Privacy policy

1. Introduction

This policy explains how we collect, use, and protect your information when you use Zalus AI.

2. Data we collect

• Account and contact data
• Usage and device data
• Workflow and conversation content
• Integration data (Google, WhatsApp) based on your setup

3. How we use data

• Provide and improve the service
• Run the automations you configure
• Billing, support, and security
• Legal compliance

4. Google Workspace data

Data accessed: if you connect Google Workspace, we may access the data you explicitly authorize through OAuth, including your Google account email and basic profile, Gmail messages and metadata needed to send, read, or search email, Google Drive files and metadata for files you connect or create through Zalus, Google Calendar events you choose to manage, and Google Sheets spreadsheets that you choose to read or update.

Data usage: we use Google Workspace data only to authenticate the connection and perform the feature or workflow you request, such as sending email, searching messages, creating events, reading files, or updating spreadsheets for your workspace.

If you trigger AI-assisted features on Google Workspace content, the content strictly necessary for that feature may be processed by our infrastructure or AI providers only to deliver the requested functionality for your workspace.

We do not use Google Workspace data for advertising or data resale.

5. Data sharing

We do not sell your personal data or Google Workspace data.

We may share data with hosting, database, authentication, communications, or AI service providers only when necessary to operate the service or complete the action you requested.

We do not share Google Workspace data with third parties for advertising, resale, or profiling unrelated to the user-requested functionality.

6. Storage, protection, retention, and deletion

• OAuth access tokens and refresh tokens are encrypted before storage.
• We apply access controls, monitoring, and reasonable security safeguards to protect stored data.
• We retain Google Workspace connection data and related operational data only as long as needed to provide the service, comply with legal obligations, resolve disputes, or enforce agreements.
• You can revoke access from your Google permissions page or request deletion by emailing j.delahoz@zalus.io.
• When a workspace owner disconnects Google Workspace, we attempt to revoke the token and delete the stored connection record.

7. Your rights

To exercise rights, contact j.delahoz@zalus.io.

• Access, correction, and deletion
• Portability and objection
• Consent withdrawal

8. Changes and contact

We may update this policy and publish material changes.

Privacy contact: j.delahoz@zalus.io.