Privacy notice.

01 Who we are

ZiaVPN is a privacy-first VPN service in private beta, operated by a small team in Albuquerque, New Mexico. When we say "we," "us," or "ZiaVPN" in this notice, that's who we mean. You can reach a real human at hello@ziavpn.com.

02 What this notice covers

It covers the website at ziavpn.com, the waitlist form, and any email you receive from us at this stage of the project. It does not yet cover the VPN service itself, because the VPN service is not live. When the VPN launches, this notice will be replaced with one that covers it in detail — and we'll email you the changes before any of them affect you.

03 What we collect

Only what you give us, when you give it to us. From the waitlist form, that's:

• Your name. So we can address you like a person, not a row in a database.
• Your email address. So we can confirm your spot now and tell you when it opens later.
• The plan you're interested in — Local, Standard, Lifetime, or "Just curious."
• An optional note, if you sent one.

Your browser also sends our edge a country-level location (e.g. "US") and a city derived from your IP address. We log this only on the original signup so we can spot fraudulent submissions; we do not associate it with you afterward, and it is never sold or shared.

04 What we don't collect

On this website, we do not run third-party analytics, ad trackers, fingerprinters, social pixels, session replay, or anything similar. We do not set marketing cookies. We do not load a single script from Google, Meta, or anyone else's ad network. Open the network panel and look — you'll see fonts, our CSS, and our own code. Nothing else.

When the VPN itself launches, the same posture will apply, in stronger language: no connection logs, no DNS query logs, no bandwidth ledgers, no destination records. The infrastructure will be configured to write nothing to disk that could re-identify a session, and we'll publish a third-party audit before exiting beta.

05 How we use what you send

• To send you one confirmation email when you sign up, so you know the form worked.
• To send you one invitation email when your spot in the closed beta opens.
• To reply if you sent a note that asked us a question.
• To keep an honest count of paid-plan reservations so we can show "X / 250" on the home page and stop accepting Lifetime when we hit the cap.

That's the entire list. We don't run drip campaigns, re-engagement nudges, or referral hustles. If we ever decide we need to email you for any other reason, we'll ask first.

06 Where it's stored

Waitlist data is stored in Cloudflare Workers KV, encrypted at rest, with access scoped to a single API token held by the founders. Email itself is sent through Resend, our transactional email provider. Cloudflare and Resend each have their own privacy practices; we rely on them as data processors and have configured both to retain only what's necessary to deliver and audit a single message.

We do not host your data on any other third-party CRM, marketing platform, or analytics tool.

07 Who we share it with

Nobody, except the two infrastructure providers above (and only to the extent required to deliver an email or persist a record). We do not sell, rent, license, or trade your data. We do not share it with advertisers or data brokers. We do not share it with another VPN provider in the event of an acquisition; if ZiaVPN is ever acquired, the new operator must either honor this notice or contact you for fresh consent.

08 Government & legal requests

We will respond to a valid, narrowly-scoped legal order in the jurisdiction where we operate. We can only hand over what we have. Because we keep so little — and because the connection records that matter most to a VPN service do not exist by design — there is rarely anything to hand over.

Once the VPN service launches, we will publish an annual transparency report documenting the number and type of legal requests we receive and how we responded.

09 How long we keep it

• Waitlist record: kept for as long as you remain on the waitlist, plus 30 days after you decline an invite or cancel an account.
• Email logs at Resend: kept for 30 days for deliverability audits, then expired.
• Edge access logs at Cloudflare: kept by Cloudflare per their default retention; we do not pull them into our own systems.

10 Your rights

Whether or not you live in a jurisdiction with explicit privacy rights, we will treat the following as defaults for everyone:

• Access. Ask us what we have on you. We'll send it.
• Correction. Tell us we got something wrong, and we'll fix it.
• Deletion. Ask us to remove your record, and we will, within 7 days.
• Withdrawal of consent. Tell us to stop emailing, and we'll stop, immediately.
• Portability. Ask for your record in a structured format, and we'll provide JSON.

To exercise any of these, email hello@ziavpn.com from the address you signed up with. We do not require a notarized form, a portal, or a phone call.

11 Children

ZiaVPN is not intended for use by anyone under 18, and we do not knowingly collect data from minors at this stage of the project. If you believe a child has submitted information to us, please email hello@ziavpn.com and we will delete it.

12 Changes

We will update this notice when something material changes — for instance, when the VPN service itself launches and gains its own data processing. When that happens we will email everyone on the waitlist with a plain summary of what changed and why, before the change takes effect.

13 Contact

Questions, requests, or complaints — write us at hello@ziavpn.com. A real person reads every message. We will reply within five business days, usually much sooner.