Privacy Policy

Privacy Policy

Effective Date: April 20, 2026 Last Updated: April 20, 2026

Cloudy Zebra LLC, doing business as “CloudyZebra SEO” (collectively, “CloudyZebra,” “we,” “us,” or “our”), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at cloudyzebra.com (the “Site”), engage our services, or interact with any digital property operated by CloudyZebra.

Please read this policy carefully. By accessing or using the Site or our services, you consent to the practices described herein. If you do not agree with this policy, please do not use the Site or our services.

1. Who We Are

Cloudy Zebra LLC (d/b/a “CloudyZebra SEO”) is a New York limited liability company operating as a digital marketing and search engine optimization agency. Our services include, but are not limited to: search engine optimization, paid search advertising, paid social advertising (including Meta/Facebook/Instagram Ads), content creation, website development, conversion rate optimization, Google Business Profile management, analytics, reporting, and related digital marketing consulting services.

Business Contact:

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide, including:

  • Contact information: name, email address, phone number, business name, job title, mailing address
  • Business information: company size, industry, services requested, business goals, budget, website URL, social media handles
  • Payment information: billing name, billing address; payment card details are processed by our third-party payment processor (Stripe, Square, or similar) and we do not store full card numbers on our systems
  • Account credentials: if you create an account, we store username, hashed password, and account preferences
  • Communications: emails, chat messages, form submissions, customer support inquiries, and any content you send to us
  • Client assets: during client engagements, you may share logos, photos, videos, marketing materials, brand guides, and similar creative assets

2.2 Information Collected Automatically

When you visit the Site, we automatically collect:

  • Device and browser information: IP address, device type, browser type and version, operating system, language preferences, screen resolution, referring URLs
  • Usage information: pages visited, time spent on pages, click patterns, scroll depth, form interactions, search queries on our site
  • Location information: approximate geographic location derived from IP address
  • Cookies and similar technologies: see Section 5 below

2.3 Information From Third-Party Sources

We may receive information about you from third parties, including:

  • Meta Platforms, Inc.: If you click on our Meta ads or interact with our Meta business pages, Meta may share aggregated or pseudonymous data with us through Meta Pixel, Meta Conversions API, and Meta Ads Manager.
  • Google: If you click on our Google Ads or interact with our Google Business Profile, Google may share analytics and advertising data through Google Analytics, Google Ads, and Google Search Console.
  • Analytics providers: Microsoft Clarity, Google Analytics 4, and similar platforms provide us with website behavior data.
  • Publicly available sources: professional networking sites, business directories, and public records.
  • Referrals and partners: information shared by clients, partners, or referral sources.

2.4 Information Collected on Behalf of Clients

When we provide marketing services to clients, we may access and process data about the client’s end-users on the client’s behalf. In these cases, we act as a service provider or data processor under applicable law, and the client acts as the business or data controller. The client’s own privacy policy governs the collection and use of end-user data; our role is limited to processing that data as instructed by the client in connection with providing services.

3. How We Use Information

We use collected information for the following purposes:

3.1 Service Provision

  • Deliver the services you request
  • Manage your account and facilitate transactions
  • Create, execute, and optimize marketing campaigns on client accounts
  • Communicate about services, invoices, updates, and support
  • Produce creative assets including ad copy, images, videos, and written content

3.2 Site Operation and Improvement

  • Operate, maintain, and secure the Site
  • Analyze Site performance and user behavior
  • Develop new features, services, and content
  • Debug and troubleshoot technical issues

3.3 Marketing and Business Development

  • Send newsletters, updates, and marketing communications (with opt-out mechanisms)
  • Respond to inquiries and proposal requests
  • Conduct market research and gather business intelligence
  • Showcase case studies and testimonials (with client consent)

3.4 Legal and Compliance

  • Comply with applicable laws, regulations, and legal processes
  • Enforce our Terms of Service and other agreements
  • Protect our rights, property, and safety and those of our clients, users, and the public
  • Respond to subpoenas, court orders, and government requests

3.5 Analytics and Optimization

  • Measure the effectiveness of the Site and our services
  • Conduct A/B testing and conversion rate optimization
  • Aggregate data for industry benchmarking and reporting
  • Improve AI and automation tools we develop

4. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, United Kingdom, or other jurisdictions requiring a lawful basis, we rely on the following bases:

  • Consent: when you have given explicit, informed consent (e.g., marketing emails, cookie opt-in)
  • Contract: to perform a contract with you or take pre-contractual steps at your request
  • Legitimate interests: for Site security, fraud prevention, analytics, and business development, balanced against your rights and freedoms
  • Legal obligation: to comply with applicable laws and regulations

You may withdraw consent at any time by contacting cloudyzebramarketing@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Cookies and Tracking Technologies

