Customer sign-in privacy policy

Effective 11 October 2026

This policy explains how Zocri, a NerfedLab service, handles information for customer sign-in and customer accounts on independent business websites powered by Zocri. The business you visit is responsible for its own products, services and additional uses of your information.

Information used for sign-in

When you choose Google sign-in, Google provides an account identifier, your name, email address, whether that email is verified, and your profile picture when available. We use this information to authenticate you, create or find your customer account, and show your identity to the business you sign into.

We do not receive your Google password. This integration requests only basic identity access, through the openid, email and profile permissions. It does not request access to Gmail messages, Drive files or contacts.

Your account with each business

We associate your identity with a separate customer ID for each business. We store the profile saved for that business, account status, sign-in times and session records. Signing into one business does not sign you into another or give the other business access to your records. Preview test accounts are separate from live accounts.

When you use a business website, it may store information such as bookings, orders, form entries, payment references or uploaded files. Its owner can view and manage information associated with your account in that business. Please read that business's privacy information for how it uses those records and any third-party services it chooses.

Cookies and security

We use a short-lived cookie to secure the sign-in process and session cookies on the business website to keep you signed in. These cookies support authentication and security. We also process technical request information and operational logs to run the service, investigate failures and prevent abuse.

Use and sharing of Google information

We use Google account information to provide sign-in, customer account management, support and security. We do not sell Google account information, use it for advertising, or use it to train general-purpose AI models.

We share your customer profile with the business you choose to sign into. Service providers that operate our hosting, databases and storage process information to provide the service. Information may also be disclosed where legally required or necessary to investigate abuse and protect users.

Zocri's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and your choices

Account and business records are retained while needed to provide the service, support the business's activities, protect security, and meet applicable legal obligations. Signing out ends a session; it does not delete your account or business records. Removing Google access in your Google account prevents future authorized access but does not automatically delete information already stored.

Contact the business to ask about its records or request changes or deletion. For Zocri customer sign-in information, access or deletion requests, contact help@nerfedlab.com and identify the business website. We may need to verify your identity and coordinate with the business. Some records may need to be retained for legal or security reasons; signing out or an owner removing an account is not a complete data-erasure request.

Updates and contact

We will update this page when these practices change and revise its effective date. Contact help@nerfedlab.com with questions about this policy or customer sign-in.