# Privacy Policy **Last updated:** April 24, 2026 This Privacy Policy explains what ZeroHuman ("we," "us," the "Service") collects, how we use it, and the choices you have. By using ZeroHuman you agree to the practices described here. We've written this in plain language. Where we've had to use legal or technical terms, we've done our best to keep them clean. ## 1. The Short Version We collect what we need to run the Service — your account info, the content you give your agents, and the data required to make integrations work. We use it to operate ZeroHuman, keep it secure, and improve it. We don't sell it. You can export or delete your data at any time. ## 2. Who This Covers This policy applies to anyone using ZeroHuman — founders, operators, customers on paid plans, trial users, and visitors to our marketing site. ## 3. What We Collect **Account data.** When you sign up, we collect your email, a display name, and (if you provide one) a password or magic-link session. If you use a paid plan, we collect billing information through our payment processor — we never see or store your full card number. **Workspace and agent data.** Anything you configure, upload, or generate inside ZeroHuman — your business context, agent personalities, tasks you run, outputs, documents, chat history, uploaded avatars, and any other content you create on the platform. **Integration data.** When you connect third-party services (email, calendar, Telegram, GitHub, Railway, Stripe, and so on), we receive OAuth tokens or API credentials needed to act on your behalf, plus the content those services return while your agents are working (messages, threads, contacts, calendar events, repository data, etc.). **Device and usage data.** Standard web telemetry — IP address, browser type, device type, referrer, pages viewed, feature usage, timestamps, and basic crash diagnostics. We keep this light and use it to operate the Service. **Communications.** Email we exchange with you, support tickets, and in-product feedback. ## 4. How We Use Your Information We use what we collect to: - run the Service — authenticate you, execute agent tasks, sync integrations, deliver output - maintain security — detect abuse, rate-limit, investigate incidents - support you — respond to questions, troubleshoot, communicate about your account - improve the product — understand how features are used, fix bugs, build what users need - bill paid plans and collect payments - comply with legal obligations We do **not** sell your personal information. We do not use your private workspace data to train third-party AI models for other customers. ## 5. How Agents Interact With Your Data ZeroHuman runs your configured AI agents over the content you provide and the services you connect. To do this: - Agent prompts and relevant workspace context are sent to large language model providers on your behalf. - Agents may read from or write to the third-party services you've authorized (send emails, post messages, create files, etc.) within the scope you grant. - Agent outputs are returned to you and retained in your workspace. You stay in control. You can revoke any integration, pause an agent, or delete content from your workspace at any time. See our [Terms of Service](/terms) for the full picture of agent authority. ## 6. Third-Party Services We rely on a small set of vendors to operate the Service: - **LLM providers** (for example, Anthropic, OpenAI) to run agent inference. - **Payment processor** (Stripe) to handle subscriptions and transactions. - **Cloud infrastructure** (for example, Railway, Cloudflare) to host the platform. - **Email delivery** to send magic links and transactional emails. - **Integrations you connect** — Gmail, Google Calendar, Google Drive, GitHub, GitLab, Telegram, Slack, Notion, and others — which you authorize individually through OAuth. Each vendor is bound by its own terms and has access only to the data needed to perform its function. We pick vendors we trust and review them periodically. ## 7. Payments Payments are processed by Stripe. We receive limited metadata (plan, subscription status, billing country, last 4 digits, amount charged) so we can manage your subscription, but Stripe handles and stores the card data itself. Stripe's privacy practices apply to that portion of the flow. ## 8. Cookies and Analytics We use essential cookies to keep you signed in and preserve session state. We may use first-party analytics to understand aggregate product usage. We don't run third-party advertising trackers or sell analytics data. You can clear cookies from your browser at any time. Doing so will sign you out. ## 9. How We Share Data We share data only in the following situations: - **With your authorization** — for example, when you connect a third-party service and explicitly grant access. - **With our vendors** — listed above — under contracts that require them to protect your data. - **For legal reasons** — if we're required to disclose information to comply with a subpoena, court order, or other valid legal process, or to enforce our terms, protect rights, property, or safety. - **In a business transfer** — if ZeroHuman is acquired, merged, or reorganized, your data may transfer to the successor entity, subject to this policy. We do not share your data for anyone else's advertising or marketing. ## 10. How We Protect Data We use industry-standard technical and organizational safeguards — encryption in transit, access controls, least-privilege internal access, and audit logging on sensitive operations. No system is perfectly secure, but we take this seriously. If we discover a breach that affects you, we'll notify you as required by applicable law. ## 11. Retention and Deletion We keep your data for as long as your account is active. If you close your account, we delete workspace content after a reasonable grace period (typically 30 days), except where we're required to retain certain records for legal, tax, or security reasons. You can: - **Export** your data from your account settings at any time. - **Delete** content from your workspace directly. - **Close** your account, which initiates deletion of your workspace and personal data. If you want a hard-delete confirmation or need to exercise a specific right, email us (see Section 16). ## 12. Your Rights Depending on where you live, you may have rights over your personal data — including the right to access, correct, export, delete, restrict processing, or object to processing. We honor these requests where applicable law requires us to, and we aim to honor them as a default practice regardless. **For EU/UK users (GDPR):** you have rights of access, rectification, erasure, portability, and objection. You may also lodge a complaint with your local supervisory authority. Our legal bases for processing are contract performance, legitimate interests in running the Service, your consent where required, and legal obligation. **For California users (CCPA):** you have the right to know what we collect, delete it, correct it, and opt out of any sale or sharing (we don't sell or share personal data for cross-context advertising). To exercise any of these rights, email us at team@cracked.ai. ## 13. International Users ZeroHuman is operated from the United States. If you use the Service from outside the US, your data will be transferred to and processed in the US. By using ZeroHuman you consent to that transfer. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers. ## 14. Children ZeroHuman is not directed at anyone under 18, and we don't knowingly collect personal information from children. If you believe a child has given us personal data, contact us and we'll delete it. ## 15. Changes to This Policy We may update this Privacy Policy as the Service evolves or the law changes. When we make material changes, we'll notify you by email or through the Service at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version. ## 16. Contact Questions, concerns, or requests about your data? Reach us at: **ZeroHuman.** t eam@cracked.ai 1401 Lavaca Street, Suite 737 Austin, Texas 78701 United States _Thanks for trusting us with your work._