Privacy Policy

This policy explains how DataForge ("we", "us") handles personal data in two contexts: (1) when you visit this website or contact us, and (2) when personal data appears in the web-sourced datasets we compile and sell. Contact for anything in this policy:data@zalize.com.

1. This website

• No accounts, no tracking cookies. This is a static catalog site. We do not set advertising or analytics cookies and we do not run third-party trackers.
• Contact form and email. If you email us or use the contact form, we receive the details you send (name, email, message). We use them only to reply and to manage the business relationship, and we keep them no longer than needed for that purpose.
• Checkout. Purchases are processed by Gumroad, Inc. as merchant of record on Gumroad's own pages underGumroad's privacy policy. We receive the buyer email associated with the order to deliver files, license notices and update notifications.
• Hosting. The site is served via a content-delivery network, which processes IP addresses transiently for delivery and security. We do not build visitor profiles.

2. Personal data in our datasets

Our datasets are compiled from publicly accessible web pages and endpoints (public job boards, public app-store pages, public e-commerce catalogs). We minimize personal data by design:

• Person-level identifiers — names, email addresses, phone numbers, account handles, avatars, profile links — are removed or pseudonymized before packaging.
• Free-text fields (e.g., review text, job descriptions) are scanned with pattern-based redaction for embedded emails and phone numbers.
• We do not collect sensitive-category data (health, biometrics, children's data, precise location traces) and we do not sell datasets containing personal information of individuals located in mainland China.

Where residual personal data remains (for example, a person's name appearing inside a public review), our legal basis under GDPR Art. 6(1)(f) is legitimate interests in compiling factual, publicly available information into research and analytics datasets, balanced against data-subject rights through the minimization measures above. Buyers of our datasets act as independent data controllers for their own use; our license contractually prohibits re-identification of individuals and requires buyers to honor deletion pass-through notices.

3. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA and similar laws) you may have rights of access, erasure, objection, restriction, and correction. To exercise them — or to ask whether our datasets contain data relating to you — emaildata@zalize.com or use thedata & content removal page. We acknowledge requests within 7 days and respond within 30 days. Verified erasure or objection requests are removed from all future dataset releases, and affected buyers are notified and required to delete the identified records. You may also lodge a complaint with your local supervisory authority.

4. International transfers and retention

Collection, storage, and delivery infrastructure is located outside mainland China. Dataset records are retained for as long as the dataset remains commercially maintained; records subject to verified removal requests are deleted from working stores and future releases. Correspondence is retained for the duration of the business relationship plus any legally required period.

5. Changes

We will post any changes to this policy on this page with an updated date. Material changes affecting dataset buyers are also announced in release notes.