Privacy Policy

Effective date: 31 August 2026 · Last updated: 31 August 2026

This Privacy Policy explains how Van Zandt, LLC (“Van Zandt,” “we,” “us,” or “our”) collects, uses, shares, and retains personal information on the company website vanzandt.ai (the “Site”), including the Contact and Try Now forms.

This Policy covers the company website only. DrinkLink, TripGuard, AxionTrade, SideGig, and Vanzen are separate products. When those products launch, each will publish its own privacy policy on its own domain. Those policies control product accounts, in-app data, and device permissions.

1. Controller

The data controller is:
Van Zandt, LLC
30 N Gould St Suite N, Sheridan, Wyoming 82801, United States
Email: [email protected] (privacy and data-subject requests)
Also: [email protected]

We do not currently appoint an EU/UK Article 27 representative. If you are in the EEA or UK, you may still exercise GDPR rights by emailing [email protected] with the subject “GDPR request.” If we later offer products directed at the EU/UK at scale, we will appoint a representative and update this Policy.

2. Notice at collection (California and generally)

In the last 12 months, and going forward, we collect the following categories:

Identifiers — name, email address, IP address (including Cloudflare connecting IP), and optional topic you select.
Customer records / correspondence — the message body you submit, and operator logs of that submission.
Internet / technical activity — user agent, request timestamps, path, and security diagnostics needed to operate and protect the Site.

We do not collect, on this Site:

account passwords, payment cards, or government IDs;
precise geolocation, biometric, or health data;
advertising identifiers or cross-context behavioral profiles;
content of product chats, scans, trips, or trading activity (those live in product apps).

Business purposes: respond to you; operate waitlists; secure the Site; detect abuse; comply with law.

Sale / sharing: We do not sell personal information. We do not share it for cross-context behavioral advertising. There is no “Do Not Sell or Share” opt-out because we do not sell or share in that sense. If that changes, we will add a control before it does.

3. How we collect it

Directly from you on Contact or Try Now.
Automatically from your browser or the Cloudflare network (IP, TLS, basic request metadata) when you load the Site.

We do not run advertising pixels, analytics SDKs, or social trackers on this Site. We do not use the contact form to build a marketing list beyond the waitlist you asked to join.

4. Cookies and similar technologies

This Site does not set advertising or analytics cookies. Pages are statically generated. The contact form does not require an account cookie. Cloudflare, as our CDN and tunnel provider, may process technical data (including IP) to deliver and protect the Site. If we later add strictly necessary cookies (for example a CSRF token), they will be limited to security and will be described here before they go live.

5. Legal bases (EEA/UK — GDPR)

Contract / steps at your request (Art. 6(1)(b)) — answering a message you sent or adding you to a product waitlist you requested.
Legitimate interests (Art. 6(1)(f)) — securing the Site, rate limiting, fraud and abuse prevention, keeping an operator recovery log if email delivery fails. Those interests are balanced against your rights; you may object.
Legal obligation (Art. 6(1)(c)) — where law requires us to keep or disclose a record.
Consent (Art. 6(1)(a)) — only if we later add optional marketing beyond the waitlist you requested. You may withdraw consent without affecting prior lawful processing.

See GDPR & data-protection rights for how to exercise rights.

6. How we use information

Reply to your request from a Van Zandt address.
Operate product waitlists (Try Now).
Rate-limit, detect bots (honeypot fields are not stored as real submissions), and keep the Site available.
Meet legal, tax, and security obligations.

We do not use Site form data to train foundation models.

7. How messages are delivered and stored

Form submissions are sent with Cloudflare Email Sending (transactional email) from a Van Zandt address. Reply-To is the address you provided. A copy may be written to an operator log on our host so a message is not lost if delivery fails. Log files are permission restricted. Honeypot (bot) submissions are discarded and are not emailed.

8. Processors and sharing

We share personal information only as needed to operate the Site:

Cloudflare, Inc. — DNS, reverse proxy / tunnel, TLS, DDoS protection, and Email Sending. Cloudflare processes IP addresses and request metadata, and (for the form) email content in transit to our inbox.
Hosting — the origin server we operate (isolated tenant). Logs and the application process form data there.
Legal and safety — if required by law, valid legal process, or to protect rights, safety, or the Site.
Business transfers — in a merger, financing, or sale of assets, subject to this Policy or equivalent protection.

We do not sell personal information. We do not allow processors to use Site form data for their own advertising.

9. International transfers

Van Zandt, LLC is established in the United States. Cloudflare and our host may process information in the United States and other countries. Where GDPR requires a transfer tool, we rely on the processor’s appropriate safeguards (including Standard Contractual Clauses where they apply) plus the technical measures on this Site (TLS, no advertising cookies, limited collection).

10. Retention

Correspondence and waitlist — kept as long as needed to respond, run the waitlist you joined, and for a reasonable audit window (typically up to 24 months after last contact, unless you ask us to delete sooner and law does not require keeping it).
Security / server logs — rotated on a short operational cycle (typically 30–90 days) unless an incident requires longer investigation.

You may ask us to delete a thread that is not required for security or law. Email [email protected].

11. Security

We use HTTPS/TLS in transit, bind the origin to loopback behind Cloudflare, rate-limit the form, validate input, and restrict log-file permissions. No method of transmission or storage is completely secure. Do not send passwords, payment-card numbers, or government IDs through the public form.

12. Your rights

Depending on where you live (including GDPR, UK GDPR, and CCPA/CPRA), you may have the right to access, correct, delete, export, restrict, or object to processing; to withdraw consent; to appeal a denial; and to lodge a complaint with a supervisory authority. We will not discriminate against you for exercising these rights. We may need to verify your identity. Authorized agents (California) should email [email protected] with proof of authority.

California residents: we have not sold or shared personal information for cross-context advertising in the preceding 12 months. We do not use or disclose sensitive personal information collected on this Site for purposes that require a CCPA limit-use right.

13. Children

This Site is not directed at children. We do not knowingly collect personal information from children under 16 (or under 13 where COPPA applies). If you believe a child submitted information, email [email protected] and we will delete it.

14. Automated processing

The Site uses automated rate limits and a honeypot to reject likely bot traffic. That is not a legal or similarly significant decision about you. Product AI systems (when launched) will be described in each product’s own policy.

15. Changes

We may update this Policy. We will revise the “Last updated” date. Material changes may also be noted on the Site. Continued use after an update means you accept the revised Policy, except where law requires consent.

16. Contact

Van Zandt, LLC
30 N Gould St Suite N, Sheridan, Wyoming 82801, United States
[email protected]
Contact form — choose topic “Privacy.”