Privacy Policy

Last updated: 20 October 2026

This Privacy Policy explains what personal information is processed when you use zypcrm.com (“ZypCRM”, “the site”, “we”, “us”), how and why, and the choices and rights you have. We have written it in plain language. If anything is unclear, email [email protected].

1. Who is responsible

ZypCRM is run by Yoorie (“we”). Yoorie is the data controller for the limited personal data described below. Contact for all privacy questions and requests: [email protected]. We have not appointed a data protection officer because we do not carry out large-scale processing of personal data; requests are handled directly by the people who run the site.

2. The short version

• Your files never leave your device. Every PDF, image, vector and converter tool runs inside your browser. Documents, photos, text, passwords and signatures you use with a tool are processed in your browser’s memory and are never uploaded to us or anyone else. We cannot see them.
• We do not have user accounts, we do not ask for your name, and we do not sell your personal information for money.
• The site is funded by advertising. When ads are switched on, Google may use cookies and similar technologies to show and measure ads – in the EEA, UK and Switzerland only after you consent, and everywhere in line with the choices you make in Cookie settings.
• You can change your choices at any time with the Cookie settings link in the footer, and opt out of the “sale” or “sharing” of personal information on our Do Not Sell or Share page. We honour the Global Privacy Control (GPC) signal.

3. Files and content you use with the tools

When you choose or drop a file, your browser reads it into memory and our code – which has been downloaded to your device – processes it there. The result is created in your browser and saved only where you choose. When you close or reload the tab, the file is gone from memory. This applies to every tool, including the AI tools (background removal, face blurring and passport photos): the AI model is downloaded to your device and runs locally; your image is never sent to the model provider.

Because we never receive your files, we cannot recover, inspect or delete them for you, and they are not covered by any retention period – there is nothing on our side to retain.

4. Information that is processed when you visit

We do not use your information for automated decisions that have legal or similarly significant effects on you.

5. Advertising and Google’s use of cookies

ZypCRM is free because it shows ads served by Google AdSense. (At the time of writing, ad serving has not yet been switched on; this section describes how it works once it is.)

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• Google and its partners may also use device identifiers, IP addresses and similar technologies for frequency capping, aggregated ad reporting, and to combat fraud and abuse.
• Learn how Google uses this information: How Google uses information from sites or apps that use our services. Google’s own privacy policy is at policies.google.com/privacy.
• Opt out of personalised advertising from Google at Ads Settings (or My Ad Center). You can opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info/choices (US), youronlinechoices.eu (EU/UK) and youradchoices.ca (Canada).
• Consent Mode. We use Google Consent Mode v2. Before you choose, the four consent signals – ad_storage, ad_user_data, ad_personalization and analytics_storage – are set to denied for visitors in the European Economic Area, the United Kingdom and Switzerland. If you decline, Google does not set or read advertising cookies; it may still show limited, non-personalised ads that do not use cookies for advertising purposes.
• For EEA, UK and Swiss visitors we will use a Google-certified consent management platform (CMP) integrated with the IAB Transparency & Consent Framework before serving ads in those regions. The list of ad technology providers Google works with is published in Google’s ad tech providers list.

More detail, including a list of the cookies Google may set, is in our Cookie Policy.

6. Analytics

We do not currently use any analytics service. If we add privacy-friendly analytics in future, it will only run when the analytics_storage consent signal is granted, and we will update this policy first.

7. Your rights (EEA, UK and Switzerland)

Under the GDPR, the UK GDPR and the Swiss FADP you have the right to: access the personal data we hold about you; have it corrected; have it erased; restrict or object to processing (including processing based on legitimate interests); data portability; and to withdraw consent at any time (via Cookie settings) without affecting processing that happened before. You can also complain to your local data protection authority – for example the ICO in the UK – but we would appreciate the chance to sort things out first.

In practice we hold almost nothing that identifies you: we have no accounts and never receive your files. Most advertising data is held by Google; you can manage it directly at myaccount.google.com and Ads Settings.

8. US state privacy rights (California and other states)

This section applies to residents of California (CCPA as amended by the CPRA) and other US states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon).

• Categories collected (last 12 months): identifiers (IP address, cookie and device IDs); internet or other electronic network activity (pages viewed, ad interactions); approximate location derived from IP address; and, if you email us, your email address. We do not collect sensitive personal information as defined by the CPRA, and we never receive the files you process.
• Sources: your browser, and our advertising partners.
• Purposes: operating and securing the site, serving and measuring ads, and replying to you.
• “Sale” and “sharing”: we do not sell personal information for money. However, allowing advertising cookies so that Google and its partners can serve personalised (cross-context behavioural) ads may count as “selling” or “sharing” under these laws. You can opt out on our Do Not Sell or Share My Personal Information page, by rejecting Personalised ads in Cookie settings, or by turning on the Global Privacy Control in your browser, which we treat as a valid opt-out request.
• Your rights: to know/access, delete and correct personal information; to opt out of sale, sharing and targeted advertising; and not to be discriminated against for using these rights. You may use an authorised agent. Email [email protected]; we will respond within 45 days. Because we hold so little data, we may ask for information (such as the email address you wrote from) to match a request.
• Retention: see section 10.

9. Children’s privacy (COPPA)

ZypCRM is a general-audience website and is not directed at children under 13 (or under 16 in the EEA and UK). We do not knowingly collect personal information from children, and we do not use personalised advertising for children. If you believe a child has sent us personal information, email us and we will delete it.

10. How long data is kept

• Your files: never received, so never stored.
• Server request logs (host): kept by the host for a short period for security, typically up to 30 days, then deleted or aggregated.
• Emails you send us: kept while we deal with your message and for up to 24 months afterwards, then deleted.
• Your consent choice: stored in your browser until you change it or clear site data; we ask again after 12 months.
• Advertising data: kept by Google under Google’s retention policy.

11. International transfers

Our host, CDNs and Google may process data in the United States and other countries. Where personal data from the EEA, UK or Switzerland is transferred, these providers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses (with the UK Addendum).

12. Security

The site is served only over HTTPS. Because files are processed locally, the most sensitive data you work with never travels over the network at all. We keep the number of third parties to a minimum and load AI models and libraries only when a tool needs them.

13. Changes to this policy

We will update this page if our practices change, and change the “Last updated” date above. Significant changes (for example, adding analytics) will be announced on the site before they take effect.

14. Contact

Yoorie – ZypCRM · Email: [email protected] · See also our Cookie Policy, Terms of Use and Do Not Sell or Share page.