Privacy Policy

This policy applies to two groups: the businesses that create a ZeroZAI account and use the service ("customers"), and the people who call or message a phone number answered by a customer's AI employee ("callers").

For caller information, the customer decides why the service is used and what the AI employee is instructed to collect. ZeroZAI processes that information on the customer's behalf. Callers with questions about a specific business should contact that business directly.

• Account information: name, email address, and a password if you choose to set one.
• Business information: business name, industry, description, service area, hours, contact details, and similar setup details you enter during onboarding or in settings.
• AI employee configuration: greeting, tone, voice selection, instructions, closing behavior, and other settings that shape how the AI employee answers calls.
• Knowledge you supply: information you type in directly, plus the public content of a website address you ask us to read so the AI employee can answer questions about your business.
• Feedback: messages you send us through the in-app feedback form, and thumbs-up / thumbs-down ratings on AI-generated call summaries.
• Support communications: emails and messages you send us.

• Call metadata: the phone numbers involved, direction, time, duration, and call status.
• Usage and metering data: billable minutes per call and per billing period, so we can apply trial limits and, in the future, billing.
• Service logs: technical records generated when the service runs, including provisioning and processing events, used for reliability, troubleshooting, abuse prevention and security.
• Basic security signals associated with account activity, used to protect accounts from misuse.

We do not use advertising cookies or third-party marketing analytics on this site. The service stores a session token in your browser so you stay signed in; this is required for the application to function.

When a call or message is handled by the service, we may process:

• The caller's phone number and any caller identification supplied by the phone network.
• The content of the conversation, including a transcript of what was said.
• An AI-generated summary of the call.
• A call recording, where recording is enabled for the account.
• Contact and lead details the caller provides, such as name, phone number, email address, service address, and the reason for the call.
• Appointment or booking details, where the AI employee is configured to capture them.
• Text message content, where messaging is enabled for the account.

Transcripts and summaries are produced automatically. They can contain errors, omissions or misinterpretations and should not be treated as a verbatim legal record.

• To answer calls, respond to callers, and carry out the instructions configured by the customer.
• To generate transcripts, summaries, leads, contacts and appointment details for the customer.
• To display calls, leads and activity in the customer's dashboard.
• To measure usage, enforce trial limits and usage caps, and support future billing.
• To operate, secure, troubleshoot and improve the service.
• To detect, investigate and prevent fraud, abuse and violations of our Acceptable Use Policy.
• To send account and service messages, such as sign-in links, verification emails and important service notices.
• To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell personal information, and we do not use caller conversations to train general-purpose AI models of our own.

• With the customer whose phone number was called: calls, transcripts, summaries, recordings, leads and appointments are available to the users that customer has invited to its account.
• With service providers that operate parts of the service on our behalf, described below.
• When required by law, legal process, or a valid governmental request, or where we believe disclosure is necessary to protect rights, safety or the integrity of the service.
• In connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply to the transferred information.

We rely on a small number of third-party providers to deliver the service. They act on our instructions and are limited to the information needed for their function:

• A telecommunications provider that supplies phone numbers and carries voice and messaging traffic, and that generates recordings and conversation records for calls.
• Cloud hosting and application infrastructure providers that run the application and store data.
• A managed database and authentication provider that stores account and business data and handles sign-in.
• AI model providers that generate spoken responses, transcripts and summaries from call content.
• An email delivery provider used for account and service emails.

These providers may process information in the United States and other countries. We will provide the current list of named subprocessors to a customer on written request to hello@zerozai.com.

Each business environment is logically separated, and access to a business's data is restricted to the users that business has invited, using role-based permissions enforced at the database level. Data is encrypted in transit. Credentials for third-party systems are held server-side only and are never exposed to the browser. Recording download links are generated on demand, expire quickly, and are never embedded in pages.

No system is completely secure, and we do not claim any security certification or formal compliance audit. We cannot guarantee that unauthorized access will never occur.

• Call recordings are deleted automatically after a short retention window, which defaults to 48 hours from the call, unless a longer period is configured for the account.
• Call records, transcripts, summaries, leads, contacts and appointments are retained for as long as the account is active, so they remain available in the dashboard.
• Usage and metering records are retained for as long as needed for trial enforcement, billing and accounting.
• Service logs and security records are retained for a limited operational period.
• Feedback submissions are retained while we act on them and for product-improvement purposes.

You can delete individual records from your dashboard where the interface allows it. To close your account and have your business data deleted, email hello@zerozai.com from the address on the account. We will delete or de-identify the account's data within a reasonable period, except where we are required to retain it for legal, accounting, security or dispute-resolution purposes. Backups and logs may retain copies for a limited period before they expire.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent where processing relies on it. To make a request, email hello@zerozai.com. We will verify the request against the account before acting on it.

If you are a caller and your information was processed because you contacted a business using ZeroZAI, we will forward your request to that business, which controls the information, and assist them in responding.

We send transactional emails such as sign-in links, verification messages, and important service notices. These are part of the service and cannot be turned off while your account is active. Any future marketing email will include an unsubscribe link.

The service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.

We may update this policy as the service changes. The effective date and version at the top of this page will be updated, and material changes will be communicated to account owners by email or in the application.

ZEROZAI LLC — questions about this policy or a privacy request: hello@zerozai.com.