Privacy Policy
Last updated: November 13, 2026
This Privacy Policy describes how EarthMera (“we”, “us”) collects, uses, and shares information when you use ZIGU (https://zigu.my), a service for building your own personal page with links, content, and widgets (the “Service”). It applies to ZIGU only. The EarthMera mobile app and other EarthMera services have their own policies.
If you connect an Instagram account to ZIGU, the Instagram-specific parts of this policy (Sections 1, 2, 3, 7, and 8) also apply. We wrote them to describe what we store and manage without tying the wording to implementation details.
1. Information We Collect
Account information
- Email address and sign-in credentials. Credentials are handled by our authentication provider; we do not store your password in readable form.
- Your ZIGU handle (the address of your page), display name, profile photo, short bio, and the links, text, images, and widgets you add to your page. Your page is public by design: anyone with the link can see what you publish on it.
- Your language preference and the choices you make while setting up your page (for example the role and purpose you select).
Social sign-in
If you sign up or sign in with a Google, Apple, Kakao, or LINE account, we receive your social account identifier and email address from that service. We use information received through a social account only to create your account, identify you and sign you in, and contact you about your account.
We store, in encrypted form, a refresh token from LINE that is used solely to release the LINE connection. The token is deleted together with the account. When a ZIGU account is deleted, its LINE connection is also released, and information received from LINE is deleted together with the account data.
Payment information (paid plans only)
When you purchase a paid plan, payments are processed by Stripe. We store a Stripe customer identifier and a Stripe subscription identifier needed to manage your subscription. Your full payment card number, CVV, billing name, and billing address are submitted directly to Stripe and are never stored on, or accessible to, our servers.
Instagram account information (only when you connect Instagram)
- Instagram account information you connect: account ID, username, display name, profile picture, and an access token (stored encrypted).
- Automation settings you create: the posts you select (including a preview image and caption), trigger keywords, the messages, buttons, and links you write, and public reply texts.
- Records of automated messages sent on your behalf: Instagram-provided identifiers of the recipient and the triggering comment, delivery and read status, and timestamps.
- Link clicks: the number of clicks on links in your automated messages (counts only; we do not identify who clicked).
We process comments on your posts and messages sent to your account in order to run the automations you set up. We do not keep the content of comments or direct message conversations, other than what is needed to operate the feature and show you results. When an automation includes a follow condition, we check only whether that specific person follows your account when they interact with your message; we do not collect follower lists.
Information visitors leave on your page
If you add a contact form or guestbook to your page, visitors may enter their name, phone number, email address, or a message. This information is collected on your behalf and is described in Section 5.
Usage and device information
- Visit and click counts for your page and the links on it, which we show you as statistics.
- Log data such as IP address, browser and device type, operating system, referring URL, pages viewed, and timestamps, collected automatically when you or your visitors use the Service.
- Interaction data collected through analytics tools, described in Section 4.
- If you were invited by another ZIGU user, a record of who invited you, used to grant referral rewards.
2. How We Use Information
- Account and profile information: creating and signing in to your account, publishing your page at your handle, and keeping your account in working order.
- Email address: sending account notices such as sign-in verification, plan and renewal notices, payment failures, and notices about your account status. We do not send marketing email without your consent.
- Payment information: managing your plan and billing, and preventing fraud.
- Instagram data: Instagram data is used only to provide the Instagram features you set up, such as showing your connected account and posts, sending the automated messages and public replies you configured, and showing their results. It is shared only with Meta Platforms to perform these actions. We do not sell it, and we do not use it for advertising, profiling, or training AI models.
- Visitor information: delivering it to the page owner who collected it (Section 5).
- Usage, device, and interaction data: showing you statistics for your page, keeping the Service secure, detecting misuse, fixing problems, and understanding where people get stuck so we can improve the Service.
- Referral data: recording who invited you and granting referral rewards.
- Advertising measurement: measuring whether our ads for ZIGU lead people to sign up, and showing those ads to people likely to be interested (Section 4).
5. Information Collected on Behalf of Page Owners
A ZIGU user (a “page owner”) may add a contact collection form or a guestbook to their page, through which a person visiting that page (a “visitor”) may provide the information below.
In this case the page owner is the party collecting and using the personal information. ZIGU stores and delivers that information on the page owner’s behalf as a processor. ZIGU does not use it for any purpose other than delivering it to the page owner, and does not share it with third parties or use it for advertising or any other purpose.
