Privacy Policy

Overview

Zyden AI helps people create study materials, chat with AI, and work with uploaded source files. This policy explains what information we collect, how we use it, how long we keep it, and the choices you have.

Information We Collect

We collect information you provide directly, information created when you use Zyden AI, and limited technical information needed to operate the service.

• Account and authentication information: name, email address, profile details, sign-in provider, account identifiers, authentication state, and related account settings.
• User content: prompts, chat messages, uploaded files, extracted file text, generated study materials, generated presentations, flashcards, quizzes, saved chat threads, file names, file metadata, and other content you submit or create in the app.
• Usage, analytics, and diagnostics: page views, page leave events, clicks, navigation paths, feature usage, web vitals, browser and device details, approximate location derived from network information, error reports, request route, response status, duration, and similar technical events.
• Billing information: subscription plan, billing status, Stripe customer, subscription, price, product, invoice, and payment status identifiers. We do not store full payment card numbers.
• Support and feedback: messages you send to us, your contact details, ticket metadata, screenshots or attachments you choose to include, and our support replies.
• Security and operational data: logs, rate limit signals, session identifiers, token-related metadata, audit information, abuse-prevention data, and records needed to keep the service reliable and secure.

How We Use Information

We use information to provide and improve Zyden AI, authenticate users, save chat history and study materials, process uploads, generate AI responses, maintain security, debug issues, and understand product usage.

We also use information to manage subscriptions, prevent fraud and abuse, enforce usage limits, respond to support requests, send service-related messages, comply with legal obligations, and protect the rights, safety, and integrity of Zyden AI and its users.

Google Sign-In

If you use Google Sign-In, Google provides basic account information needed to authenticate you, such as your email address and profile name. We use this information to create and manage your Zyden AI account.

AI Processing and Uploaded Files

When you ask Zyden AI to generate, summarize, search, or transform content, your prompts, chats, uploaded files, extracted text, and relevant context may be sent to AI model providers and related processing services so the requested feature can work. Uploaded files may be stored, parsed, indexed, embedded, and associated with your account or active session.

Generated files and downloadable artifacts may be stored temporarily so you can access them. Some generated artifacts are configured to expire after about 30 days. Uploads, indexes, cached files, and derived artifacts may be deleted when they expire, when they are no longer tied to an active session, or when operational cleanup jobs run.

Analytics and Session Replay

We use PostHog to understand product usage, measure page views and page leave events, diagnose errors, measure performance, and improve the app. We may capture analytics events from the browser and backend, including route, status, timing, device, browser, and feature usage information.

Session replay may be enabled to help us debug confusing flows and product issues. Session replay can record the structure of pages you view and interactions such as clicks, scrolling, and navigation. Our PostHog setup is configured to mask all text and all input contents in recordings, and to avoid sending prompts, message content, uploaded file content, access tokens, authorization headers, passwords, and similar sensitive values in analytics events. Even with masking, recordings may show the layout of the app, the pages you visited, and non-text visual state.

Billing and Payments

Paid plans and billing are processed through Stripe. Stripe may collect and process payment method, transaction, tax, fraud-prevention, billing address, and invoice information under its own privacy terms. Zyden AI stores subscription and invoice identifiers, plan status, billing period details, and related metadata needed to manage your subscription and provide billing support.

Service Providers

We use third-party service providers to operate Zyden AI, including authentication, database, hosting, storage, analytics, session replay, billing, email, support, security, and AI processing providers. These providers may include Supabase, Google, PostHog, Stripe, hosting and CDN providers, object storage providers, AI model providers, and email or support tooling providers. They process information as needed to provide their services to us.

Retention, Deletion, and Account Deactivation

We keep information for as long as needed to provide Zyden AI, maintain security and backups, resolve disputes, comply with legal, tax, accounting, and payment obligations, enforce our terms, and improve the service.

If you deactivate your account, Zyden AI disables access and anonymizes account profile details such as your account email where practical. Some records may be retained after deactivation, including the account record, saved chat threads and chat messages, subscription records, welcome email records, usage events, support and feedback records, audit logs, billing records, and backups. Retained records may be kept in anonymized, pseudonymized, aggregated, or restricted-access form when appropriate.

Usage events may be retained without a direct user identifier or with a hashed subject identifier. Support tickets, feedback, screenshots, invoices, transaction records, security logs, and backup copies may remain for a limited period or longer where required for support, security, fraud prevention, accounting, dispute handling, or legal compliance.

Security

We use technical and organizational safeguards designed to protect personal information, including access controls, row-level access rules, service-role separation, masking of sensitive analytics data, and deletion or cleanup routines for certain uploaded and generated files. No online service can guarantee perfect security.

Your Choices

You can choose not to sign in, avoid uploading files, delete content where product controls are available, deactivate your account, or request account-related help by contacting us. You can manage Google account access from your Google account settings and manage paid subscriptions through the billing tools made available in the app.

Depending on where you live, you may have rights to request access, correction, deletion, export, restriction, or objection to certain processing of your personal information. To make a privacy request, contact us using the address below. We may need to verify your identity before fulfilling a request. Some requests may be limited where retention is required for security, legal, billing, or operational reasons.

Children

Zyden AI is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.

International Processing

We and our service providers may process information in the United States, Canada, and other countries where we or they operate. Privacy laws in those countries may differ from the laws where you live.

Changes to This Policy

We may update this policy as Zyden AI changes. When we make material changes, we will update the date above and provide additional notice when required by law or when appropriate for the change.

Contact

For privacy questions, contact us at [email protected].