Zeltru
Log inSign up

Privacy Policy

Draft revision for local review: September 8, 2026. Not released.

1. Introduction

This Privacy Policy explains how Funk Corporate LLC ("we," "us," or "our"), the operator of Zeltru (the "Service"), collects, uses, and protects information when you use the Service. Funk Corporate LLC is the data controller responsible for your personal information.

The Service includes the Zeltru website at zeltru.com and the Zeltru mobile app. Where a practice differs between the two, this Policy says so.

By using Zeltru, you agree to the collection and use of information as described here.

2. Information We Collect

2.1 Information you provide

  • Account information. Your email address and a password. Passwords are stored only in hashed form by our authentication provider; we never see your plaintext password. You must confirm your email address before you can submit a report. We record that you confirmed you are 18 or older and accepted the Terms.
  • Optional profile information. You may add a display name, a first name, a U.S. state, and an age range (one of: 18–24, 25–34, 35–44, 45–54, 55+). These are optional, private to your account, and never shown to other users.
  • Reports you submit. Structured, fixed-answer selections about your own hiring experiences — outcome, interview stage, timing, recruiter-behavior selections, interview-rigor selection, job family, seniority, applied month, response time, and a set of predefined "what happened" patterns — together with a job title and job location you associate with the report. A report has no free-text field, so reports do not capture open-ended personal narrative.
  • Saved roles (watchlist). If you save a job posting, we store the posting's identifier and a snapshot of its title, company, location, and link, plus any date you tell us you applied. This is private to your account.
  • Company suggestions and requests. If you suggest a company, we store the company details you enter and your account identifier. If you paste a job link for an employer we do not yet track, we store that link and its domain along with your account identifier.
  • Email preferences. You can independently choose edition notifications and general updates for your verified account email. Neither is selected by default. We store your choices, the consent wording version and change receipts. Older email-list records remain private; an ambiguous historical digest label does not count as consent for either category, and edition-only consent does not authorize general updates.

2.2 Information collected automatically

  • Infrastructure logs. Our hosting and database providers log basic technical data — such as IP address, browser type, and access times — for security and operational purposes.
  • Application logs. Review submission and account actions use fixed operation names and allowlisted error codes. They do not intentionally log submitted answers, applicant-entered titles or locations, account identifiers, email addresses or session tokens. Infrastructure providers also maintain operational logs on their own schedules. This does not erase older logs.
  • Product analytics on the website. The Zeltru website uses Vercel Analytics and Vercel Speed Insights to measure page views and performance. These collect aggregate usage and performance data about the website.
  • Advertising measurement on the website. The Zeltru website includes the Meta (Facebook) advertising pixel. It tells Meta that a visit or a defined action (such as signing up) occurred, so we can measure and target the ads we buy on Meta's platforms. This involves sharing information — including your IP address, browser information, and the pages you visited on Zeltru — with Meta, and Meta may use cookies or similar technologies for this purpose. See Section 5 and Section 8.
  • Cookies. We set a session cookie to keep you signed in. The Meta pixel and our analytics providers may set or read their own cookies and similar identifiers as described above.

The Zeltru mobile app does not include the Meta pixel or third-party advertising trackers.

2.3 Information we do not collect

We do not collect your date of birth (only an age range, if you provide one), your device's precise or GPS location, or any government identification. The "location" in a report is a job location you select or type (such as a city), not your device location — the app requests no location permission.

3. How We Use Your Information

We use your information to:

  • create and manage your account and verify your email address;
  • let you submit and manage your reports and your saved roles;
  • compute and display aggregated statistics derived from reports;
  • enforce our rules and prevent abuse — including one report per job posting per account, a limit of three reports per company per account, a limit of five reports per account in any 24-hour period, and a check that rejects disposable email providers at sign-up for reports;
  • review flags and disputes;
  • manage the email categories you explicitly choose, and, when sending is enabled, send announcements only for those choices; choosing both categories must not produce duplicate copies of the same announcement;
  • measure the effectiveness of advertising we buy on third-party platforms;
  • operate, secure, and improve the Service, and communicate with you about it;
  • comply with legal obligations.

4. How Your Reports Relate to Your Account

Publicly, Zeltru shows only aggregated statistics. No individual report is displayed with your name, email, or profile, and other users cannot see your individual reports or determine which reports you submitted.

Internally, your reports are associated with your account. The private ownership link supports your own access, moderation and abuse prevention. Only the verified operator can inspect attribution across accounts. Employers and other ordinary users cannot retrieve it. Applicant-entered job titles, locations and original text are private. Public role text requires a separately approved safe version; an unknown or missing creator is not approval. Employer-sourced public active listings remain available separately.

