Last updated: November 29th, 2025

This Privacy Policy explains how Zero Overhead Labs LLC.("we", "our", or "us") collects, uses, and protects information when you visit our website, contact us, or engage us to provide software engineering, performance optimization, product development, or security services.

1. Information We Collect

We collect only the information reasonably necessary to operate our website, communicate with prospective and existing clients, and provide our services.

Information You Provide

When you contact us or engage our services, you may provide information such as:

• Name
• Email address
• Company or organization
• Project details
• Information included in messages or correspondence
• Information necessary to provide contracted services

Automatically Collected Information

When you visit our website, certain technical information may be collected automatically, such as:

• IP address
• Browser type and version
• Operating system
• Device type
• Pages visited
• Referring pages
• Approximate geographic location derived from IP address
• Date and time of visits

2. How We Use Information

We may use information to:

• Respond to inquiries and project requests
• Communicate with clients
• Provide contracted engineering and security services
• Understand and improve our website
• Maintain website and infrastructure security
• Detect and prevent abuse or unauthorized activity
• Maintain business and project records
• Comply with applicable legal obligations

3. Client and Project Information

During an engagement, we may receive access to information, systems, source code, infrastructure, credentials, logs, or other technical materials belonging to a client.

We use such information only as necessary to perform the agreed services and in accordance with the applicable agreement, statement of work, or other instructions provided by the client.

Security testing is performed only with appropriate authorization and within the agreed scope.

4. Security Assessments

When performing penetration tests, security reviews, or other security assessments, we may process technical information from systems that we are authorized to assess.

This may include system configurations, application data, logs, vulnerabilities, network information, and other technical evidence required to perform the assessment.

Findings are used to produce security reports and recommendations for the client. We do not intentionally access systems or information outside the authorized scope of an engagement.

5. Analytics

We may use analytics services to understand how visitors use our website and to improve its performance and usability.

Depending on the services enabled on the website, analytics information may include pages viewed, approximate location, device type, browser information, referral sources, and general interaction data.

Analytics providers may process information according to their own privacy policies.

6. Cookies

Our website may use cookies and similar technologies for essential functionality, preferences, analytics, and security.

Where required by applicable law, non-essential cookies will be used only with the appropriate consent.

Additional information about our use of cookies is available in our Cookie Policy.

7. Service Providers

We may use third-party service providers to help operate our business and website.

These providers may include:

• Website and cloud infrastructure providers
• Analytics providers
• Email and communication providers
• Project management and collaboration tools
• Payment providers, where applicable

We share information with service providers only where reasonably necessary for them to provide their services.

8. Information Sharing

We do not sell personal information.

We may disclose information when reasonably necessary to:

• Provide our services
• Work with service providers
• Protect our rights and property
• Prevent fraud, abuse, or security incidents
• Comply with legal obligations
• Respond to lawful requests from authorities

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business records, resolving disputes, and complying with legal obligations.

Client project information may be retained according to the applicable client agreement or statement of work.

10. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission, storage, or processing can guarantee absolute security.

11. International Transfers

Our service providers or business operations may involve processing information in countries other than the country in which you reside.

Where required by applicable law, appropriate safeguards will be used for international transfers of personal information.

12. Your Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of information
• Object to or restrict certain processing
• Request portability of certain information

To make a privacy-related request, contact us using the information below.

13. Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties.

We encourage you to review the privacy policies of third-party services before providing them with personal information.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date shown at the beginning of this Policy.

15. Contact

If you have questions about this Privacy Policy or how we handle personal information, contact: