How Zulugraffi handles the details you give us on zulugraffi.com and on our product sites (Parotia, Relay, Dhyāna and Tally). Last updated 5 November 2026.
Analytics and cookies are on by default. Turn either off here: it takes effect at once, and your choice is saved in this browser.
Analytics
Page views and steps, so we can improve the site.
Remember me across visits
Lets PostHog and Google Analytics recognise you on later visits, using cookies.
Shared by zulugraffi.com, relay., tally. and dhyana.zulugraffi.com, and kept for 12 months. Parotia's sites have their own switches.
Zulugraffi is a brand of Avvora Pte Ltd, a company registered in Singapore. Avvora Pte Ltd is responsible for the personal data described here. You can reach us at adi@zulugraffi.com.
We measure how the sites are used (pages visited, the site you came from, your browser and country, and whether a form was sent) with PostHog and Google Analytics. This is on by default on parotia.app, check.parotia.app and zulugraffi.com with its product sites (Relay, Tally and Dhyāna), and you can turn it off at any time in Privacy settings (see "Analytics and cookies: on by default" below). The Parotia dashboard loads PostHog (never Google Analytics) to see how the product is used, as described under "Parotia accounts: product analytics", and it follows the same Privacy settings. Parotia's sites record no screen activity. On zulugraffi.com and its product sites PostHog may also record how a page was used (scrolling and clicks, with anything typed into forms hidden) so we can fix confusing pages, but only while "Remember me across visits" is on. We do not use advertising cookies, and we do not sell this data.
Both sites run behind Parotia's edge, our own service on Cloudflare that answers AI crawlers. For each request it records one anonymous event: the time, the site, the page path (without the query string), the kind of visitor (a person, a search engine, a verified AI crawler or a bot pretending to be one), the crawler's name, how the page was served, the status code and the response time. It does not record your IP address (not even in hashed form), your browser's user-agent, cookies or the site you came from. It uses your IP address only in memory, to check whether a request that claims to come from an AI crawler really comes from that company's published addresses.
The edge also adds one small script, Parotia's analytics script, to the pages it serves to people (never to search engines or AI crawlers). The script only acts on visits that arrive from an AI assistant (ChatGPT, Perplexity, Gemini, Grok, Copilot, Claude or Meta AI, from the link or the referring site). On any other visit it sends nothing, stores nothing and adds no listener. On those visits it reports page views, engaged visits (10 seconds on a page, a second page, or a conversion), conversions we set up (for example sending a form) and the arrival from the AI assistant. Each report contains only a version number, the kind of report, the AI assistant the visit came from and, for a conversion, the name of that event. It never sends the page address, the query string, the referrer, your user-agent or any identifier of you.
The script sets no cookies and does not use localStorage. On AI-referred visits only, it keeps one small note in your browser tab (sessionStorage, key _parotia), holding only the AI assistant and which reports were already sent, so that one visit across several pages counts once. The note holds no identifier, time or page, and it disappears when you close the tab. To stop abuse, the edge uses your IP address in memory to limit how many reports one visitor can send per minute. The IP address is not stored or sent anywhere. On parotia.app and zulugraffi.com alike this script does not depend on the Privacy settings: the site's owner turns it on by pointing the site to Parotia's edge, and only they can turn it off. It sets no cookie and keeps no identifier of you.
When you check a website, we read that site's public homepage, robots.txt, sitemap and llms.txt, and keep only the domain and the result of the check, for 24 hours. We do not store your IP address. To stop abuse, we use it in memory to limit how many checks one visitor can run.
If you ask for the full report, we keep your email address with the site's address, the page you came from (for example an event link) and whether you ticked "Yes, send me Parotia tips and news", for 12 months, and we email you the report as a PDF through Resend. We only write to you again if you ticked that box; reply to any email from us, or write to hello@parotia.app, to stop. To limit how many reports one address can request, we keep a one-way code made from your IP address and the day, deleted after 2 days.
If you ask for a case study, we keep your email address with the report you asked for and whether you ticked "Sign up for marketing material", for 12 months, and we email you the PDF through Resend. If you ask for a report on a country or category we don't cover yet, we keep your email address with that country and category, for 12 months, and use it only to tell you when the report is published. We only send you anything else if you ticked that box; reply to any email from us, or write to hello@parotia.app, to stop. We do not store your IP address with either. To limit how many requests one visitor can send, we keep a one-way code made from your IP address and the day, deleted after 2 days.
Analytics cookies are set by default on parotia.app, check.parotia.app and zulugraffi.com (including relay., tally. and dhyana.zulugraffi.com). You do not have to accept anything first, and the sites work the same with them off. The Parotia dashboard loads PostHog only while you are signed in and "Analytics" is on; it sets PostHog's cookie (below) only while "Remember me across visits" is on, and never loads Google Analytics. The first time you visit, a small card at the bottom left of the page says so and links to Privacy settings (in the dashboard, once you are signed in); "OK" or × closes it, opening Privacy settings counts the same, and it is not shown again.
You can turn them off at any time, and it takes effect at once: in Privacy settings at zulugraffi.com/privacy#settings (there is a "Privacy settings" link in the footer of every zulugraffi.com site), at parotia.app/privacy#settings, and in the Parotia dashboard under Settings › Privacy, where the same two switches save your choice for every Parotia site, including parotia.app and check.parotia.app. There are two switches, both on by default. "Analytics" turns off PostHog and Google Analytics: nothing more is sent to them, and the cookies and local-storage entries below are deleted. "Remember me across visits" turns off only the remembering: PostHog and Google Analytics stop recognising you on later visits and their cookies and local-storage entries are deleted; Google Analytics stops, and PostHog keeps counting page views and steps without storing anything in your browser. Turning "Analytics" off turns the second switch off too.
