Privacy & Cookies

Zylt Momentum is operated by Wentzel Investments LLC, a Florida limited liability company (“we”, “us”), which is responsible for the personal data described in this notice.

How we ask for consent

Zylt Momentum uses a region-aware consent model. If you visit from the EU, EEA, the United Kingdom, or Switzerland — or from a location we cannot determine — analytics and other non-essential cookies stay off until you accept them, and a consent banner asks for your choice on first visit (opt-in). Elsewhere, analytics may be enabled by default, and you can turn it off at any time (opt-out).

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as an opt-out of non-essential cookies and do not show the consent banner.

You can change or withdraw your choice at any time using the link in the site footer (also available ).

Cookies and analytics we use

Strictly necessary

Cookies and local storage required to sign you in, keep your session, remember your light/dark theme, and store your cookie preference. These are always active and are not used for tracking.

Analytics (consent-gated)

When you grant analytics consent, we load:

  • Google Analytics 4 — aggregate usage and traffic measurement. Sets analytics cookies. Loads only after consent.
  • Microsoft Clarity — session-replay and heatmaps to understand how the product is used. Sensitive fields (passwords, email inputs, and elements marked private) are masked. Loads only after consent. Microsoft privacy statement.
  • Cloudflare Web Analytics — when a site id is configured for this deploy, a cookieless script (from static.cloudflareinsights.com) that loads only after analytics consent is effective. It records the page you viewed, the referring page, your browser and device type, your approximate country, and page-load timings, and we see only aggregate counts. It sets no cookies and does not use your browser’s local storage.

We do not load advertising or marketing pixels, and we do not embed third-party widgets that track you. If that changes, this page and the consent options will be updated first.

Information we store

Depending on how you use Zylt Momentum, we store the following, grouped by purpose:

  • Account and sign-in: your name and email address, your sign-in sessions, linked sign-in accounts, a hashed password if your account has one, and one-time sign-in and password-reset tokens.
  • Profile and organization: profile details, the organizations you belong to and your role in them, and, for organizations that use single sign-on or automated account provisioning, the related connection and identity records.
  • Learning record: your courses, enrollments, assessments, badges, levels, and role assignments, and any observer links that let another person view a learner’s record. When one user reads another learner’s record, we log who read it, whose record it was, the type of record, and the stated purpose.
  • Coins: your coin balance and the ledger of coins granted and spent.
  • Billing: your subscription, purchase and payment history, and the payment-processor events we receive about them.
  • Contact form: the name, email address, role, inquiry type, and message you submit through our contact form.
  • Privacy requests and consent: records of access and erasure requests (including those submitted through the request form) and how they were decided, and consent records.

Service providers that process your information

We use these providers to run Zylt Momentum:

  • Stripe — payments. Paid checkouts are completed on a Stripe checkout page, and Stripe sends us events about your subscription and payments.
  • Cloudflare — hosting, our database, and the email service that sends sign-in links, password-reset emails, and notifications of contact-form submissions.
  • Google — optional sign-in with a Google account.
  • AI features — when you use the AI assistant or AI course generation, what you submit is sent through Cloudflare AI Gateway to produce the response.
  • Sentry — error monitoring, configured not to send personal data by default.

Your requests and rights

You can ask us for a copy of the personal data we hold about you, or ask us to erase it. Use the data subject request form or send your request to support@zylt.ai. An administrator handles each request and records how it was decided.

If you use the form, we store your email address, the name and details you choose to add, the type of request, its status and a response deadline in our database, together with an entry in a hash-chained audit log. We email a confirmation to the address you give and an alert to our privacy contact. The form is checked by Cloudflare Turnstile, which receives your IP address, and is rate limited by IP address. We use this data only to handle your request.

  • Access: the copy we produce leaves out secrets such as password hashes, session tokens, and stored credentials.
  • Erasure: we delete your learning, coin, and profile records and anonymize your account in place. Some records are kept, linked to the anonymized account, including payment and accounting records, the log of who read education records, records of privacy requests and consent, and security logs of sign-in events. Shared items other people use, such as courses you created, are not deleted.

How long we keep information

We keep your information until it is deleted. When an erasure request is carried out, we delete your learning, coin, and profile records and anonymize your account in place. The records we keep after erasure are payment and accounting records, the log of who read education records, records of privacy requests and consent, and security logs of sign-in events.