Privacy Policy

This Privacy Policy applies to the Zeneno website, application, support channels, and related services (collectively, the “Services”). “Zeneno,” “we,” “us,” and “our” refer to Zeneno. “You” refers to a visitor, applicant, account holder, or person using the Services on behalf of an organization.

This policy does not govern third-party products that you connect to Zeneno or visit through external links. It also does not replace the privacy notice required for an application you build or operate. If your application collects information from its own users, you are responsible for giving those users appropriate notice, obtaining required consent, and complying with applicable law.

We receive some account data from Auth0 or another identity provider when you sign in. We may also receive transaction status from Stripe and operational results from providers you direct Zeneno to use.

Please do not place government identifiers, medical information, financial-account credentials, biometric information, or other highly sensitive personal data in prompts or project files unless Zeneno has expressly agreed in writing to support that use.

We use information to:

• create and secure accounts, authenticate users, and manage access;
• translate requests into applications and operate build, test, debug, deployment, memory, and follow-up workflows;
• connect to services at your direction and validate or use the credentials you provide;
• store sessions and workspaces so you can review, resume, download, revise, or delete them;
• process subscriptions, credit purchases, usage accounting, refunds, and invoices;
• respond to access requests, support inquiries, feedback, and business communications;
• monitor reliability, diagnose failures, improve product performance, and develop features;
• detect abuse, enforce rate limits, prevent fraud, and protect users, Zeneno, and third parties;
• comply with law, maintain required records, resolve disputes, and enforce our agreements; and
• send transactional or administrative messages. We will provide an opt-out where required for non-essential marketing.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and securing the Services, your consent, and compliance with legal obligations.

Zeneno is an AI development service. To answer questions and build, inspect, test, debug, or revise an application, Zeneno may send relevant portions of your instructions, conversations, source files, logs, screenshots, and other project context to AI routing, model, or inference providers. The provider can vary based on the model selected, availability, performance, and the task being performed.

Zeneno does not currently train its own general-purpose foundation model on your prompts or project files. Third-party AI providers process content under their own terms, privacy policies, retention settings, and model-improvement controls. We cannot promise that every third-party route treats content identically. Do not submit content that you do not have the right to disclose, and review the terms of any provider or model you choose to use.

AI output can be inaccurate and may reproduce information present in your project context. You are responsible for reviewing output before using it in production or exposing it publicly.

We disclose information only as reasonably necessary for the following purposes:

• Service providers. Vendors that provide authentication, databases, hosting, infrastructure, analytics, communications, security, customer support, AI processing, and payments.
• Providers you connect. When you ask Zeneno to provision, deploy, test, or manage a resource, relevant data and credentials are sent to that provider.
• Legal and safety reasons. We may preserve or disclose information when reasonably necessary to comply with law or legal process, investigate fraud or abuse, protect rights and safety, or establish and defend legal claims.
• Business transactions. Information may be reviewed or transferred as part of a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.
• At your direction. We may disclose information with your consent or when you intentionally publish or share it. Applications deployed to public URLs may be accessible to anyone.

Providers used by or available through Zeneno may include:

This list is illustrative and may change as the Services evolve. Zeneno does not sell personal information and does not use personal information for cross-context behavioral advertising.

Zeneno and its providers use cookies, browser storage, and similar technologies to maintain authentication, preserve preferences, secure sessions, understand usage, and measure performance. Auth0 may use cookies or browser storage for login. Zeneno uses Google Analytics when configured to collect page views, feature events, account-linked user identifiers, performance measurements, and related device data.

Our Google Analytics configuration requests IP anonymization and disables Google Signals and ad-personalization signals. You can restrict cookies through your browser or use available browser extensions, but blocking essential storage may prevent login or other features from working correctly.

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. The period depends on the type of information, whether your account or project remains active, security and support needs, provider limitations, and legal, tax, accounting, or dispute-resolution obligations.

• Account and subscription records are generally retained while your account is active and as needed to administer or document the relationship.
• Sessions, messages, workspace metadata, snapshots, and project records are generally retained while the session remains in your account. Deleting a session removes its active account and database record, but associated workspace, log, or diagnostic objects may remain in cloud storage until operational cleanup occurs. Contact us if you need a broader deletion review.
• Connected-service credentials are retained until you replace or remove them, they are no longer needed, or your account is deleted. Secret credentials stored by Zeneno are encrypted and are masked when displayed.
• Billing and transaction records may be retained longer where required for accounting, tax, fraud prevention, or legal compliance.
• Support, access-request, security, and diagnostic records are retained according to operational need and the nature of the issue.

Deletion may take time to propagate through cloud storage, backups, logs, and third-party systems. Deleting a Zeneno session or account does not automatically delete resources deployed into accounts you control, such as databases, applications, storage, domains, or Stripe objects. You must manage those resources with the relevant provider.

We use reasonable technical and organizational measures designed to protect information, including authenticated access, access controls, transport encryption where supported, monitoring, and encryption of secret connected-service credentials stored by Zeneno. Credentials are decrypted when needed to validate them or carry out an action you request.

No service can guarantee absolute security. You are responsible for protecting your login, limiting the permissions of connected credentials, rotating exposed keys, reviewing generated code, and securing infrastructure in your own provider accounts. Contact us promptly if you believe your account or credentials have been compromised.

Depending on where you live, you may have the right to request access to personal information, receive a portable copy, correct inaccurate information, request deletion, restrict or object to certain processing, withdraw consent, or appeal a denied request. You may also have the right not to be discriminated against for exercising a privacy right.

To submit a request, email [email protected] with the subject “Privacy request.” Describe the account and right involved. We may need to verify your identity or authority before acting. We will respond within the period required by applicable law. Some requests are subject to exceptions, including security, fraud prevention, legal compliance, and records needed to complete a transaction or defend legal claims.

You can also delete individual Zeneno sessions through available product controls and remove connected-service credentials from your settings. If you are in the EEA, United Kingdom, or another jurisdiction with a supervisory authority, you may lodge a complaint with that authority.

United States, including California

The categories of personal information described in Section 2 include identifiers; customer records; commercial and billing information; internet or network activity; professional or company information you provide; project content; and inferences or operational conclusions used to operate and improve the Services. We collect these categories from you, your device, identity and payment providers, and services you connect. We use and disclose them for the purposes in Sections 3 through 6.

Zeneno does not sell personal information and does not share it for cross-context behavioral advertising. Where applicable law provides them, residents may exercise rights to know, access, correct, delete, or obtain a copy of information, and to receive equal service when exercising those rights. An authorized agent may submit a request where permitted, but we may require proof of authority and identity verification.

EEA, United Kingdom, and Switzerland

For users in these regions, Zeneno generally acts as controller for account, billing, website, support, and service-operations data. When Zeneno processes personal data contained in a customer project solely to provide the Services, the parties may need a separate data processing agreement. Contact us before using Zeneno for regulated or large-scale personal-data processing.

Zeneno is operated from the United States, and our providers may process information in the United States and other countries. Those countries may have privacy laws different from the laws where you live. Where required, we rely on recognized transfer mechanisms or other lawful safeguards. By directing Zeneno to use a provider in a particular region, you understand that project data may be processed in that provider’s available locations.

The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from a child in violation of applicable law. If you believe a child has provided personal information to Zeneno, contact us so we can review and, where appropriate, delete it.

We may update this policy as Zeneno, our providers, or applicable law changes. We will post the updated version here and revise the “Last updated” date. If a change materially affects how we use personal information or reduces your choices, we will provide additional notice when required by law.

Questions, complaints, and privacy requests can be sent to [email protected]. Please include “Privacy” in the subject line so the request can be routed correctly.