Legal

Privacy Policy

This policy explains what information ZapAGI collects, how we use it, whom we share it with and how we protect it. It applies to zapagi.com and zapagi.ai.

Effective October 30, 2026

1. What we collect

Account information. When you create a Zap Cloud account we collect your name, email address, company name and your chosen subdomain.

Billing information. Payments are processed by Stripe. Your card details go directly to Stripe and never touch our systems; we store only Stripe’s customer and subscription identifiers.

Technical information. Our servers keep standard logs, including IP addresses and request times, to operate and secure the service.

Support correspondence. If you contact us, we keep the messages you send so we can help you over time.

Partner program. If you apply to our partner program, we keep your name, email, the website and audience you describe, when you accepted the partner agreement, and, once you are paid, your Stripe payout account status (Stripe holds your identity, bank and tax details, not us). We keep totals of your referral link’s clicks, sign-ups and commissions.

Content you share. Reviews, case studies and links you send us for publishing are kept with the name and role you give, and checked by our own AI model and a person before anything is published (Terms, section 3e). If you withdraw an item we stop using it and keep a record that it was withdrawn.

Your workspace content. What you and your agents put into your workspace (business records, website content, mail, chat and voice conversations) is stored on your workspace’s machines and in our platform database so the service can work.

2. AI processing

Chat and voice requests are processed by AI models running on a GPU server that ZapAGI operates; we do not send them to third-party AI services, and we do not use your content to train models for anyone else. When an agent searches the web for you, the search query (not your workspace data) is sent to public search engines through our own search service.

3. Cookies and analytics

We use a cookie to keep you signed in and to protect forms against forgery. Visits to our websites are counted with Cloudflare Web Analytics, which does not use cookies or track you across sites. We use no advertising trackers.

If you follow a partner's referral link (an address like zapagi.ai/r/name), we set one more cookie, zap_ref, holding only that partner's code, for 60 days. If you then sign up, your account is linked to the partner so they can earn a commission, and you get the referral discount. We count clicks on referral links per day with a one-way hash of your IP address mixed with a value that changes daily; we never store the address itself. The partner sees totals (clicks, sign-ups, commissions), not who you are.

4. How we use it

We use this information to provide and maintain your service, to process billing, to answer support requests and to keep the platform secure. We do not use your information for advertising, and we do not sell it to anyone.

5. Disclosure to others

We share information only with the parties that make the service work:

Stripe processes payments. Cloudflare provides our domain names, encrypts and forwards web traffic to our servers, and counts website visits. Akamai (Linode) hosts our control server and mail relay in the United States. Customer workspaces, their backups and our AI models run on servers ZapAGI operates itself in the United States. Transactional email is sent through our own mail servers.

We may also disclose information when required by law or to protect our rights and the safety of our customers.

Your workspace content is yours: it runs on your dedicated virtual machine, and we do not read, mine or share it except to operate the service or when you ask us to.

6. How we protect it

All traffic to and from our services is encrypted in transit with TLS. Credentials and secrets are stored encrypted with keys held separately, passwords are hashed with a memory-hard algorithm (Argon2id), and administrative actions are recorded in audit logs. Access to production systems is limited to the people who operate them.

7. Retention and deletion

We keep account and billing records while your account is active, and afterwards for as long as we need them for accounting and legal obligations.

Backups. Workspace machines are backed up nightly; we keep the last seven daily and four weekly copies. The platform database is backed up nightly; we keep thirty daily and twelve monthly copies. When a subscription ends, the workspace’s machines are deleted seven days later, and their backups expire on the schedule above.

Free trials. To offer one free trial per person, we keep the email address used for a trial, and its company email domain (not for free-mail providers such as Gmail), after the trial account is deleted. We use it only to check new trial requests.

You can ask us to access, correct or delete your personal information at any time by writing to [email protected]; we will respond and act on valid requests.

8. Changes to this policy

If we change this policy we will post the new version on this page with a new effective date. Material changes affecting how we handle your personal information will be announced before they take effect.