Privacy Policy

The controller for Personal Data processed through the Service is [Legal entity name, to be confirmed], registered at [Registered company address, to be confirmed]. Where this policy says "we", "us" or "Zagvo", it means that entity.

Our privacy contact is Zagvo's legal and privacy team (legal@zagvo.com), reachable at legal@zagvo.com. Where we are required to appoint a representative in the European Union or the United Kingdom, that representative is [EU / UK representative, to be confirmed].

We act as a controller for account, billing, support and analytics data: we decide why and how that data is processed.

For Customer Content, we act primarily as a processor on your instructions: we store it, transmit it to AI Providers to generate the Output you ask for, and return it to you. If you place another person's Personal Data inside a Project, you are the controller of that data and are responsible for having a lawful basis to include it.

This policy does not cover third-party AI builders, repositories, hosting platforms or analytics tools that you connect to or paste Zagvo Output into, nor websites we link to. Review their policies separately.

Your email address, and the password hash if you register with an email and password. We never store passwords in plain text. If you register through Google sign-in, we receive your email address, name and profile image from Google. We never receive your Google password.

An optional display name, avatar image and workspace preferences such as notification and interface settings. All of these are optional and editable in settings.

Session tokens, refresh tokens, sign-in timestamps, IP address and user agent at sign-in, password reset tokens, and records of failed sign-in attempts. This data exists to keep your Account secure and to let us investigate suspicious access.

Project names and descriptions, discovery answers, build plans, phases and tasks, task status and progress, launch readiness state, and any notes you record. This is the substance of your Workspace.

Messages you exchange with the mentor and with guided discovery, the prompts we construct from your Project, and the replies returned. We retain these so conversations stay coherent, so your Project has continuity, and so you can return to earlier reasoning.

Documents you generate (product briefs, PRDs, technical specifications, database schemas, API specifications, UX flows, QA checklists, security reviews and launch checklists) together with their version history, approvals, change events and the structured project knowledge derived from them.

Files and screenshots you upload to a Project, their filenames, size, type and upload time, and any text extracted from them for analysis. Do not upload material you are not permitted to share, and do not upload secrets such as production credentials or private keys.

Which pages and features are used, when key actions occur (for example creating a Project, generating a document or completing a task), feature adoption, error events, and aggregate credit consumption. We use this to understand what works and to size capacity, not to build advertising profiles.

IP address, approximate location derived from it at city or country level, browser type and version, operating system, device type, screen size, language, referring URL, and request timestamps. Our bot-protection and rate-limiting systems also process request metadata to distinguish legitimate traffic from automated abuse.

Cookies and browser storage used for authentication, security and preferences, and, where permitted, analytics. Categories, purposes and durations are set out in full in our Cookie Policy.

Plan, subscription status, billing period, renewal and cancellation dates, invoice history, amounts, currency, tax status, credit allocations and credit consumption records.

Messages you send through the contact form or by email, and our replies, including any diagnostic detail you choose to share.

We send product and marketing email only where you have opted in or where permitted by law for existing customers. Every marketing email includes an unsubscribe link. Transactional messages that are necessary to operate your Account cannot be unsubscribed from while your Account is active.

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. Automated systems do apply rate limits and flag suspected abuse, but enforcement decisions that suspend or terminate an Account involve human review, as described in the Acceptable Use Policy.

When you ask the Service to generate a document, plan, task breakdown or mentor reply, we assemble a prompt from your instruction and the relevant parts of your Project (such as discovery answers, approved documentation and project memory) and send it to an AI Provider over an encrypted connection. The Provider returns Output, which we store in your Project and display to you.

We reach model providers through an AI gateway rather than contracting with each model vendor individually. Requests are transmitted under contractual terms that restrict use of the transmitted content to generating your response. A current list of AI Providers is available on request from legal@zagvo.com.

For every AI action we record metadata: which Project it belonged to, the feature that triggered it, the model used, token counts, credits consumed, latency and whether the request succeeded. This supports billing accuracy, quality investigation and abuse detection.

