders).
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction.
  • Photographers: When you purchase photos from photographers, they may see that a sale was made but do not receive your personal information.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by law. Specifically:

  • Account data is retained while your account is active and for a reasonable period thereafter.
  • Transaction records are retained for accounting and legal compliance purposes.
  • Deleted photos and their associated face embeddings are permanently removed from our systems upon deletion.
  • Face recognition embeddings are stored only as long as the associated photo exists on the platform.

5. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information:

  • Access: You can request a copy of the personal data we hold about you.
  • Correction: You can request that we correct inaccurate or incomplete personal data.
  • Deletion: You can request the deletion of your personal data, subject to legal or contractual restrictions. Photographers can delete their photos directly through the platform.
  • Opt-Out of Face Recognition: Album owners can disable face detection for their albums. Buyers can contact us to request removal of their facial data from our systems.
  • Opt-Out of Communications: You can opt-out of receiving non-essential communications by contacting us directly.
  • Data Portability: In certain circumstances, you may have the right to request that we transfer your data to another service provider.

6. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. This includes encrypted connections (HTTPS), secure cloud infrastructure, and access controls on sensitive data.

7. Third-Party Links

Zurag.online may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites, and you should review their privacy policies independently.

8. Children's Privacy

Our Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18.

9. International Data Transfers

Zurag.online is based in Mongolia. Our cloud infrastructure is hosted on AWS in the Asia-Pacific region. If you access or use our Service from outside these regions, your information may be transferred to and processed in other countries. Transactional emails are sent via AWS SES from the ap-southeast-1 (Singapore) region.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. If we make material changes, we will notify you by posting an updated version on our website and, where appropriate, by email.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at admin@zurag.online.