5.1 Types of Cookies and Technologies We Use

  • Strictly necessary cookies: required for Site operation (session management, security, load balancing). These cannot be disabled.
  • Analytics cookies: measure Site usage and performance (Google Analytics 4, Microsoft Clarity, internal analytics)
  • Advertising cookies: deliver relevant ads and measure ad campaign effectiveness (Meta Pixel, Google Ads, LinkedIn Insight Tag)
  • Functional cookies: remember preferences (language, region, display settings)
  • Heatmap and session recording tools: Microsoft Clarity records mouse movements, clicks, and scroll behavior for user experience analysis; form input values are masked by default

5.2 Specific Technologies We Use

  • Meta Pixel and Meta Conversions API — track conversions, build custom audiences, measure ad effectiveness, and enable deduplication between browser-side and server-side events. Data is shared with Meta Platforms, Inc. per Meta’s Data Use Policy.
  • Google Analytics 4 — measure Site usage with IP anonymization enabled where applicable.
  • Google Ads Conversion Tracking — measure Google Ads campaign performance.
  • Microsoft Clarity — captures heatmaps and session recordings for UX analysis. Microsoft processes data on our behalf. Form inputs, password fields, and other sensitive elements are masked by default.
  • LinkedIn Insight Tag (where applicable) — measures LinkedIn Ads performance and supports account-based marketing.
  • TikTok Pixel (where applicable) — measures TikTok Ads performance.
  • CallRail / call tracking dynamic number insertion (DNI) — attributes phone calls to specific marketing sources.
  • Intercom / chat widgets (where applicable) — customer support messaging.

5.3 Managing Cookies

You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may limit Site functionality. For ad-related cookies, you can opt out via:

Where required by law, we display a consent banner permitting granular cookie preferences.

5.4 Do Not Track Signals

We honor Do Not Track (DNT) signals where technically feasible but recognize that DNT is not uniformly adopted. See your browser’s privacy documentation for information on enabling DNT.

6. Information Sharing and Disclosure

We do not sell personal information. We share information in the following limited circumstances:

6.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including hosting (AWS, Google Cloud, Microsoft Azure), email delivery (SendGrid, Mailchimp, SES), analytics (Google, Microsoft), payment processing (Stripe, Square), CRM (HubSpot, Salesforce, GoHighLevel), and similar operational services. These vendors are contractually bound to protect information and use it only to provide services to us.

6.2 Advertising Partners

We share information with advertising platforms including Meta, Google, Microsoft, LinkedIn, and TikTok for the purposes of targeting, measurement, and campaign optimization on behalf of CloudyZebra or our clients. Data shared is typically hashed for matching or aggregated.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or similar business transaction, information may be transferred to the acquiring entity as a business asset.

6.4 Legal Requirements

We may disclose information when required by law, subpoena, court order, or governmental request; to enforce our agreements; to investigate fraud, security incidents, or violations of law; or to protect the rights, property, or safety of CloudyZebra, our users, or others.

6.5 With Your Consent

We may share information in other ways with your explicit consent.

6.6 Aggregated and De-Identified Information

We may share aggregated, anonymized, or de-identified information (which cannot reasonably identify you) for industry research, reporting, benchmarking, and marketing purposes.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including:

  • Active clients: for the duration of the engagement plus seven (7) years for financial/tax records
  • Prospects and leads: up to two (2) years from last interaction, then deleted or anonymized
  • Website visitor analytics: up to twenty-six (26) months (Google Analytics default)
  • Marketing email lists: until unsubscribe or two (2) years of inactivity
  • Legal or regulatory requirements: longer periods where required by law

You may request earlier deletion (subject to legal/contractual exceptions) per Section 9.

8. Security

We implement technical, administrative, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. These include encryption in transit (TLS 1.2+), encryption at rest for sensitive data, access controls, multi-factor authentication, regular security assessments, and vendor security due diligence.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to industry-standard practices and to notifying affected individuals and regulators in the event of a material data breach as required by law.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

9.1 Access and Portability

You may request access to the personal information we hold about you and receive a copy in a portable, machine-readable format.

9.2 Correction

You may request that inaccurate or incomplete information be corrected.

9.3 Deletion (“Right to be Forgotten”)

You may request that we delete your personal information, subject to legal, contractual, or legitimate business exceptions.

9.4 Restriction and Objection

You may request that we restrict processing or object to processing based on legitimate interests, direct marketing, or other lawful bases.

9.5 Opt-Out of Sale and Sharing (CCPA/CPRA)

California residents may opt out of the “sale” or “sharing” of personal information as defined under the California Consumer Privacy Act (CCPA) as amended by the CPRA. CloudyZebra does not sell personal information. However, the use of advertising cookies and pixels may constitute “sharing” under CPRA. You may opt out by:

  • Emailing cloudyzebramarketing@gmail.com with “CCPA Opt-Out” in the subject line
  • Using the “Do Not Sell or Share My Personal Information” link in our Site footer
  • Enabling the Global Privacy Control (GPC) browser signal, which we honor

9.6 Non-Discrimination

We will not discriminate against you for exercising your privacy rights. This means we will not deny services, charge different prices, or provide different quality of service because you exercised a right.

