Legal

Privacy Policy

SharEarn holds very little about you, and almost all of it is there for one reason: to appear on the cards you share. This page says what we hold, why, who can see it, the grounds we rely on, and how to get it removed.

A brass padlock resting on folded plum silk

Last updated: 30 September 2026 · Effective: 30 September 2026

The short version

In one paragraph We hold your name, phone number and optional photo so they can be composed onto the cards you share, plus your business details if you are on a paid plan. We do not sell your data and we do not use it for advertising. You can see, correct, export or delete it by emailing info@zrix.com. We answer within 7 days and finish a verified deletion within 30.

Who we are, and who to contact

SharEarn is a product of ZRIX INC. ZRIX INC. decides what is collected through SharEarn and why. In data-protection language it is the controller of that information.

  • ZRIX INC., 17926 HWY 3, Suite 104B, Webster, TX 77598, United States (registered office)
  • ZRIX INC., 4801 Glenwood Ave., Suite 200, Raleigh, NC 27612, United States
  • Telephone 800-796-2735 · info@zrix.com

Where this page says we, us or our, it means ZRIX INC.

Grievance Officer (India)

If you are in India, the Digital Personal Data Protection Act, 2023 and the Information Technology Rules, 2021 give you the right to raise a complaint with a named officer. Write to the Grievance Officer, SharEarn, at info@zrix.com with Grievance in the subject line, or at the registered office above. We acknowledge a grievance within 48 hours and resolve it within 15 days of receipt.

What this policy covers

It covers the SharEarn app, the sharearn.com website, the creator portal at portal.sharearn.com and the SharEarn render API. The app is available on Android today; an iOS app is coming.

If you reached a SharEarn card through someone else's share, this policy covers what we hold about them — we hold nothing about you simply because you looked at a card.

What we collect, why, and on what legal basis

The table is the whole of it. Everything below the table is detail on the same rows.

WhatWhy we have itLegal groundHow long
Name, phone number, optional photoTo compose your cards, and to identify your accountPerformance of our contract with youWhile your account is open
Business name, logo, designation, business phone, address lineTo compose your cards on a paid planPerformance of our contract with youWhile your account is open
One-time codes we send you on WhatsApp or by emailTo confirm the account is yours at sign-in and before deletionPerformance of our contract; our legitimate interest in account securityMinutes; the code expires
Cards you renderTo produce the image and return it to youPerformance of our contract with youRendered on request, not kept as a gallery of you
Clicks and conversions on your tracked linksOnly if you joined an earning programme, to credit your ledgerPerformance of the programme you joinedWhile your account is open, then deleted with it
Your sharing of an organisation's cardsTo show that organisation its own members' activity on the Advanced planOur legitimate interest, and the organisation's, in running a members' programmeWhile you are a member
Artwork and designs you submit as a creatorTo review, publish and render your designsPerformance of our contract with youWhile published; see the deletion page
Payment recordsTo take payment and to satisfy tax and accounting lawLegal obligationAs tax and accounting law requires, then deleted
Logs, error reports, device and app versionTo keep the service working and to spot abuseOur legitimate interest in a service that works and is not gamedUp to 12 months

Where we rely on a legitimate interest, we have weighed it against your interests and rights, and we will tell you the outcome of that weighing if you ask. Where the law that applies to you requires consent instead — as India's Digital Personal Data Protection Act does for most processing — your giving us these details and using SharEarn is that consent, and you may withdraw it at any time by deleting your account. Withdrawing consent does not undo what was lawfully done before you withdrew it.

The details you put on your cards

These exist for one purpose: to be composed onto the cards you share. That is the whole product. Your name is on the card because you want your name on the card. If you leave the photo out, the card falls back to your initials.

Your phone number, and the codes we send you

Your phone number identifies your account. We send one-time codes — on WhatsApp, or by email to the address on your account — to confirm it is yours at sign-in, and again before we act on a deletion request. Those codes are part of the service, not marketing. Your network's standard data or message rates may apply; we do not charge you for them. We do not send you marketing by SMS or WhatsApp unless you have asked us to, and any such message carries a way to stop it.

