1. Scope
This Privacy Policy applies to the Zaavle marketing and sales website on which it appears and describes the hosting of data Zaavle manages while providing the subscription service. Creator-specific deployments and order materials may include additional service notices. YouTube, Creem, and other third-party websites or services provide their own privacy notices for information they process independently.
2. Information Zaavle does not collect on this site
The channel field and plan selector are an on-page demonstration only. Their contents remain in your browser for that interaction and are not submitted to Zaavle.
Zaavle does not directly collect, store, sell, rent, or use personal information through this marketing website. The site has no account registration, newsletter form, advertising tracker, or Zaavle-operated analytics form. Zaavle does not receive or store payment-card numbers, bank details, or billing credentials.
3. Purchases, customer information, and billing
If you purchase a Zaavle subscription, checkout takes place through Creem. Creem acts as the merchant of record and separately collects and holds the customer, order, payment, tax, invoice, and subscription information needed to complete and manage the transaction.
Creem handles payment processing, recurring billing, invoices, applicable sales taxes and VAT, payment security, fraud controls, refunds, chargebacks, and billing-related subscription management. Zaavle does not receive or store your full payment-card details.
Your use of Creem is governed by its current Buyer Terms and Privacy Policy. Review those documents before purchasing because Creem’s practices apply once you open or use its checkout, customer portal, or order-management pages.
4. Cloudflare hosting, Backblaze redundancy, and security
The Zaavle platform runs on Cloudflare hardware and infrastructure. The primary operational data that Zaavle collects or manages to provide the service is hosted and processed within that Cloudflare environment, which also supplies the network and security controls protecting the platform.
Zaavle-managed platform data may include authorized creator-library indexes and transcripts, service configuration, generated-episode metadata and materials, promotion settings, and operational records required to deliver and support the service. Original videos remain hosted on YouTube, while purchase and customer billing records are collected and held by Creem as merchant of record.
We selected Cloudflare because it is one of the world’s most established internet security platforms, with a global network designed to help absorb attacks, filter malicious traffic, and protect the availability of online services. Cloudflare reports that its network proxies approximately 20% of the web and blocks an average of roughly 247 billion cyber threats each day. Its independently assessed security and privacy credentials include ISO 27001:2022, ISO 27018:2019, ISO 27701:2019, SOC 2 Type II, and PCI DSS 4.0. Cloudflare was also named a Leader in The Forrester Wave™: Web Application Firewall Solutions, Q1 2025.
Zaavle also keeps backup copies of Zaavle-managed databases and service information in Backblaze B2 Cloud Storage. This separates operational hosting from backup storage, giving the platform an additional recovery path if primary infrastructure or data becomes unavailable.
Backblaze and Cloudflare have a documented infrastructure relationship: Backblaze is a founding member of Cloudflare’s Bandwidth Alliance, which connects participating cloud and network providers for shared customers. Backblaze B2 stores uploaded files across multiple drives, servers, and locations within its data-center architecture, transmits files using encrypted TLS connections, and describes its storage infrastructure as designed for eleven-nines durability.
Backblaze B2 also provides server-side encryption, access controls, multi-factor authentication, application keys, and Object Lock capabilities for immutable backup protection. The safeguards actually applied to Zaavle backups depend on Zaavle’s storage configuration; provider capabilities alone do not guarantee that every optional control is enabled.
Cloudflare and Backblaze may automatically process limited technical request information—such as an IP address, browser or device information, request time, and security logs—to host, back up, deliver, monitor, and protect the platform under their policies. Zaavle does not use this marketing website to build visitor profiles and does not access or retain such information for marketing.
Strong infrastructure, separated backup storage, and independent certifications reduce risk but cannot guarantee that any online service will be completely immune from every attack, outage, data-loss event, or security incident. Zaavle uses reasonable safeguards appropriate to the service and reviews its providers as the platform develops.
The site also links to YouTube, Creem, and demonstration experiences. When you follow a link, the destination provider may collect information under its own policies. Zaavle does not control those third-party practices.
5. Channel conversations and commenter accounts
Creators who use Zaavle can offer a Conversations section on their channel site, where viewers read, comment, ask questions, and reply. Reading is open to everyone; commenting needs an account with that channel. The same applies when someone who is not a Zaavle Premium member opens a shared Premium episode and joins its conversation. This section applies to those accounts and conversations. It does not change anything else in this policy.
When you create an account on a channel site, the creator of that channel can see your username, full name, and email address, together with your comments and the moderation history described below. Your account is not shared with other channels, and it is separate from Zaavle customer and Zaavle Premium accounts.
What we collect
- Account details you provide: a username, your full name, your email address, and a password. Passwords are stored only as a salted, one-way hash and are never visible to the creator or to Zaavle staff.