9.7 Authorized Agent

You may designate an authorized agent to submit requests on your behalf. We may require verification of both the agent’s authority and your identity.

9.8 Appeals

If we deny your request, you may appeal by emailing cloudyzebramarketing@gmail.com with “Privacy Appeal” in the subject line. We will respond within 45 days.

9.9 How to Submit Requests

Submit requests via:

We may need to verify your identity before processing requests. We respond within 45 days (with one 45-day extension where permitted by law).

10. State-Specific Privacy Rights

10.1 California (CCPA/CPRA)

California residents have rights described in Section 9 plus the following disclosures:

Categories of personal information collected in the last 12 months:

  • Identifiers (name, email, IP address, account IDs)
  • Customer records (billing info, service history)
  • Commercial information (services purchased, interaction history)
  • Internet/network activity (browsing, interactions, device data)
  • Geolocation (approximate, from IP)
  • Professional/employment information
  • Inferences drawn from the above

Sources: directly from you; automatically from Site; third-party analytics/advertising platforms; publicly available sources; referral sources.

Business purposes: service delivery, analytics, security, fraud prevention, marketing, legal compliance.

Categories disclosed to third parties: identifiers, internet activity, commercial information, inferences disclosed to service providers and advertising partners as described in Section 6.

No sale of personal information for monetary consideration. Sharing for cross-context behavioral advertising may occur via advertising cookies; opt-out per Section 9.5.

Sensitive personal information: we do not use sensitive personal information (e.g., SSN, precise geolocation, health data) for purposes beyond what is permitted without additional consent.

10.2 Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and Other State Laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, and similar jurisdictions have rights comparable to those in Section 9. Submit requests per Section 9.9. We honor these rights within the timeframes required by applicable state law.

10.3 Nevada Residents

Nevada residents may opt out of the sale of personal information as defined under Nevada Revised Statutes § 603A. We do not sell personal information, but Nevada residents may submit confirmation requests per Section 9.9.

11. International Data Transfers

CloudyZebra operates primarily in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from your jurisdiction.

For transfers from the European Economic Area, United Kingdom, or Switzerland, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreement where applicable
  • Your explicit consent where required

Contact us for details on specific transfer mechanisms.

12. Children’s Privacy

The Site and our services are not directed at children under the age of 13 (or age 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete it. If you believe your child has provided information to us, please contact cloudyzebramarketing@gmail.com.

13. Third-Party Links and Services

The Site may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party service you visit:

14. Marketing Communications

You may opt out of marketing emails at any time by:

  • Clicking the “unsubscribe” link in any marketing email
  • Emailing cloudyzebramarketing@gmail.com with “Unsubscribe” in the subject
  • Replying “STOP” to any marketing SMS message

Even if you opt out of marketing, we may still send transactional communications (invoices, service updates, legal notices).

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this policy
  • Post the revised policy at cloudyzebra.com/privacy-policy
  • For material changes, provide notice by email (if we have your email) or through a banner on the Site

Your continued use of the Site or our services after changes take effect constitutes acceptance of the revised policy.

16. Data Processor / Service Provider Role

When providing services to clients, CloudyZebra typically acts as a data processor (GDPR) or service provider (CCPA) on behalf of the client. In those roles:

  • We process personal information only per documented client instructions
  • We maintain confidentiality obligations with all personnel accessing client data
  • We implement appropriate technical and organizational measures
  • We engage sub-processors only with client consent (general or specific)
  • We provide reasonable assistance for client data subject rights responses
  • We return or delete personal information upon termination of services
  • We provide information necessary for client compliance audits

Clients may request a Data Processing Addendum (DPA) covering these obligations; contact cloudyzebramarketing@gmail.com.

17. Specific Notices for Meta Platforms

CloudyZebra operates as an advertising partner for clients who use Meta advertising platforms (Facebook Ads, Instagram Ads, Messenger Ads, WhatsApp, Audience Network). In connection with these services:

  • We implement Meta Pixel and Meta Conversions API on client websites with client authorization
  • We configure Custom Audiences and Lookalike Audiences on Meta’s platform using hashed customer data provided by clients
  • We receive aggregated performance data from Meta through the Meta Marketing API
  • We comply with Meta’s Business Tools Terms, Platform Terms, Developer Policies, and Advertising Standards
  • We do not share Meta-provided data outside of the specific advertising purpose and services for which it was disclosed
  • We retain Meta-provided data only as long as necessary for service provision

For Meta-specific privacy inquiries, contact cloudyzebramarketing@gmail.com.

18. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or for any privacy-related concerns:

Cloudy Zebra LLC (d/b/a CloudyZebra SEO) Email: cloudyzebramarketing@gmail.com Mail: 31 Burning Bush Blvd, Ballston Lake, NY 12019 Website: https://cloudyzebra.com

We aim to respond to all inquiries within 30 days (or 45 days for formal rights requests, with one 45-day extension where permitted by law).

Acknowledgment: By using the Site or our services, you acknowledge that you have read, understood, and agree to this Privacy Policy.