The cards themselves

Cards are put together on our servers, not on your phone, so that the artwork and your details line up properly every time. The finished card is yours. Once you share it, it travels wherever you send it — a chat, a status, a social post — and it is outside SharEarn from that moment on. We cannot see where you sent it, and we cannot take it back.

If you join an earning programme

Earning programmes are optional. If you join one, the links attached to your cards become tracked links. When someone clicks one, or does whatever that programme counts as a conversion, we record it against your ledger. That is how a programme can credit you at all.

What we record is activity on your links — clicks and conversions, and enough technical detail to tell a real click from a repeated or automated one. We are not building a profile of the people who clicked, and we do not sell or share that data for anyone's advertising.

If you belong to an organisation

An organisation on the Advanced plan can see its own members' sharing activity — which of its cards its members shared, and what that sharing produced. An organisation sees its own members and its own cards, and nothing belonging to any other organisation. Your personal cards are not part of that reporting.

If you publish designs

Creators upload artwork and submit designs. A design becomes visible to anyone else only once it is published. Until then it is a draft, and the only people who can reach it are you and — where your designs belong to an organisation — that organisation's admins.

If your company uses the API

Companies can call the SharEarn render API from their own app or system. For API clients, SharEarn stores nothing about the calling app's end users. The details arrive, the card is rendered, and the card goes back. We hold the client company's own account and key, not their users. For that data the client company is the controller and we act on its instructions.

What we do not do

  • We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Under California law that means there is nothing to opt out of — but you may still ask us to confirm it.
  • We do not run advertising networks or third-party trackers on this website.
  • We do not make decisions about you by automated means that produce a legal or similarly significant effect. Fraud checks on tracked links are reviewed by a person before anything is withheld from you.
  • We do not ask for, or want, special-category data — your health, religion, politics, biometrics or anything similar. Please do not put it on a card.
  • We do not read the contents of the chats you share cards into. We have no access to them.

Cookies and similar technologies

This website uses only what it needs to work. We do not use advertising or analytics cookies, and there is nothing here to consent to.

  • Strictly necessary cookies — these keep you signed in, remember which site you are on, and protect forms against cross-site abuse. The service cannot run without them.
  • Local storage in the app — your plan and preferences are cached on your device so the app opens correctly offline.
  • Web fonts — the site loads typefaces from Google Fonts, which means your browser contacts Google to fetch them and Google sees your IP address in doing so. No cookie is set by us for this.

You can block or clear cookies in your browser. If you block the strictly necessary ones, signing in will not work.

Who we share with

We do not sell your personal details, and we do not hand them to anyone for their own advertising. They go where the product obviously has to put them:

  • Onto your cards, which you then share with whomever you choose. Nothing is shared until you share it.
  • To your organisation, if you are a member of one and it is on the Advanced plan, as described above.
  • To the suppliers who help us run the service — our processors. They act only on our written instructions, may not use what they see for their own purposes, and are bound to keep it confidential and secure.
  • Where the law requires it — a valid legal demand, or to protect someone's safety or our rights. Where we are allowed to tell you about such a demand, we will.
  • If the business changes hands, to whoever takes it on, who would be bound by a policy no weaker than this one. We would tell you before your data moved.

The kinds of supplier we use

What they do for usWhat they can see
Cloud hosting and storage, in the European Union and the United StatesEverything, at rest, encrypted — they have no business reason to look and are contractually barred from it
Card renderingThe details being composed onto the card being made
Sign-in and identityYour phone number and sign-in events
Transactional email and messagingYour address or number, and the message being sent
Payment processingYour payment details, which go to them and are not stored by us
Error and performance monitoringTechnical logs, which may incidentally include an account identifier

We will give you the current named list of these suppliers if you ask — write to info@zrix.com. We publish the categories rather than a fixed list here so that this page cannot quietly go out of date.

