Privacy Policy

1. Overview & Data Controller

Welcome to Zahidiom (“we,” “our,” or “us”). Zahidiom is an executive network and business ecosystem connecting founders, creative professionals, and entrepreneurs. We are committed to protecting your privacy and complying with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

For the purposes of applicable data protection legislation, the Data Controller responsible for your personal data is Zahidiom Network. If you have questions regarding your personal data, you can reach our Data Protection team at privacy@zahidiom.com.

2. Information We Collect

We collect and process the following categories of data when you use the Zahidiom platform:

• Account Credentials: Full name, verified email address, username, encrypted password hashes, and unique account identifiers.
• Profile Information: Professional title, creative discipline/industry tag, geographic country/region, biography, profile avatar, cover photo, social links, and skills.
• Billing & Payment Information: Payment transactions are processed directly by our PCI DSS-certified payment provider, Stripe, Inc. Zahidiom never stores complete credit card numbers or security CVV codes on our servers. We retain customer identifiers, subscription status, and billing history.
• Connected Platform IDs: Discord account ID and username (for automated role and community verification) and single sign-on tokens for sister platforms (Hostiom, Shiftiom, Signiom).
• Technical & Usage Data: IP address, browser type, device identifiers, and analytics telemetry (processed only with your affirmative consent).

3. Legal Bases for Processing (GDPR)

Under GDPR Article 6, we process your personal data under the following lawful bases:

• Contractual Performance: To create your account, manage your membership tier, provision entitled benefits (e.g., hosting via Hostiom), and provide network access.
• Legitimate Interests: To secure our network, prevent fraud or unauthorized account access, and maintain service reliability.
• Legal Obligation: To maintain accounting records and tax compliance for subscriptions and transactions.
• Consent: For non-essential cookies and analytics tracking (such as PostHog), which you may grant or revoke at any time.

4. Third-Party Service Providers & Sub-Processors

We work with trusted third-party sub-processors who assist us in operating our platform under strict data processing agreements:

5. Your Rights as a Data Subject

Under GDPR and CCPA, you retain full ownership and control over your personal data, including:

• Right of Access & Portability: You can request a complete, machine-readable export of all data associated with your profile.
• Right to Rectification: You can edit and correct your profile information at any time in Account Settings.
• Right to Erasure (“Right to be Forgotten”): You can request permanent deletion of your account and personal data from our databases.
• Right to Withdraw Consent: You can opt out of analytics tracking at any time via cookie preferences.

To exercise any of these rights, visit your Account Settings or email our privacy team at privacy@zahidiom.com.

6. Data Retention & Security

We apply industry-standard security safeguards including TLS 1.3 encryption in transit, bcrypt password hashing with unique salts, strict Role-Based Access Controls (RBAC), and continuous vulnerability monitoring. Your data is retained only for as long as your account remains active or as required by law.

Questions or Privacy Inquiries?

If you have any questions about this Privacy Policy, your rights, or our data handling practices, please contact our Data Protection Officer at privacy@zahidiom.com or visit zahidiom.com.