Privacy Policy

1. Who we are and what this covers

ZuZ Invest Ltd. (Tariffs Reclaim, we, us, or our) provides a document-focused service for users operating in the United States who may be seeking assistance with customs and tariff-refund documentation. This Policy covers our website, account area, dashboard, communications, and related services (collectively, the Services).

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not create an account or use the Services.

For privacy questions or requests, contact legal@tariffsreclaim.com.

2. Information we collect

Depending on how you use the Services, we may collect:

• Contact information: your name, company or importer name, email address, phone number, and other contact details you provide.
• Account and log information: authentication, login-link, session, dashboard, and activity information, including IP address, timestamps, browser and device information, and pages visited.
• Usage information: information about use of the public website and its pages, including signup and calculator-use events and the amount and currency of a completed service payment. We do not intend to send customs documents, calculator inputs or results, contact details, or dashboard activity to our analytics provider.
• Crash or error information: technical details generated if the website or dashboard encounters an error, used to diagnose and resolve the problem.
• Customs and shipment information: ES-001 and ES-003 exports, entry information, duty data, supporting documents, and other information you submit or authorize us to retrieve for review.
• Audit, filing, payment-status, refund-tracking, portal-access authorization, correspondence, and service records.
• Information you provide when contacting us or responding to a request for action.

3. How we use information

We may use information to:

• Create and secure accounts and send login links.
• Review documents and organize audit, filing, and refund-tracking workflows.
• Communicate about documents, required actions, payments, service updates, and account security.
• Coordinate the service with Unicargo and BDO where needed for their respective roles as service providers acting under our instructions.
• Process service payments through external payment providers without storing full payment-card details ourselves.
• Maintain, troubleshoot, secure, and improve the website and dashboard.
• Measure public website interactions using Google Analytics in an aggregated manner where configured.
• Build or use remarketing audiences for our own services if we introduce those tools, as permitted by applicable law and subject to the choices described in Sections 6 and 9.
• Comply with legal obligations, protect rights and property, prevent fraud or misuse, and enforce our Terms and Conditions.

4. How information may be shared

We share information with service providers who help us operate the Services. These may include Unicargo and BDO, each acting under our instructions; PayPal and other payment processors; Vercel and other hosting or storage providers; MongoDB and other database providers; Resend and other authentication or email providers; Google Analytics and any advertising providers we introduce; and professional advisers. We require service providers to use information only as needed to perform services for us and to protect it consistent with their obligations and this Policy.

We may disclose information when we believe in good faith that disclosure is reasonably necessary to comply with applicable law, legal process, or a lawful request; protect users or the Services; investigate fraud, misconduct, or security incidents; or establish, exercise, or defend legal claims. Where legally permitted and reasonably appropriate, we may notify affected users before disclosing their personal information. We may review or challenge requests we believe are invalid or excessive, but we are not required to do so.

If ownership or operation of the Services is transferred, or we merge with another organization, we will use reasonable efforts to require the successor to handle personal information consistently with this Policy. We do not sell uploaded customs documents as a product.

5. Payments

Incoming payments are handled by external payment providers such as PayPal. We do not store full payment-card numbers on our systems. Payment providers collect and process payment information under their own privacy policies and terms.

6. Cookies, analytics, and advertising

We use cookies and similar technologies, such as pixels and tags, for login, security, preferences, analytics, and, if introduced, advertising. Necessary session and authentication cookies keep you logged in and help secure the account and dashboard. Google Analytics helps us measure aggregate use of public website pages and conversion events so we can improve the Services.

Google Analytics currently runs when you visit the website. We do not currently use Google Signals, ads personalization, or user-provided data collection in Google Analytics. We do not currently activate a remarketing pixel. Before introducing remarketing or cross-context behavioral advertising, we will update this Policy and provide the legally required choices.

You can manage or block cookies through your browser settings, although some site functionality may not work correctly if you do. You can opt out of interest-based advertising from many providers through industry tools such as the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

Some browsers offer a Do Not Track signal. Because there is no common industry or legal standard for interpreting it, we do not currently respond to DNT signals. See Section 9 for California-specific disclosures regarding sale, sharing, and Global Privacy Control.