Where your details are handled

ZRIX INC. is a United States company and SharEarn is used in more than one country, so your details may be handled outside the country you live in — in practice, in the United States, the European Union and India.

Where we move personal data out of a country whose law restricts that — for example out of the UK or the European Economic Area — we do it on the European Commission's Standard Contractual Clauses (or the UK Addendum), together with whatever additional safeguards the transfer needs. You can ask us for a copy of the clauses we rely on for your data.

Security, honestly

What we actually do:

  • Traffic between you and SharEarn is encrypted in transit with TLS, and data is encrypted at rest on our hosts.
  • Credentials, API keys and messaging secrets are held in an encrypted store with separate keys, not in plain text alongside the data.
  • Access inside our team is limited to the people whose work needs it, and administrative access is individually accounted for.
  • One organisation's data is separated from another's, and one API client's from another's, and that separation is tested.
  • Backups are encrypted and age out on a fixed cycle.

We are not going to tell you your data is unbreakable, because nobody can say that truthfully. What we can say is that we hold very little about you in the first place, that we do not sell it, and that if a breach affects you we will tell you without undue delay — and, where the law sets a deadline, within it. For the European Economic Area and the UK that means notifying the regulator within 72 hours of becoming aware; in India we will notify the Data Protection Board and you as the Act requires.

Children

SharEarn is not directed at children under 13, and we do not knowingly create an account for anyone under 13. Where local law sets a higher age for a child's own consent — 18 in India under the DPDP Act, or 16 in parts of Europe — a parent or guardian must agree on the child's behalf, and we do not knowingly process a child's data for tracking or targeted advertising at all.

If you believe a child has an account they should not have, write to info@zrix.com and we will close it and remove what we hold.

Your rights, and how to use them

Wherever you live, you can ask us to:

  • Show you what we hold about you, and tell you who we shared it with.
  • Correct anything wrong — you can also change your name, photo and business details in the app at any time.
  • Delete your account and your personal details — see the Data Deletion Policy.
  • Give you a copy of what you gave us, in a form you can take elsewhere.
  • Stop or restrict a particular use — leaving an earning programme, or taking your business details off your cards.
  • Object to anything we do on the ground of legitimate interest.
  • Withdraw consent, where consent is what we relied on.
  • Nominate someone to exercise these rights for you if you die or become incapable — a right the Indian Act gives specifically.

How to ask: email info@zrix.com from the address on your account, or from any address quoting the phone number on it, and say what you want. We will confirm it is really you before we act, because acting on someone else's say-so would be the bigger privacy failure.

What it costs and how long it takes: nothing, and we reply within 30 days. If a request is unusually complicated we may take up to a further 60 days, and we will tell you inside the first 30 if that happens. We will not treat you worse for having asked.

If you are unhappy with our answer

Tell us first — info@zrix.com — because most of it is fixable. If that does not settle it:

  • India: raise it with the Grievance Officer above, and then with the Data Protection Board of India.
  • European Economic Area or the UK: complain to your national supervisory authority, or to the Information Commissioner's Office in the UK.
  • California: you may also contact the California Privacy Protection Agency or the Attorney General.

You do not have to go through us first, but we would rather you did.

How long we keep things

The retention column in the table above is the answer for each kind of data. In summary: account details live as long as the account does; a deletion request is acted on as set out on the Data Deletion Policy page; technical logs are kept up to twelve months; and payment records are kept only as long as tax and accounting law requires.

A card you have already shared is not ours to delete. It is in whatever chat or feed you sent it to.

Changes to this policy

If we change this policy we will change the date at the top of this page. If a change matters to you — a new use of your details, or a new party who can see them — we will say so in the app and, where the law requires it, ask you again rather than quietly editing a paragraph.

Contact

Any question, any request, one address: info@zrix.com. Or write to ZRIX INC., 17926 HWY 3, Suite 104B, Webster, TX 77598, United States, or telephone 800-796-2735.