Privacy Policy

Last updated: Apr 10, 2026

Thanks for entrusting Potix Corporation, who creates and maintains ZK, with your projects, and your personal information. Holding onto your private information is a serious responsibility, and we want you to know how we're handling it.

The short version

We collect your information only with your consent; we only collect the minimum amount of personal information that is necessary to fulfill the purpose of your interaction with us; we don't sell it to third parties; and we only use it as this Privacy Policy describes. Of course, the short version doesn't tell you everything, so please read on for more details!

What information ZK collects and why

Information from website browsers and products

If you're just browsing the website, we collect the same basic information that most websites collect. We use common internet technologies, such as cookies and web server logs. This is stuff we collect from everybody, whether they have an account or not.

The information we collect about all visitors to our website includes the visitor’s browser type, language preference, referring site, additional websites requested, and the date and time of each visitor request. We also collect potentially personally-identifying information like Internet Protocol (IP) addresses.

Why do we collect this?

We collect this information to better understand how visitors use our website, tools, and services, and to monitor and protect their security. Additionally, we may use de-identified or pseudonymized information from your inquiries and communications with us to improve our internal knowledge base, train our team, and enhance our service delivery and product performance.

Information from users with accounts

If you create an account with email, we will require some basic information at the time of account creation. You will create your own user name and password, and we will ask you for a valid email account, your name, country, industry and company name.

You can give us more information if you want to, and this may include “User Personal Information."

"User Personal Information" is any information about one of our users which could, alone or together with other information, personally identify him or her. Information such as a user name and password, an email address, a real name, and a photograph are examples of “User Personal Information.”

User Personal Information does not include aggregated, non-personally identifying information. We may use aggregated, non-personally identifying information to operate, improve, and optimize our website, product and service.

Why do we collect this?

• We need your User Personal Information to create your account, and to provide the services you request such as giving you access to the files according to your account permission or answering your technical questions.
• We use your User Personal Information, specifically your user name, to identify you on ZK.
• We use it to fill out your profile and share that profile with other users if you ask us to.
• We use it to protect the security of our website, such as by detecting abnormal activitie from the same origin.
• We will use your email address to communicate with you, if you’ve subscribed to receive related notifications about ZK, and when necessary.
• We limit our use of your User Personal Information to the purposes listed in this Privacy Policy.

What information ZK does not collect

We do not intentionally collect sensitive personal information, such as social security numbers, genetic data, health information, or religious information. However if you elect to publicly post personally identifying or sensitive information in ZK website such as in forum question or answer posts, it is not subject to the Privacy Policy listed here, and you are responsible for it. Additionally, voluntarily publicizing such information means that you lose any privacy rights you might normally have with regards to that information.

If you're a child under the age of 13, you may not have an account on ZK. ZK does not knowingly collect information from or direct any of our content specifically to children under 13. If we learn or have reason to suspect that you are a user who is under the age of 13, we will unfortunately have to close your account.

Part of our website (for example, ZK Documentation) may link to third-party services such as GitHub or Atlassian to allow users to report issues. These services operate under their own privacy policies, and we do not control or store any personal data submitted through those platforms.

How we share the information we collect

We do not share, sell, rent, or trade User Personal Information with third parties for their commercial purposes.

We do share certain aggregated, non-personally identifying information with others about how our users, collectively, use ZK. However, we do not sell this information to advertisers or marketers.

We may occasionally embed content from third party sites, such as YouTube, and that content may include ads. While we try to minimize the amount of ads our embedded content contains, we can't always control what third parties show.

We may share User Personal Information with your permission, so we can perform services you have requested.

We may share User Personal Information with a limited number of third-party vendors who process it on our behalf to provide or improve our service, and who have agreed to privacy restrictions similar to our own Privacy Policy. Our vendors perform services such as customer support ticketing, network data transmission, and other similar services. Here in ZK we care who to work with and partner with only the service providers who we believe maintain an acceptable standard of data security compliance such as Salesforce, Freshdesk, AWS, and Google Workspace.

Processors

Vendor	AWS	Salesforce	Freshdesk	Google Workspace	Google Analytics
Purpose	Used to host ZK website, documents, forum so that we can provide service to you	Used for logging business contact information for performing daily service (such as billing) to you	Used as the support platform for customers to interact with ZK developers on technical issues	Used for daily business operation, including email communication and survey	Used to collect statistical information about website usage patterns
Data Center(Transfer)	USA(DPF Certified)	UK(Adequacy Decision)	USA(DPF Certified)	USA, Global(DPF Certified + SCC)	USA, Global(DPF Certified + SCC)

We may share User Personal Information if we are involved in a merger, sale, or acquisition. If any such change of ownership happens, we will ensure that it is under terms that preserve the confidentiality of User Personal Information, and we will notify you on our website or by email before any transfer of your User Personal Information. The organization receiving any User Personal Information will have to honor any promises we have made in our Privacy Policy or in our Terms of Service.

Our use of cookies and tracking

Cookies

ZK uses cookies to make interactions with our service easy and meaningful. We use cookies (and similar technologies, such as HTML5 localStorage) to keep you logged in, remember your preferences, provide access to requested resources, and gather insights for the future development of ZK.

A cookie is a small piece of text that our web server stores on your computer or mobile device, which your browser sends to us when you return to our site. Cookies do not necessarily identify you if you are merely visiting ZK; however, a cookie may store a unique identifier for each logged-in user.