- Information collected: for a contact form, name, phone (country code and number), and email, limited to the fields the page owner has enabled; for a guestbook, the name and message the visitor enters.
- Purpose: so the page owner can read, reply to, or follow up with the visitor.
- How it is collected: the visitor enters it directly into the form on that page, and it is collected only if the visitor consents. The time of consent is recorded when the submission is received.
- Retention: contact form entries are kept for one year from collection, or until the page owner deletes the entry or closes their ZIGU account, whichever comes first. Guestbook entries are kept until the page owner deletes the entry or the widget, or closes their account.
- Disposal: destroyed without delay and in an unrecoverable manner once the retention period ends.
- Safeguards: stored encrypted and visible only to that page owner.
Visitors may decline to provide their information, in which case the feature is unavailable to them. Requests to access, correct, or delete submitted information can be made at support@earthmera.com. Where a request concerns information we hold on behalf of a page owner, we will verify the request and forward it to that page owner, and ZIGU will act on it without undue delay.
6. How We Protect Information
- All traffic between your browser, our servers, and third parties uses HTTPS.
- Instagram access tokens and the LINE refresh token are stored encrypted.
- Payment card details never reach our servers; they go directly to Stripe.
- Access to personal information is limited to personnel who need it to operate the Service.
No method of transmission or storage is completely secure, but we work to protect your information with appropriate technical and organizational measures.
7. Data Retention
Unless a different period is stated below, we keep information while your account is active and delete it when your account is deleted.
- Account and page content: deleted with your account. We may keep limited records where needed to prevent fraud, resolve disputes, enforce our terms, or comply with law.
- Instagram connection, automation settings, and records of automated messages: kept only while you use the feature, to operate the Instagram features you set up (such as sending your automated messages, showing their results, and avoiding duplicate messages). They are deleted when you delete the automation, disconnect Instagram, or delete your ZIGU account, and are deleted or de-identified promptly upon a request from you, from a message recipient, or from Meta. We do not store the content of comments or direct message conversations. To fully revoke access on Instagram’s side, you can also remove ZIGU from the connected apps and websites in your Instagram settings.
- Payment and transaction records: kept for up to seven (7) years where required to comply with tax, accounting, and anti-fraud obligations. Stripe keeps its own records under its own policies.
- Information visitors leave on your page: as described in Section 5.
- Server logs: kept for a limited period for security and incident response, then deleted.
- Analytics data: retained by Google and Microsoft according to their own retention schedules.
8. Deleting Your Data
You can disconnect Instagram at any time from your ZIGU settings; this deletes your Instagram connection, automation settings, and activity records. To delete your entire ZIGU account and its data, email support@earthmera.com from your account email. To fully revoke access on Instagram’s side, remove ZIGU from the connected apps and websites in your Instagram settings.
If you received an automated message from a ZIGU user on Instagram and want the related records deleted, you can also email us at the address above. Removing ZIGU from your Instagram settings also triggers deletion through Meta.
9. Your Rights and Choices
- Access and correction: you can review and update your page and account information in the Service, or contact us at support@earthmera.com to request access to, correction of, or deletion of your personal information. Depending on where you live, you may have additional rights under applicable data protection law (for example in the EEA, the United Kingdom, Switzerland, Canada, South Korea, or certain U.S. states), and we will honor them.
- Withdrawing consent: where we rely on your consent, you may withdraw it at any time. This does not affect processing that happened before you withdrew it.
- Disconnecting Instagram: remove the connection at any time from your ZIGU settings, or remove ZIGU from the connected apps and websites in your Instagram settings.
- Cancelling a paid plan: you can cancel from your plan settings at any time.
- Complaints: if you believe we are processing your information unlawfully, you may complain to the data protection authority where you live.
10. Children's Privacy
The Service is not directed to children under 14, and we do not knowingly collect personal information from children under 14. If we learn that a child under 14 has provided personal information, we will delete it as quickly as reasonably practical.
11. International Data Transfers
Our servers, database, and file storage are located in the United States. The service providers listed in Section 3 may process data in the United States or other countries. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in those countries, where data protection laws may differ from those of your jurisdiction. We protect your information as described in this policy regardless of where it is processed.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top of this page. If we make material changes, we will notify you through the Service or by email.
13. Contact Us
If you have questions or comments about this policy, or wish to exercise your privacy rights, contact us at:
EarthMera
1010 Bedford Avenue #206
Brooklyn, NY 11205, United States
support@earthmera.com