- Your agreement: the time you confirmed you are at least 13, agreed to this Privacy Policy and the Terms of Use, and agreed to share your name and email with the channel’s creator.
- What you post: comments, questions, replies, edits, deletions, reports you make about other comments (with the reason you choose), and any appeal you send.
- Conversation activity: when you post and what you post about (the video, episode, or Discovery Path step and any moment you link), notifications for you, and whether you accepted an AI answer offered to you.
- Community-standards records: comments held for review and why, the text of comments that could not be posted because of the channel’s word filter (kept so the creator can review repeated attempts), strikes, suggested strikes, bans, mutes, appeals, and the creator’s decisions and replies.
- Zaavle Plus interest: if you tick that you’re interested in Zaavle Plus (a service in development), or that it isn’t for you, we keep that answer. The creator sees how many of their commenters are interested; Zaavle’s central count holds only the channel and a one-way code that cannot be turned back into your identity.
- Device notifications: if you turn on notifications on a device, the address your browser’s push service gives us for that device.
- Security information: sign-in attempts and the network address of requests, used briefly to limit repeated attempts and protect accounts, and session cookies that keep you signed in.
How it is used
- To run your account: sign-in, email confirmation, password resets, and keeping you signed in.
- To show the conversation: your username, comments, and replies are public on that channel’s site, and so is the number of strikes you have, shown next to your name.
- To let the creator manage their community: reviewing held and reported comments, giving or revoking strikes, banning, deciding appeals, and seeing each commenter’s full conduct history and contact details.
- To keep conversations encouraging: an automated word filter checks comments and edits before they appear, and comments that read like spam or abuse may be held for the creator.
- To answer questions: when a creator turns on automated answers, the text of a question may be compared with that channel’s videos and sent to our AI provider to prepare a short, source-linked answer. Answers are offered to the person who asked and are published only if they accept.
- To notify you: replies, answers ready for you, and messages from the channel appear in the site’s notification bell and, if you turned them on, as notifications on your device.
- To understand demand for Zaavle Plus, as counts only.
We do not sell commenter information, use it for advertising, or send marketing email to commenters. The creator receives your name and email to manage accounts on their channel; how they use that information outside Zaavle is their responsibility, and they may have their own privacy notice.
Who processes it
Commenter data is stored in the channel’s database on Cloudflare, with backups in Backblaze B2 as described above. Account emails (confirmation and password reset) are sent through Amazon Simple Email Service. Question text sent for automated answers is processed by OpenAI under its API terms, which do not allow it to be used to train OpenAI’s models. Device notifications pass through the push service built into your browser or device (for example Apple, Google, Microsoft, or Mozilla); Zaavle sends those services only an empty signal, and the notification text is fetched directly from the channel site by your device.
Retention and deletion
Your account and comments are kept while your account exists. A creator may set a retention period after which comments on their channel are removed automatically. Text from comment attempts blocked by the word filter is kept for 30 days so the creator can review it, then deleted. You can delete your account at any time from the Account menu on the channel site: this removes your account, your name and email, your device registrations, your strikes and appeals, and the text of your comments on that channel. Replies from others remain, shown beneath a placeholder. Records the creator keeps in their audit log no longer identify you. Backups age out on their normal schedule. You can also ask us to delete or export your information using the contact details below.
Zaavle Premium members
If you comment from Zaavle Premium, you comment with your Premium account instead of a channel account. The channel’s creator sees the name you use on Premium and your comments and conduct history, but not your email address.
7. Your choices and privacy requests
If you have a channel account, you can delete it at any time from the Account menu on that channel’s site, change your password with the “Forgot password” link, and turn device notifications on or off in your browser or device settings. For other requests about your commenter information, including access, correction, or export, contact us as described below. Because Zaavle does not directly collect personal information through this site, it ordinarily has no marketing-site profile or submission to access, correct, or delete. For purchase, payment, invoice, tax, or subscription-account information, use the support and privacy options provided by Creem, including the customer portal or the contact information in your receipt.
If you contact Zaavle outside this website, information in that direct communication will be used to respond to your request and handled according to the notice provided through that support channel.
8. Children’s privacy
Channel accounts are only for people who are at least 13, or the minimum age to consent to online services where you live if that is higher. If we learn that an account belongs to someone younger, we will delete it. This website and the Zaavle subscription offer are intended for adults and businesses. They are not directed to children under 13, and Zaavle does not knowingly collect personal information from children through this site.
9. Changes to this policy
We may update this Privacy Policy when the website, service providers, or legal requirements change. The current version will appear on this page with a revised “Last updated” date. Material changes apply prospectively unless applicable law requires otherwise.
10. Contact
For questions about Zaavle or this policy, email . For billing, payments, invoices, tax, refunds, chargebacks, or customer-portal matters, contact Creem through the options in your receipt or its official support channels.
