Zintro, Inc. (“Zintro,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites (including zintro.com), use our services, or participate in research opportunities through Zintro (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to individuals who interact with Zintro, including:

• Research participants and respondents

• Experts and advisors in our network

• Client representatives and business contacts

• Website visitors

2. Personal Information We Collect

“Personal information” (or “personal data”) means information that identifies, relates to, describes, or could reasonably be linked to an individual.

We collect the following categories of information:

Information You Provide

• Contact information (name, email, phone number, mailing address)

• Professional information (employer, job title, expertise, biography)

• Account and profile information

• Research participation information (screening responses, surveys, transcripts, audio/video recordings, demographic data, project materials)

• Project-specific eligibility information you voluntarily provide, such as software platforms used, subscriptions held, financial instruments (for example, types of credit cards), purchasing behaviors, or other screening criteria

• Payment and tax information for honoraria

• Identity verification information when required

If a research session is recorded, you will be informed in advance and, where required, consent will be obtained.

Information Collected Automatically

• IP address and approximate location

• Device and browser information

• Usage data (pages visited, timestamps, click activity)

• Cookies and similar tracking technologies

Information from Third Parties

We may receive information from service providers, identity verification partners, publicly available sources, or research clients when relevant to an opportunity.

3. How We Use Personal Information

We use personal information to:

• Provide and operate the Services

• Match individuals with research opportunities

• Facilitate research projects on behalf of clients

• Communicate with users

• Process payments

• Prevent fraud and ensure compliance

• Improve our Services

• Send marketing communications (you may opt out at any time)

We may organize and categorize information you provide to improve future matching and avoid redundant outreach.

We may use AI-enabled tools to support screening, matching, and operational functions. We do not make decisions that produce legal or similarly significant effects solely through automated processing without human involvement.

4. How We Share Personal Information

We may share personal information:

• With research clients when you choose to participate in a project

• With service providers who support hosting, communications, analytics, payments, or verification

• When required by law or legal process

• In connection with a business transaction (e.g., merger or acquisition)

We do not sell personal information for monetary consideration.

We do not share personal information for cross-context behavioral advertising.

5. Cookies and Tracking

We use cookies and similar technologies to operate and improve our website and Services. You may control cookies through your browser settings and any cookie management tools available on our website.

6. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy and to comply with legal obligations.

Retention periods may include:

• Client contact data: duration of relationship plus 3 years

• Expert profiles: duration of membership plus 5 years

• Research participant data: 3 years after project completion

• Financial records: 7 years

• Website analytics: approximately 24 months

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption, access controls, and monitoring systems. However, no system can guarantee absolute security.

8. Notice to California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, provides you with specific rights regarding your personal information.

Categories of Personal Information Collected

In the past 12 months, we may have collected the following categories of personal information:

• Identifiers (name, email, IP address)

• Professional and employment information

• Commercial information (participation in research projects)

• Internet or network activity information

• Financial information for payment processing

Your Rights

California residents have the right to:

• Know the categories and specific pieces of personal information we collect

• Know the categories of sources and third parties with whom we share information

• Request deletion of personal information (subject to exceptions)

• Request correction of inaccurate personal information

• Receive a portable copy of certain personal information

• Opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising)

• Limit the use of sensitive personal information (where applicable)

• Not be discriminated against for exercising privacy rights

To exercise your rights, contact compliance@zintro.com or call +1 617-936-0140. We will verify your identity before responding.

You may designate an authorized agent to submit a request on your behalf.

9. Notice to Residents of the European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, applicable data protection laws (including GDPR, UK GDPR, and Swiss FADP) provide additional rights.

Data Controller

Zintro, Inc. is the data controller for personal data collected directly from you through the Services.

Legal Bases for Processing

We process personal data under one or more of the following legal bases:

• Performance of a contract

• Legitimate interests

• Compliance with legal obligations

• Consent (where required)

International Transfers

Your personal data may be transferred to and processed in the United States. Where required, we use appropriate safeguards, such as:

• European Commission Standard Contractual Clauses (2021/914)

• UK International Data Transfer Addendum

• Swiss-recognized safeguards

Your Rights

You may have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Restrict processing

• Object to processing

• Request data portability

• Withdraw consent (where processing is based on consent)

• Lodge a complaint with a supervisory authority

UK residents may contact the Information Commissioner’s Office (ICO).
Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC).
EEA residents may contact their local data protection authority.

To exercise your rights, contact compliance@zintro.com.

10. Children’s Privacy

Our Services are not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be posted on our website with a revised “Last Updated” date.

12. Contact Us

Zintro, Inc.
68 Harrison Ave #605
PMB 27193
Boston, MA 02111
United States

Email: support@zintro.com
Email: compliance@zintro.com
Phone: +1 617-936-0140