Some cookies are essential to the operation of the website (e.g., maintaining login sessions or form submissions) and cannot be disabled. Other cookies are optional and help us understand how our website is used or improve your experience.

To comply with regional data protection laws, we adjust our cookie consent experience accordingly. For example, users in the European Economic Area (EEA) are shown a more granular cookie banner allowing for consent and control over non-essential cookies, such as analytics cookies. If a user declines optional cookies, those cookies will not be set.

Google Analytics

We use Google Analytics 4 (GA4) as a third-party analytics service to understand how visitors use our website, tools, and services, and to help us improve content and performance. GA4 collects non-personally identifying information, such as your browser type, operating system, referring and exit pages, approximate location (city/country), and general usage patterns.

GA4 may collect certain aggregated data through anonymous, cookie-free measurement methods (such as when cookies are disabled or consent is not given). These anonymous signals do not identify you and do not involve storing personal data.

ZK does not link analytics data to any personal information such as usernames or account details. We also do not permit Google or any third party to use analytics data to track individual users. You can learn more about Google’s data practices in their Privacy Policy and about controlling your data in Google Analytics Help.

How ZK secures your information

ZK takes all measures reasonably necessary to protect User Personal Information from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure the appropriate use of User Personal Information. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.

However, please note that no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. We continuously monitor and improve our security practices to better safeguard your data.

ZK's global privacy practices

Information that we collect will be stored and processed in the United States, UK, EU and Taiwan in accordance with this Privacy Policy. However, we understand that we have users from different countries and regions with different privacy expectations, and we try to meet those needs. We provide the same standard of privacy protection to all our users around the world, regardless of their country of origin or location, and we are proud of the levels of notice, choice, accountability, security, data integrity, access, and recourse we provide. We work hard to comply with the applicable data privacy laws wherever we do business.

In particular:

• ZK provides clear methods of unambiguous, informed consent at the time of data collection, when we do collect your personal data.
• We collect only the minimum amount of personal data necessary, unless you choose to provide more. We encourage you to only give us the amount of data you are comfortable sharing.
• We offer you simple methods of accessing, correcting, or deleting the data we have collected.
• We provide our users notice, choice, accountability, security, and access, and we limit the purpose for processing.

Compliance with Privacy Regulations

We are committed to protecting your privacy and handling personal data responsibly. Our practices are designed to be compatible with the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection laws. If you are located in the European Economic Area (EEA), you have certain rights and choices regarding your personal data, and we respect and support those rights.

EU/EEA & UK GDPR Representatives (Article 27)

If you are located in the EU or UK and have questions or concerns regarding your personal data, you may contact our appointed GDPR representative:

EU Representative:
Euverify Ltd (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork
T23 AT2P
Ireland
Email: gdpr@euverify.com

UK Representative:
Euverify Ltd (UK)
3rd Floor
86-90 Paul Street
London
EC2A 4NE
United Kingdom
Email: gdpr@euverify.com

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal here.

This link allows you to verify our appointed representative and submit GDPR requests directly. Requests submitted through this portal are logged and tracked to ensure timely response and compliance.

Resolving Complaints

If you have concerns about the way ZK is handling your User Personal Information, please let us know immediately. We want to help. You may email us directly at info@zkoss.org with the subject line "Privacy Shield Concerns."

How we respond to compelled disclosure

ZK may disclose personally-identifying information or other information we collect about you to law enforcement in response to a valid subpoena, court order, warrant, or similar government order, or when we believe in good faith that disclosure is reasonably necessary to protect our property or rights, or those of third parties or the public at large. ZK will challenge the request if there are reasonable grounds to consider that the request is unlawful. In complying with court orders and similar legal processes, ZK strives for transparency. When permitted, we will make a reasonable effort to notify users of any disclosure of their information, unless we are prohibited by law or court order from doing so, or in rare, exigent circumstances. ZK shall not disclose the Personal Data until required to do so under the applicable laws and we will provide the minimum amount of information required.

How you can access and control the information we collect

If you're already a ZK user, you may access, update, or alter your basic user profile information by going to forum.zkoss.org and clicking on your user name. Or contact us at info@zkoss.org.

Data Retention and Deletion

ZK will retain User Personal Information for as long as your account is active or as needed to provide you services.

We may retain certain User Personal Information indefinitely, unless you delete it or request its deletion. For example, we don’t automatically delete inactive user accounts, so unless you choose to delete your account, we will retain your account information indefinitely.

If you would like to cancel your account or delete your User Personal Information, please contact us at info@zkoss.org. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, but barring legal requirements, we will delete your full profile (within reason) within 30 days.

How we communicate with you

We will use your email address to communicate with you, if you’ve subscribed to receive related notifications about ZK, and when necessary. You have a lot of control over how your email address is used and shared on and through ZK. You may manage your communication preferences in your profile in ZK forum.

Depending on your email settings, ZK may occasionally send notification emails about new features, requests for feedback, important policy changes, or offer customer support. We also send marketing emails, but only with your consent. You can unsubscribe any time.

If you are appointed as the main contact window of your organization, you will be notified of important changes, events, or security updates relevant to your role.

Changes to Our Privacy Policy

Although most changes are likely to be minor, ZK may change our Privacy Policy from time to time. We will provide notification to Users of material changes to this Privacy Policy through our Website or sending email to the email address specified in your account. For changes to this Privacy Policy that do not affect your rights, we encourage visitors to check this page frequently.

Contacting ZK

Questions regarding ZK's Privacy Policy or information practices should be sent to info@zkoss.org.