Privacy

Who we are

ZONA is a live events and hospitality company based in Miami. We curate, produce, and orchestrate experiences (ZONA Agency), and we run a curated professional network for the people who make this industry work (ZONA Network), reachable at zona.so.

For anything in this policy, write to santiago@zona.so. A person reads it.

What we collect

Applications. When you apply, we collect what you give us: your name, email, the handle you want, your city, your Instagram if you share it, and anything you tell us about what you want to make happen. We also record basic anti-abuse signals (a hashed IP address and how the form was submitted).

Accounts and profiles. When accounts launch, we'll collect what you need to sign in (name, email, credentials handled by our authentication provider) and whatever you choose to put on your profile page — bio, photos, work, services, rates, availability, links.

Your workspace. Membership includes private working tools: projects, tasks, notes, a contact book, a calendar, and messages. We store what you put in them so the tools work.

Your contacts. Your private contact book can hold people who are not on ZONA — names, emails, phones, notes. You are responsible for having a legitimate reason to store someone's details; we keep them private to you, we never use them to contact anyone, and we never sell them.

Deals and transactions. When work is booked or brokered through ZONA, we keep records of the engagement — parties, dates, terms, amounts, and payment status. When online payments launch they will be handled by a payment processor; we don't store card numbers.

Correspondence and usage. Emails you send us, and standard technical data (device, browser, pages visited) via privacy-respecting analytics.

What's public and what's private

Your profile page is public by design. That is the product: a page at zona.so/@yourhandle meant to be found, shared, and indexed by search engines. You control what goes on it, and you can edit or take it down.

Everything else is private by default. Your workspace, projects, contact book, calendar, and messages are not public, are not shown to other members unless you share them, and are never part of any public page.

The member directory is only visible to approved members who are signed in. Being verified or featured is controlled by you appearing in the network — your public page exists either way.

How we use information

To run the service: read and review applications, create and host profile pages, operate the workspace and messaging, and keep the lights on.

To make connections happen — this is our business. When you ask ZONA for something, or when a request fits what you offer, we share what's relevant with the potential counterparty: your public profile, your availability, and what you've told us about the work. We route introductions; we don't broadcast your information.

To curate. Membership is by approval, so we review applications and profiles against our bar — identity, quality of work, standing in the industry.

To communicate: transactional email about your application, account, requests, offers, and deals; and occasional updates about ZONA, which you can opt out of at any time without affecting anything else.

For safety and legal reasons: preventing abuse and fraud, enforcing our terms, and complying with law.

Messages on ZONA route through our system, and in concierge conversations ZONA itself is a participant. We access message content to run the service — routing, facilitating deals, resolving disputes, safety — never to build advertising profiles.

What we never do

We never sell personal data. We never rent lists. We don't run third-party advertising or ad trackers on zona.so. Your private contact book is yours: we don't mine it, market to it, or share it.

Who we share with

Service providers who run our stack under contract: hosting and analytics (Vercel), database and file storage (Supabase), transactional email (Resend), error monitoring (Sentry), and — when payments launch — a payment processor (Stripe). Each receives only what it needs to do its job.

Deal counterparties, as described above: when ZONA facilitates work, each side sees what it needs to decide — public profile information and the terms under discussion.

Legal and corporate: if the law requires it, or in connection with a financing, reorganization, or sale of ZONA, under confidentiality.

Cookies

We use the minimum: session cookies to keep you signed in once accounts exist, and privacy-respecting analytics to understand what pages get read. No advertising cookies, no cross-site tracking.

How long we keep things

Applications: as long as we're considering them, and for a reasonable period after so we can revisit. Accounts and profiles: as long as your account exists. Deal and financial records: as long as tax and accounting law requires, even after an account closes. Everything else: as long as needed for the purpose it was collected for, then deleted.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. You can take your profile down yourself. You can opt out of non-essential email with one click.

If someone else stored your details in their private ZONA contact book and you want them removed from our systems, write to us and we'll handle it.

Depending on where you live (including the EU/EEA, UK, and California), you may have specific statutory rights to access, correct, delete, or port your data, and to object to certain processing. We honor these regardless of where you're writing from. To exercise any of them: santiago@zona.so. We'll respond within 30 days and we don't discriminate against you for asking.

Where data lives

ZONA operates from the United States and our providers store data in the US. If you use ZONA from elsewhere, your information will be processed in the US under this policy.

Who ZONA is for

ZONA is a professional service for the events and hospitality industry, not for children. We don't knowingly collect information from anyone under 18.

Changes

When this policy changes in a way that matters, we'll say so plainly — on this page and, for members, by email. The date below is the version you're reading.