Cookie Policy

This Cookie Policy explains what cookies, beacons, pixels, tags, local storage objects, SDKs, scripts, and similar tracking technologies (collectively, "Cookies and Similar Technologies" or simply "Cookies") are, how Zotlyx ("we", "us" or "our") uses them on our websites (including zotlyx.com, all subdomains, landing pages, and related web properties), our product dashboard, mobile applications (if any), and related online services collectively the "Service"), and the choices you have regarding the use of Cookies and Similar Technologies.

This Cookie Policy should be read together with our Privacy Policy, which sets out how we process personal information more generally, and our Terms & Conditions, which govern your use of the Service. By continuing to use or access the Service after being presented with a cookie banner or other appropriate notice (where required) or by indicating your consent where applicable, you agree to the use of Cookies and Similar Technologies in accordance with this Cookie Policy and our Privacy Policy.

Cookies are small, simple text files that a website or application stores on your computer, smartphone, tablet, or other internet-connected device when you visit a website or use an application. Cookies are widely used by websites and online service providers to make websites work, or work more efficiently, as well as to provide reporting information and to personalize and improve the user experience over time. Cookies allow a website or service provider to recognize your device and remember information about your visit, such as your preferred language, region, login state, and other settings and preferences.

In addition to standard cookies, we may also use similar technologies such as: (a) "web beacons", "clear GIFs", "pixel tags", or "1x1 pixels" — small electronic files embedded in websites, emails, or advertisements that permit us, among other things, to count users who have visited those pages or opened an email, deliver related services, and verify system and server integrity; (b) "local storage", "session storage", "IndexedDB", and other browser-based or device-based storage methods that allow us to store information locally on your device between sessions; (c) JavaScript and other embedded scripts that collect information about your device, browser, interactions, and usage of the Service; (d) software development kits ("SDKs") and embedded APIs or analytics libraries used within the product dashboard; and (e) fingerprinting techniques that collect and combine pieces of information available from your device or browser to create a unique identifier or recognition profile, where permitted by applicable law.

We use Cookies and Similar Technologies for a variety of legitimate business purposes, including: (a) to enable essential core functionality and features of the Service so that you can use the Service as intended; (b) to authenticate users, maintain secure login sessions, detect and prevent fraud, abuse, and unauthorized account activity, and enhance the safety, security, and integrity of the Service; (c) to remember your preferences, settings, and choices, such as your selected language, region, currency, interface theme (light or dark), dashboard layout, and display preferences; (d) to measure and analyze the performance, effectiveness, usage, and engagement of the Service, including which pages or features are most frequently used, how users navigate through the Service, load times, error rates, drop-off points, and the overall user experience; (e) to track and attribute the effectiveness of our marketing campaigns, advertising, promotional content, and referral traffic sources across channels, partners, and platforms; (f) to serve relevant, non-intrusive advertisements or promotional content to you on our websites or across third-party websites and platforms where permitted by applicable law and your consent choices; (g) to help us deliver personalized content, product recommendations, onboarding flows, and feature suggestions based on your usage patterns and preferences; (h) to support third-party integrations, embedded content, and product features such as payment processing, live chat, support widgets, analytics, and collaboration tooling; and (i) to comply with legal, accounting, and record-keeping requirements.

The specific Cookies we use on the Service fall into the following categories based on purpose: Strictly Necessary Cookies, Preference or Functionality Cookies, Performance and Analytics Cookies, and Marketing and Advertising Cookies. These categories are described in more detail in the following sections.

Strictly Necessary (Essential) Cookies: These Cookies are essential for the operation, availability, and functionality of the Service. They are usually set only in response to actions taken by you that amount to a request for services, such as logging in, completing forms, navigating between pages, or making security-related selections. Without these Cookies, certain parts of the Service would not function properly or would be unable to provide requested features. Examples include session cookies for maintaining authenticated login states, CSRF tokens to protect against cross-site request forgery attacks, rate-limiting and fraud-detection identifiers, load balancer routing cookies, and cookies required for compliance with security requirements.

Preference and Functionality Cookies: These Cookies enable the Service to remember information you have provided or choices you have made (such as your language preference, selected region, dashboard theme, display density, last viewed feature, UI layout preferences, or account configuration options) in order to provide enhanced, more personalized features and a consistent experience. They may also be used to provide enhanced product functionality such as saving drafts, persisting workspace filters, maintaining collaboration or team preferences, and enabling integration-related capabilities. These Cookies may be set by us or by third-party providers whose services we have integrated.

Performance and Analytics Cookies: These Cookies collect anonymous or pseudonymous information about how visitors and users interact with and use the Service, including information about pages visited, time spent on pages, features used, referral sources, device and browser information, geographic region, load performance, JavaScript errors, click events, navigation paths, drop-off points, and conversion events. All information these Cookies collect is aggregated and/or de-identified where possible and is used exclusively for the purpose of improving and understanding usage of the Service, measuring performance, identifying bugs, prioritizing product improvements, and capacity planning. Key providers in this category include Google Analytics (measuring aggregate traffic patterns and audience metrics), Microsoft Clarity (capturing anonymized heatmaps, click patterns, and session replays for usability enhancement and fraud prevention), and Cloudflare Web Analytics.

Marketing and Advertising Cookies: These Cookies are used by us and our advertising partners, primarily Meta Platforms, Inc. (Meta / Facebook Pixel), to deliver and measure relevant advertisements and marketing campaigns, track conversion events from ads, build custom audiences, and limit ad frequency. Through the Meta Pixel, Meta may connect visits to our site with your Facebook or Instagram profile in accordance with Meta's data policies. Where required by applicable law, we will only set these Cookies with your explicit opt-in consent. You can manage your preferences for these Cookies through your browser settings, our cookie controls, and Meta's advertising settings.

First-Party Cookies are Cookies set directly by Zotlyx or our service providers acting purely on our instructions, through the domain of zotlyx.com or associated subdomains. We use first-party Cookies primarily for essential functionality, authentication, preferences, and to enable you to navigate between pages efficiently. Third-Party Cookies are Cookies that are set by third-party companies, services, or domains other than Zotlyx, such as analytics providers, advertising partners, social media networks, CDN providers, embedded widget providers, and integration partners. Third-party Cookies are subject to the respective third parties' own privacy policies and terms of service rather than this Cookie Policy.

Third-party services actively utilized on our website and Service include: (a) Google Analytics (Google LLC) — for website traffic measurement and demographic reporting; (b) Meta Pixel (Meta Platforms, Inc.) — for campaign attribution, conversion tracking, and social media advertising; (c) Microsoft Clarity (Microsoft Corporation) — for session replay, user interaction heatmaps, and usability analysis; (d) Cloudflare — for security, DDoS protection, edge caching, and web performance; and (e) payment processors — for secure billing and checkout transactions.

Below is a non-exhaustive description of specific Cookies you may encounter on the Service:

• Google Analytics Cookies (_ga, _ga_*, _gid): Used to distinguish unique users and throttle request rates. Duration: 24 hours to 2 years.

• Meta / Facebook Pixel Cookies (_fbp, fr): Used by Meta to deliver and measure targeted advertisements and track conversion events on Facebook and Instagram. Duration: 90 days.

• Microsoft Clarity Cookies (_clck, _clsk, CLID): Used to store a unique user ID and record behavioral analytics including clicks and scrolls. Duration: 1 year.

• Zotlyx Session & Security Cookies (auth_token, csrf_token, theme): Used to maintain authenticated user sessions, prevent cross-site request forgery, and remember UI theme preferences. Duration: Session to 30 days.

Cookies may be either "session cookies" or "persistent cookies" depending on their duration. Session Cookies are temporary Cookies that exist only for the duration of your current visit to the Service or until you close your browser or log out. They are used primarily to remember your current session state and to enable core functionality during a single browsing session. Persistent Cookies remain stored on your device after you close your browser or end a session and may be reactivated each time you subsequently visit the Service or visit a third-party website that recognizes that Cookie, until such time as the Cookie reaches its expiration date or is manually deleted by you. The persistence period varies by individual Cookie according to its purpose.

Local storage and similar technologies may also retain information for extended periods on your device until explicitly cleared by you through your browser privacy controls. We generally use persistent Cookies for preference remembering, analytics, and marketing where legally permitted, and session Cookies for essential transactional and authentication purposes.

You have the right to decide whether to accept or reject Cookies and Similar Technologies, subject to applicable law. Most web and mobile browsers are set by default to accept Cookies, but you can usually modify your browser settings through the preferences, options, or settings menu of your specific browser to restrict, block, or delete Cookies. You can also typically delete existing Cookies stored on your device at any time through your browser or operating system privacy settings. Please refer to your browser or device manufacturer's documentation or help pages for detailed instructions.

Direct Tool Opt-Outs: (a) To opt out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout; (b) To manage or opt out of Meta (Facebook/Instagram) interest-based advertising, visit Facebook Ad Preferences at https://www.facebook.com/adpreferences/ad_settings; (c) To learn more about Microsoft Clarity and manage data collection, review the Microsoft Privacy Statement at https://privacy.microsoft.com.

For general interest-based advertising opt-outs, you can also visit http://www.aboutads.info/choices/ (US) or http://www.youronlinechoices.eu/ (EEA). On mobile devices, adjust your device tracking preferences via "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android).