We disclose reporter identity only where we are legally required to do so — for example, in response to a valid subpoena or court order. We do not disclose it at our own discretion, and we do not disclose it to the companies that reports concern.

Your optional profile information and saved roles are private to your account and are not shown to other users.

5. How We Share Information

We do not sell your personal information for money.

We do share limited information with Meta for advertising measurement and targeting, as described in Section 2.2. Under some U.S. state privacy laws, that kind of sharing may be treated as a "sale" or as "sharing for cross-context behavioral advertising" even though no money changes hands. You can opt out — see Section 8.

Beyond that, we share information only in these circumstances:

  • Service providers (subprocessors). We use the following third parties to run the Service:

    • Supabase — database hosting and user authentication (account email, hashed password, profile, reports, saved roles, subscriber emails).
    • Vercel — application hosting, plus Vercel Analytics and Speed Insights (request logs, aggregate usage and performance data).
    • Meta Platforms, Inc. — advertising measurement and targeting on the website only, as described above.

    Each processes information on our behalf or, in Meta's case, as described in Section 2.2, under its own terms.

  • Legal requirements. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of Funk Corporate LLC, our users, or the public.

  • Business transfer. If Funk Corporate LLC is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this Policy.

6. Data Security

We take reasonable measures to protect your information, including database access controls that restrict each account to its own data, hashed storage of credentials, use of privileged server-side keys only in our backend, and administrative safeguards. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. To the maximum extent permitted by law, and except where such a limitation is prohibited by law, Funk Corporate LLC is not liable for exposure of information resulting from a data breach, unauthorized access, third-party attack, or technical error.

7. Data Retention and Deletion

We retain your account information, reports and saved roles while your account is active. You can delete an individual review from Your reviews; the verified operator can also delete it. This removes the review and its owner-scoped saved review text. It does not delete your unrelated saved applications or overwrite their statuses.

To prevent deletion and re-submission from resetting the existing submission limits, we retain a private minimal record of the review identifier, author identifier, company, posting identifier and original submission time until the account is deleted. This record does not retain the deleted answers or notes. Current report statistics can change after deletion; frozen historical aggregate editions are preserved.

In the Zeltru mobile app, you can delete your account and its data at any time (Settings → Delete account). On the website, self-serve account deletion is not yet available; email us at the address in Section 11 and we will delete your account and confirm when it is done.

When your account is deleted, its profile, reviews, saved roles, company requests, company flags, submission-limit records and new email preferences are deleted through their account relationships. Shared job-posting records may remain because other saved reviews reference them. Their direct creator link is removed; identifying original text stays private and is not represented as anonymous merely because that link is absent. Existing private historical evidence is preserved; this change does not add a new automatic purge or an indefinite retention policy for that evidence. Deletion is irreversible. Approved historical aggregates that do not disclose individual reviews may persist.

Manage email choices separately. Use Email preferences to choose either category, both or neither. A valid unsubscribe link can disable one category or everything without signing in; it cannot subscribe or reactivate an address. New account-bound preferences and consent receipts are removed when the account is deleted. Legacy email-list records predate these preferences and remain separate, private and ineligible without evidence of the required consent; existing unsubscribe links continue to disable delivery. No historical label silently opts you into general updates.

Server-side application logs and infrastructure logs are retained by our hosting provider on its standard retention schedule and are not deleted on request except where law requires it.

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to opt out of the sharing of your information for advertising, and to withdraw consent where processing is based on consent. We do not discriminate against you for exercising these rights.

  • To access, correct, or delete: use your account and Your reviews, delete your account in the mobile app, or email us at the address in Section 11.
  • To opt out of advertising-related sharing: email us at the address in Section 11 and we will exclude your information from advertising measurement. You can also use your browser's tracking-protection settings, and you can adjust ad settings directly with Meta.
  • California residents may exercise the rights above, including the right to opt out of "sharing" for cross-context behavioral advertising, and may designate an authorized agent to do so on their behalf.

We will respond to requests within the time required by applicable law, and in any case within 45 days.

9. Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it and terminate the account.

10. International Users

The Service is operated from the United States. If you access it from elsewhere, you understand your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction. We do not currently offer the Service on terms designed for the EU or UK.

11. Changes and Contact

We may update this Policy from time to time; we will update the "Last updated" date above, and material changes will be reflected on this page. For questions, or to exercise any right described in Section 8:

Funk Corporate LLC Email: support@zeltru.com

This Privacy Policy is part of and incorporated into the Zeltru Terms of Service.