Privacy Policy

NOVATOPIA LABS LIMITED (“NOVATOPIA”, “we”, “us” or “our”) respects your privacy. This Privacy Policy applies to zendefend.net, ZenDefend Ad Blocker, account and license services, and support interactions that link to this policy.

1. Information we may process

Account and license information

We may process your email address, account identifier, license or entitlement, selected plan, device count, application version, operating-system family and license status so we can authenticate users, deliver the purchased capability and provide support.

Payment and order information

Payments may be handled by Waffo Pancake or another payment provider shown at checkout. We may receive order identifiers, plan, amount, currency, payment status, refund or dispute status and limited transaction metadata. We do not need your full card number to provide the Service. The payment provider’s own policy governs information it collects directly.

Support information

If you contact support, we process the email address, message, attachments and information you choose to provide. Please do not send passwords, payment card numbers, private keys, browsing histories or other sensitive information through support email.

Device and diagnostic information

We may process application version, platform, crash information, service health and diagnostic details when necessary to operate, secure and troubleshoot the Service. The final production configuration should list each enabled telemetry field before launch.

Filtering data

ZenDefend’s core filtering is designed to operate locally. The desktop and mobile applications may store rule state, matched-domain statistics, allowlist entries and diagnostic logs on the device. Before launch, NOVATOPIA must confirm the retention and sync behavior of each platform and update this section if raw domains, URLs or logs are uploaded.

2. How we use information

• Provide, authenticate, maintain and improve ZenDefend.
• Manage licenses, devices, subscriptions, refunds and customer requests.
• Protect the Service against abuse, fraud, security incidents and unauthorized access.
• Send service, security, transaction and support communications.
• Comply with legal obligations and enforce our agreements.

3. Legal bases and choices

Depending on context and applicable law, we process information to perform a contract, take steps at your request, comply with legal obligations, protect legitimate interests, or with your consent. You can unsubscribe from non-essential marketing messages. Service, security and transaction messages may still be sent when necessary.

4. Sharing and service providers

We may share information with service providers that help us host, authenticate, send email, process payments, manage subscriptions, monitor security or provide support. They may process information only for documented services and subject to appropriate contractual or technical controls. We may disclose information when required by law, to protect rights and safety, or as part of a corporate transaction.

5. International transfers

NOVATOPIA is based in Hong Kong and some service providers may process information in other jurisdictions. We use appropriate contractual, organizational and technical measures required by applicable law for cross-border processing.

6. Retention

We retain information for as long as needed for the purposes described here, the customer relationship, security, accounting, dispute resolution and legal obligations. Local filtering logs can usually be deleted from the application. The exact cloud retention periods and deletion behavior must be confirmed against the production implementation before public launch.

7. Security

We use reasonable safeguards appropriate to the risk, including access controls, encryption in transit, protected credentials, least-privilege access and monitoring. No service can guarantee absolute security. Keep your account credentials, device and recovery codes secure.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. We may need to verify your request. Contact [email protected].

9. European Economic Area, United Kingdom and Switzerland

For users protected by the GDPR, UK GDPR or equivalent Swiss law, NOVATOPIA acts as the controller for the personal data described in this policy unless a payment, email, hosting or other provider acts as an independent controller for its own service. Our legal bases may include contract, legal obligation, legitimate interests such as security and service reliability, and consent where required. You may request access, correction, deletion, restriction, portability or objection, withdraw consent, and complain to a supervisory authority. We do not sell personal data or use ZenDefend filtering logs for advertising profiles. International transfers use the safeguards required by applicable law, such as an adequacy decision or appropriate contractual safeguards.

10. California and other US state privacy rights

If the CCPA/CPRA or another applicable US state privacy law applies, you may have the right to know or access categories and specific pieces of personal information, correct inaccuracies, request deletion, opt out of sale or sharing, limit certain sensitive-personal-information uses and receive equal treatment. We do not knowingly sell personal information or share it for cross-context behavioral advertising. Submit a request to [email protected]; we may verify identity and handle authorized-agent requests as required by law.

11. Children

ZenDefend is not directed to children who are not legally able to consent to the processing of their information. If you believe a child has provided personal information unlawfully, contact us.

12. Changes

We may update this policy when the Service, vendors or legal requirements change. We will publish the updated version with a new effective date and provide additional notice when required.

13. Contact

NOVATOPIA LABS LIMITED
RM 1603, 16/F, TUNG NING BUILDING, NO.125-126 CONNAUGHT RD CENTRAL, SHEUNG WAN, HONG KONG
Email: [email protected]

Important: This draft must be checked against actual telemetry, DNS-log retention, Waffo data flows and the company’s legal advice before public launch.