With "Remember me across visits" off, PostHog, Google Analytics and pa_ft do not set these. Your IP address is removed before anything reaches PostHog: the browser sends it through our own servers, which pass on no address. On parotia.app page addresses are also cut down to the site and path; on zulugraffi.com PostHog receives the page address as it is, including any campaign tags in the link.
Cookies that are needed for the service are set without asking: the preference cookie above, the sign-in session cookies of the dashboard, and the Cloudflare Turnstile check that stops automated sign-ups. Your light or dark theme is also kept in your browser, without asking.
When you use a Parotia account, our servers record a few steps to understand how people go from signing up to a paid plan: the account was created and its email confirmed, an organisation and a brand were added, the website was proven to be yours and connected, questions were added, a free trial started or ended, the first measurement finished, a checkout was started, and a plan started, was upgraded or was cancelled. Each step is recorded once, against your Parotia user id, and sent to PostHog. It never contains your email address, name or IP address; the website address is included only once you have proven you own it. These steps are part of running your account and do not depend on the Privacy settings. While "Remember me across visits" is on, PostHog links them to your earlier visits to parotia.app, including how you first arrived.
While you are signed in to the dashboard and "Analytics" is on, it also records how the product is used: which screen you open, the period or market you switch to, a question or a recorded answer you open, a report you open or download, that a setting was changed (never what to), a step of connecting your website, and an invitation sent. Each event is recorded against your Parotia user id, your organisation and your brand (their names and plan), and sent to PostHog through our own servers, which pass on no IP address, cookie or page address. It never contains your email address, name, anything you type, a question's text or an answer. We do not record your screen. With "Analytics" off nothing is sent; with "Remember me across visits" off nothing is stored in your browser. This usage is kept apart from the visits to our sites, in its own PostHog project, for 12 months.
If you create a Parotia account, we keep your email address, your name if you give it, your password, stored only as a secure hash by our sign-in provider, Supabase, your organisation and its members, the brands and websites you add, the questions and competitors you choose, and the measurement results and reports we produce for you. When you pay, Airwallex processes your card; we never see or store your card number, only its brand, its last four digits, your billing email and your invoices. To measure your brand we send your questions, and the public text of your website, to the AI services we check (OpenAI, Google, Anthropic, xAI, Perplexity and Meta); we do not send them your name or email address.
Some Parotia features (Parotia's edge, the AI-ready pages and visitor analytics) work only for the organisation that has shown it owns a website. You can show it with an email address at that website, an email link we send to an address there that you choose, or a DNS record. We keep which organisation proved which website, how, and when. A verification email names the organisation that asked for it.
To keep free trials fair, when someone signs up we record a code derived from their network with a secret key (never the IP address itself), the domain of their email address, and the day. We use it only to spot unusual numbers of sign-ups, and delete it after 12 months.
We rely on: your consent for news emails (you can withdraw it at any time, without affecting what was done before); the contract with you to run your account, measure your brand, bill you and support you; our legitimate interests in keeping the sites secure, preventing abuse, and understanding how the sites are used and improving them, which is why analytics cookies are on by default (you can object at any time, in one click, by turning them off in Privacy settings); and legal obligations, such as keeping invoices.
We do not sell your details or share them for marketing.
Form submissions are stored with Cloudflare, which hosts these sites. Emails we send and receive go through Google Workspace; notifications about form submissions, and the confirmation we email you after a request, are sent through Resend. Usage measurement is handled by PostHog (in the United States, sent through our own servers so that your IP address is removed first) and Google Analytics. Parotia's edge events and analytics reports are stored with Cloudflare and Supabase. Parotia accounts are stored with Supabase (in Japan) and our measurement jobs run on Google Cloud (in Singapore). Payments are processed by Airwallex. Web fonts are loaded from Google Fonts.
Some of these providers keep data outside the country you are in, including in Singapore, Japan and the United States. We only use providers that commit by contract to protect it to a standard comparable to the laws that apply to you, and we send them only what they need.
As long as we need it to answer you and follow up on your request. A Parotia account's data is kept while the account is open and deleted within 30 days of a request to close it, except invoices and payment records, which we keep for 5 years because the law requires it. Ask us at any time and we will delete it. Product analytics in PostHog (the visit data from our sites, and the account steps above) is kept for 12 months and then deleted. Parotia's edge events and analytics reports hold no IP address, cookie or other identifier of you. We keep them, and the daily and monthly counts made from them, to show how traffic changes over time.
You can ask to see the personal data we hold about you, to correct it, to have it deleted, to receive a copy in a common format, to withdraw any consent you gave, and to object to analytics. Write to adi@zulugraffi.com; we reply within 30 days and may need to confirm it is you. Turning analytics off is also one click in Privacy settings.
If you are not happy with our answer, you can complain to the data protection authority where you live: in Singapore the Personal Data Protection Commission, in India the Data Protection Board of India, and in Indonesia the authority for personal data protection under the Ministry of Communication and Digital Affairs.
Our data protection officer and grievance contact is Adi Vora, Avvora Pte Ltd, at adi@zulugraffi.com.
Data is encrypted in transit, access to it is limited to the people and services that need it, sign-in is rate-limited, and our staff tools sit behind single sign-on and record what staff change. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the authorities as the law requires.
Our sites and products are for businesses and are not meant for anyone under 18. We do not knowingly collect children's data; if you think we have, write to us and we will delete it.
When we change this notice we update the date at the top. If a change affects how we use data you already gave us, we will tell you by email or in the product before it applies.
Tally runs on your own computer and keeps your financial data there; it is not sent to us. Dhyāna has its own terms, given to you with your invitation.
Zulugraffi is a brand of Avvora Pte Ltd
© 2026 Avvora Pte Ltd
Jakarta · Singapore