7. Retention and security

We retain information only for as long as reasonably necessary for the purposes described in this Policy. As a general guide, account information is retained while an account is active and for one year after closure; customs documents, audits, filing packages, refund-tracking records, and portal-access authorizations are retained for one year after the related claim is completed or the service ends; correspondence is retained for one year after the matter closes; and website, technical, security, and analytics records are retained for up to one year.

Payment, tax, accounting, fraud-prevention, dispute, and compliance records may be kept longer where required or permitted by law. Records subject to a dispute, investigation, or legal hold may be retained until the matter is resolved. Information in backups is removed through our ordinary backup-expiration process.

We use reasonable administrative, technical, and organizational measures intended to protect information. No website, transmission, or storage system can be guaranteed completely secure, and users should avoid sending information they are not authorized to share. To report a security concern, contact legal@tariffsreclaim.com.

8. Your choices and rights

Depending on where you live and applicable law, you may have the right to:

• Know what personal information we hold about you and how it is used and shared.
• Access or request a copy of your personal information.
• Correct inaccurate personal information.
• Delete your personal information.
• Object to, or request that we limit or restrict, certain processing.
• Receive your information in a portable, machine-readable format.
• Opt out of the sale or sharing of your personal information, where applicable.
• Not be discriminated against for exercising any of these rights.

9. Exercising your rights

To exercise a privacy right, contact legal@tariffsreclaim.com. For California residents, we will acknowledge requests within 10 business days and aim to respond within 45 calendar days, which may be extended by an additional 45 days where permitted with notice to you. For requests under the GDPR or UK GDPR, we aim to respond within 30 days, which may be extended by 60 days for complex requests.

We may need to verify your identity before fulfilling a request and may deny a request as permitted by law, including where a request is unreasonable, repetitive, would require disproportionate effort, or cannot be verified. If an authorized agent submits a request, we may require evidence of valid written authority. We will not discriminate against you for exercising your rights.

If you are located in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority.

You may unsubscribe from promotional communications where offered. Service, security, login, payment, and action-required messages may still be sent when necessary to operate your account.

10. California privacy disclosures

In the preceding 12 months, we have collected the categories of personal information listed below for the purposes described in Section 3. We may disclose each category to the service providers described in Section 4 as reasonably necessary to operate the Services.

• Identifiers, such as name, email address, phone number, account identifiers, and IP address.
• Commercial information, such as payment status and service records.
• Internet or network activity, such as browser, device, page-view, and usage data.
• Approximate geolocation derived from an IP address.
• Professional or employment-related information, such as company and importer information.

11. Sale, sharing, and California opt-out rights

Tariffs Reclaim does not currently sell personal information or share it for cross-context behavioral advertising as those terms are defined under California law. Because we do not currently sell or share personal information, we do not currently offer a sale-or-sharing opt-out mechanism or process Global Privacy Control signals as sale-or-sharing requests.

If we introduce remarketing or other activity that constitutes sale or sharing under California law, we will update this Policy before that activity begins, provide a Do Not Sell or Share My Personal Information mechanism, and honor recognized Global Privacy Control signals as required by law.

We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

12. Children and account eligibility

The Services are directed to individuals age 18 and over and are intended for authorized business representatives; they are not directed to children. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected personal information from someone under 18, we will take steps to delete it and deactivate the associated account. Do not create an account or submit information if you are not authorized to act for the relevant business.

13. Links to third-party websites

The Services may contain links to third-party websites. Your use of a linked website is governed by that website's own privacy policy, not this one. We encourage you to review the privacy policies of any third-party websites you visit.

14. Changes and contact

We may update this Policy from time to time. The updated version will be posted on this page with a revised effective date. If a change is material, we will attempt to provide additional notice, such as by email or a notice on our homepage, before the change takes effect.

Questions and privacy requests may be sent to legal@tariffsreclaim.com.