Zephrify

Privacy notice

Last updated 18 October 2026.

Zephrify is run by TGF Digital. This page says what personal data we hold about you, why, who else sees it, how long we keep it, and how to have it removed. Questions: hello@zephrify.com.

What we hold, and why

Your account: your name, your email address, and your password, which is stored only as a one-way hash we cannot read back. We use these to run your account, sign you in, and send you the emails that belong to it (such as a password reset). We do this because it is needed to provide the service you asked for.
API keys: a name you gave each key, when it was made and last used, and a hash of it. We cannot see a key after it has been shown to you once.
Your sites: the name, address and choices you made for each site you build. What you publish is public by design.
Saved places and notes: if you use the API to save places, the places and any note you wrote on them.
Usage counts: how many pages were published, how many articles written and how many API requests were made, per day. They are kept for billing and capacity, and they do not contain your name or email.
Sign-in sessions: while you are signed in we keep a session record containing your IP address and your browser's user-agent text, to keep you signed in and to protect your account. It expires after a period of inactivity.
Server logs: our servers keep technical logs (requests, errors and the IP address they came from) to keep the service secure and to find faults.

Payments

Payments are taken by Stripe. Your card details go to Stripe and never reach us. We keep Stripe's reference for you and the status of your subscription. Stripe's own notice explains what it does with your data.

Cookies

The app at app.zephrify.com sets one session cookie, and its forms carry a security token, so that you stay signed in and nobody can submit a form in your name. They are needed for the service to work, and they are set on any page of the app, signed in or not. We use no advertising or analytics cookies, and zephrify.com sets none.

Who else sees your data

Stripe processes your payments.
Mailgun delivers the emails we send you.
Our hosting provider runs the servers the service lives on.
Bunny.net delivers the published sites. It sees the IP address of anyone who visits one, as any host or CDN does. The pages carry no cookies or trackers.
Backups of our database are kept in a cloud drive we control.

We do not sell personal data and we do not use it for advertising. The place data on generated pages (from OpenStreetMap, GeoNames and similar sources) is public data about places, not about you, and it is credited to its source on every page that uses it.

How long we keep it

Your account data, until you delete your account.
When you delete your account we remove, straight away, your account, API keys, saved places, sign-in sessions and any pending password reset, cancel your subscription, and archive your sites. Pages that were already published stay online until the hosting for them is removed.
Backups: nightly backups are kept for 14 days, one a week for 8 weeks and one a month for a year, and then expire. Data you deleted can remain in those backups until they expire. We do not use backups to look anything up.
Payment records: Stripe keeps the invoices and payment records that tax law requires. When you delete your account we clear your name, email, phone and address from your Stripe customer record, and the invoices remain.

Your rights

You can see and download everything we hold about you, and delete your account, from your account page, without asking us. You can also ask us to correct anything that is wrong, or to explain what we do with your data, by writing to hello@zephrify.com. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change what we do with your data we will change this page, and the date at the top, at the same time.