Legal

Privacy Policy

How Zertura collects, uses, and protects information gathered through zertura.com and the Zertura platform.

Effective August 12, 2026

Who we are

Zertura, LLC provides destination AI intelligence, measurement, and consulting services to destination marketing organizations, their partners, and the agencies who work with them. This policy covers zertura.com, our marketing communications, and the Zertura client platform at app.zertura.com.

Information we collect

We collect only what we need to respond to you and run our services:

  • Information you give us: name, work email, organization, role, phone number, and anything you write in a demo request, resource request, contact form, or conversation with our site assistant.
  • Scheduling information: when you book time with us, our scheduling provider records the meeting details and the contact information you enter.
  • Client platform data: account credentials, the destination and partner records your team creates, and the reports and scores generated for your organization.
  • Technical information: IP address, browser and device type, pages viewed, referring page, and approximate location derived from IP.
  • Public and third-party sources: publicly available destination websites, listings, social and video content, and search data used to produce visibility measurement.

We do not knowingly collect information from children, and we do not collect sensitive categories of personal information.

How we use information

We use the information above to:

  • Respond to demo requests, resource downloads, and questions.
  • Deliver, secure, and improve the Zertura platform and our reporting.
  • Produce visibility scores, benchmarks, and recommendations for client organizations.
  • Send service messages and, where you have opted in, occasional research and product updates.
  • Meet legal, accounting, and contractual obligations.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Legal bases (EEA and UK visitors)

Where GDPR applies, we process personal information on the basis of legitimate interests (running and improving our business), performance of a contract (delivering services to clients), consent (marketing email and non-essential cookies), and legal obligation.

Cookies and similar technologies

We use a small set of cookies and similar technologies. Essential cookies keep the site secure and remember your privacy choices; they are always on. Analytics cookies help us understand which pages are useful and are only set after you accept them. You can change your choice at any time using the cookie settings link in the footer, or by clearing cookies in your browser.

Sharing and processors

We share information with vendors who process it on our behalf under contract, including:

  • Cloud hosting and database infrastructure providers.
  • Meeting scheduling and calendar providers used for demos.
  • Email delivery providers used for notifications and requests.
  • AI model providers used to generate and evaluate destination answers and to power our site assistant.
  • Privacy-conscious website analytics.

We may also disclose information when required by law, to protect our rights, or as part of a merger or acquisition. We do not give vendors permission to use your information for their own marketing.

AI model providers

Measuring what AI says about a destination requires sending prompts to third-party model providers. Those prompts contain destination, partner, and market information, not the personal information of site visitors. Conversations with our site assistant are processed by a model provider to generate a reply and may be retained by us for quality and support. Do not enter confidential or personal details you would not want stored.

Data retention

Contact and demo request records are kept for up to 36 months after your last interaction with us, unless you ask us to remove them sooner. Client platform data, including stored model responses and score history, is retained for the life of the engagement and for 12 months after it ends so year-over-year reporting stays intact, after which it is deleted or de-identified. Backups age out on a rolling 90-day cycle.

Security

Access to client data is restricted to authorized personnel, protected by row-level access controls in our database, and encrypted in transit and at rest. No system is perfect; if a breach affects your information, we will notify you and any required regulator without undue delay.

Your choices and rights

You can ask us to access, correct, export, or delete your personal information, object to or restrict processing, or withdraw consent. Marketing email includes an unsubscribe link in every message. Depending on where you live, you may also have the right to appeal a decision or to file a complaint with your data protection authority. Email hello@zertura.com and we will respond within 30 days. We will not discriminate against you for exercising these rights.

International transfers

Zertura operates in the United States, and information is processed there. Where we receive information from the EEA or UK, transfers rely on Standard Contractual Clauses with our processors.

Changes to this policy

When we make a material change we will update the effective date below and, for clients, notify the account contact. Continued use of the site or platform after an update means the revised policy applies.

Contact

Questions, requests, or concerns about this policy can be sent to hello@zertura.com or mailed to Zertura, LLC, Attn: Privacy, United States.