Legal
Privacy Policy
How Zero Point collects, uses and protects personal information, including data accessed through Google APIs.
Last updated: 14 October 2026
This policy explains how Zero Point ("we", "us"), based in Johannesburg, South Africa, handles personal information when you use this website or our SEO reporting services. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA). Questions or requests:jj@zero-point.co.za.
1. Information we collect
- Contact details you give us - name, email address and message content when you contact us.
- Site preferences - optional settings such as theme or motion preferences, stored in a session cookie.
- Client account data via Google - if you, as a client, connect your Google account to our SEO reporting tool, we access Google Search Console and Google Analytics data as described in section 3.
This website does not use advertising trackers or sell personal information.
2. How we use information
- To reply to enquiries and deliver the services you have engaged us for.
- To prepare SEO performance reports for clients who have connected their accounts.
- To meet legal, accounting and security obligations.
3. Google API Services user data
Our SEO reporting tool lets clients connect their Google account using Google OAuth. When you connect, we requestread-only access to:
- Google Search Console - search performance data (queries, pages, clicks, impressions, positions) for properties you authorise.
- Google Analytics - traffic and engagement reports for properties you authorise.
We cannot change your Google settings, properties or data through this access.
- Use: the data is used only to produce SEO reports and insights for you, the client who authorised access.
- Sharing: we do not sell this data, and do not share or transfer it to third parties, except as needed to provide the reporting service to you, to comply with law, or with your explicit consent.
- No advertising or model training: we do not use Google user data for advertising, and we do not use it to train generalised AI or machine-learning models.
- Human access: our staff view this data only to prepare your reports, provide support you ask for, for security purposes, or where the law requires it.
- Storage: OAuth access and refresh tokens and the report data are stored on servers controlled by Zero Point, with access restricted to authorised personnel.
- Revoking access: you can revoke access at any time in your Google Account underSecurity > Third-party apps & services, or by emailing us. After revocation or at the end of our engagement, we delete the stored tokens and, on request, the related report data.
Zero Point's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.
4. Retention
We keep personal information only as long as needed for the purpose it was collected for, or as required by law (for example, accounting records). Client report data is kept for the duration of the engagement unless you ask us to delete it sooner.
5. Security
We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, including encrypted connections and restricted access to our servers.
6. Cross-border processing
Some of our service providers (for example, hosting and Google itself) may process information outside South Africa. Where this happens, we rely on providers bound by data-protection standards comparable to POPIA.
7. Your rights
Under POPIA you may ask to access, correct or delete your personal information, object to its processing, or withdraw consent. Email jj@zero-point.co.za. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).
8. Changes
We may update this policy. The "last updated" date above shows when it last changed.