AI Output can be inaccurate, incomplete or confidently wrong. Do not put information into a prompt that you would not be comfortable transmitting to a third-party processor, and review Output before relying on it. Section 15 of the Terms of Service sets out the limitations of AI Output in more detail.

Application data is stored in a managed cloud database and object storage; the Service is delivered from a global edge network. Our primary hosting region is the United States (USA), with India as a secondary region. Edge delivery means static assets and request routing may be handled from a location near you, while your Project data remains in the primary region.

We keep data only as long as it serves the purpose it was collected for, or as long as the law requires.

Encrypted backups are retained on a rolling schedule for disaster recovery. Deleted data may persist in backups for a limited period after deletion from the live system, and is overwritten as backups rotate. Backups are never used to resurrect data you deleted.

Data is encrypted in transit using TLS, and encrypted at rest by our database and storage providers. Passwords are stored only as salted hashes. Secrets and API keys are held in a managed secret store and are never committed to source code or exposed to the browser.

The Service enforces row-level authorisation in the database: queries are evaluated against the identity of the signed-in user, so one Account cannot read another Account's Projects even if a request is manipulated. Administrative capability is separated from ordinary product use, and administrators do not gain automatic access to customer Project content or the ability to edit it.

Access to production systems is limited to personnel who need it, granted on a least-privilege basis, protected by multi-factor authentication, and revoked promptly when it is no longer required. Personnel are bound by confidentiality obligations. We access Customer Content only to resolve a support request you have raised, to investigate a suspected violation or security incident, or where legally compelled.

We log authentication events, administrative actions, billing changes, document lifecycle events such as generation, approval and version changes, and AI request metadata. Logs are retained for investigation and are protected against casual access.

We maintain an internal process for triaging and responding to security incidents. Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected users without undue delay and, where required, within 72 hours of becoming aware of it.

Use a strong, unique password, keep your credentials private, do not share Accounts, and tell us immediately if you suspect unauthorised access. Do not store production credentials, private keys or customer databases inside a Project.

We may disclose information where required by law, to respond to a valid legal process, to protect our rights or the safety of users, or in connection with a merger, acquisition or sale of assets. In a corporate transaction we will give notice before your data becomes subject to a different privacy policy, and the acquirer will be bound by commitments no less protective than these.

We may add or replace sub-processors as the Service evolves. Where required by contract or law, we will provide notice and an opportunity to object before a new sub-processor begins processing your data.

• Access: obtain confirmation of whether we process your data and a copy of it.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your data deleted where we no longer have grounds to keep it.
• Restriction: limit how we process your data while a dispute is resolved.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent: where processing relies on consent, withdraw it without affecting prior processing.
• Complain: lodge a complaint with your local supervisory authority. We ask that you contact us first so we can try to resolve it.

If you are a California resident, you have the right to know what Personal Data we collect and the purposes for it, to request deletion, to request correction, to opt out of sale or sharing, to limit use of sensitive personal information, and not to be discriminated against for exercising these rights.

We do not sell Personal Data and we do not share it for cross-context behavioural advertising, so there is no opt-out to exercise. We do not use or disclose sensitive personal information beyond the purposes permitted without a right to limit. Residents of other US states with comparable laws have equivalent rights and may exercise them the same way.

You can export individual documents from your Workspace in Markdown, PDF or DOCX at any time. For a complete export of your Account and Project data, contact us and we will provide a machine-readable archive.

Account and profile details can be corrected directly in settings. For information you cannot edit yourself, contact us and we will correct it or explain why we cannot.

You can delete individual Projects, documents and files at any time. To delete your entire Account, contact us. Deletion removes your Personal Data and Customer Content from the live Service, subject to backup rotation described in Section 8.3.

Email legal@zagvo.com from the address associated with your Account, or use the contact page. We respond within 30 days and may extend by a further 60 days for complex requests, telling you if we do. We may need to verify your identity before acting. Authorised agents may submit requests with written proof of authority. Exercising these rights is free unless a request is manifestly unfounded or excessive.