Depending on your jurisdiction and location, including if you are located in the European Economic Area, the United Kingdom, or other jurisdictions that require informed consent before setting or accessing non-essential Cookies, we will present you with a Cookie Banner, Consent Management Platform (CMP), or similar notice mechanism upon your first visit to the public-facing website that will allow you to accept, reject, or customize your Cookie preferences by category. Where required by applicable law, non-essential preference, analytics, and marketing Cookies will not be set or read until you have made an affirmative choice regarding consent. Essential or Strictly Necessary Cookies, which are required for the operation of the website or the provision of requested services, do not require consent where applicable law so provides.

You can change or withdraw your previously provided Cookie consent preferences at any time by clicking the Cookie Settings or Privacy Controls link (if available) in the footer of the public website, or by clearing Cookies in your browser and revisiting the website to be re-presented with the consent banner. Your choice to withdraw consent will not affect the lawfulness of any processing or Cookie use that occurred prior to your withdrawal.

Some browsers offer a "Do Not Track" (DNT) preference or similar signals such as the Global Privacy Control (GPC) that can be enabled in your browser settings to signal your preference regarding tracking across websites you visit. Because no uniform industry or legal standard exists for recognizing or responding to DNT or similar signals, the Service does not currently respond to or take automated action based on DNT browser headers or GPC signals. We will, however, continue to monitor developments regarding automated privacy signals and may adopt a uniform approach in the future as applicable regulations, guidance, or industry standards evolve.

Where legally required, we do provide alternative means for you to exercise choices about tracking and Cookie-based activities through the Cookie consent mechanism and your browser controls, as described in the preceding sections of this Cookie Policy.

When we send you transactional, service-related, or (where permitted) marketing or promotional emails, those emails may contain web beacons, pixel tags, or similar technologies to help us measure and understand the performance of those emails, including whether the email was delivered successfully, whether it was opened, which links or buttons were clicked, the device type and approximate region of the opening device, unsubscribe or preference center activity, and other email engagement metrics. This information helps us evaluate the effectiveness of email campaigns, improve the relevance and quality of future communications, detect deliverability issues, and personalize future content where permitted.

You can generally prevent pixel-based tracking in emails by configuring your email client to block automatic loading of images, remote content, or external resources, or by using read receipts blocking features where available. Please note that this may also prevent the display of other images or formatting in the email messages you receive from us. Alternatively, if you do not wish to receive marketing emails from us, you can unsubscribe at any time using the unsubscribe link included in every marketing email.

Because Cookies may store information that is considered personal information in certain jurisdictions, and because our Service and those of our third-party providers operate globally, information collected through Cookies and Similar Technologies may be transferred to, stored in, and processed in countries and jurisdictions outside of your country of residence, including countries whose data protection laws may differ from those in your home country. Where required by applicable law, we implement appropriate safeguards to govern such cross-border transfers, including by entering into appropriate data transfer agreements with service providers.

For more information about how we handle international data transfers and how personal information is more generally processed, please review our Privacy Policy, which includes additional information regarding international transfers and applicable safeguards.

The Service is not directed at or intended for use by children or minors under the age of 16 or the applicable age of digital consent in your jurisdiction. We do not knowingly target or intentionally set marketing, analytics, or advertising Cookies on the devices of children where prohibited by applicable law. If you are a parent or guardian and believe that your child has provided us with personal information or that Cookies have been set in circumstances prohibited by law, please contact us using the contact details set forth below.

We may update, amend, revise, or replace this Cookie Policy from time to time in our sole discretion to reflect, among other things, changes in applicable law, regulation, regulatory guidance, the Cookies we use, operational requirements, the features or functionality of the Service, or industry standards and practices. The most current version of this Cookie Policy will at all times be posted on this page with a revised "Effective Date" indicated at the top of the page.

When we make material changes to this Cookie Policy that are significant or that materially alter your rights or our practices, we will take reasonable steps to notify you in advance of such changes, for example by displaying a prominent notice on our website or in the product dashboard, by presenting a revised consent banner on the public website where required by applicable law, or by sending an email to the email address associated with your account. Your continued use of the Service after the Effective Date of the revised Cookie Policy, or (where consent is legally required) your reaffirmation of consent, will constitute your acknowledgment and acceptance of the revised Cookie Policy.

If you have any questions, comments, requests, concerns, or complaints about this Cookie Policy, our use of Cookies and Similar Technologies, how your Cookie consent is managed, or if you wish to exercise any of your available rights in connection with personal information processed through Cookies or Similar Technologies, please contact our Privacy and Data Protection Team using the following contact details: by email at privacy@zotlyx.com, by phone at +880 1601-603036, or by postal mail at Zotlyx, Privacy Team, Sagorpara, Bottola Rajshahi, Rajshahi 6100, Bangladesh.

When contacting us regarding Cookie or privacy matters, please include your full name, the email address associated with any account you hold with us, your country of residence, and a clear description of your request or concern so that we can respond efficiently and accurately. We will review and respond to legitimate requests as promptly as reasonably practicable and in line with applicable data protection laws.