Privacy Policy

ZeroPress ("we", "us", "our") operates the ZeroPress platform — a service that deploys and manages blog infrastructure on your own Cloudflare account. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

Core principle: your blog content lives on your Cloudflare account, not ours. ZeroPress servers hold only the minimal data needed to operate the platform.

Account data

• Your email address and name (used to create your ZeroPress account)
• A hashed password (we never store plain-text passwords)

Cloudflare access

• An OAuth access token and optional refresh token obtained when you authorise ZeroPress via Cloudflare OAuth. This token is stored encrypted in our database and used solely to provision and manage resources on your Cloudflare account.
• Your Cloudflare account ID (fetched once during authorisation)

Billing data

• Subscription status and plan information. Payment processing is handled by Razorpay — we do not store card numbers or bank details.

Usage data

• Post count and engine version per site (for billing and auto-update logic)
• Server logs with timestamps and IP addresses (retained for 30 days)

• To create and manage your ZeroPress account
• To provision blog infrastructure on your Cloudflare account
• To apply engine updates on your behalf
• To process subscription payments
• To send transactional emails (account confirmation, payment receipts, outage alerts)
• To improve service reliability and diagnose issues

We do not sell your data. We do not use your data for advertising.

All blog posts, media, and configuration created through the ZeroPress admin panel are stored in your Cloudflare D1 database, R2 bucket, and Workers KV — resources that live entirely within your Cloudflare account. ZeroPress servers do not store, index, or process your content.

We share minimal data with the following third parties:

• Cloudflare — infrastructure and OAuth provider
• Razorpay — payment processing

We do not share data with any other third parties unless required by law.

• Account and site data is retained while your account is active
• On account deletion, your ZeroPress account data is removed within 30 days
• Cloudflare resources on your account are not deleted by us — you retain full control

Passwords are hashed with PBKDF2. Cloudflare OAuth tokens are stored in an encrypted database column. All traffic is encrypted in transit via TLS. Our infrastructure runs entirely on Cloudflare Workers — no origin servers, no traditional VMs.

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Revoke Cloudflare OAuth access at any time from your Cloudflare dashboard
• Export or delete your account by contacting us

Questions about this policy? Email us at privacy@zeropress.me.