Privacy Policy

Scope

This policy applies to personal information handled by Zusey websites, account and billing features, hosted assistant-catalog tools, support communications, and related services that link to this policy.

It does not replace the privacy terms of Auth0, OpenAI, Google, Microsoft, Stripe, or another service you choose to connect. Those providers independently control information you submit directly to them.

Information we collect

Account information

We collect information such as your name, email address, application account identifier, email-confirmation status, account roles, and account-creation date. Auth0 processes credentials for Auth0-hosted Google and email/password sign-in. If Zusey's local login fallback is enabled for development or migration, local passwords are stored using one-way password hashing and are not stored in readable form.

Sign-in information

If you use Auth0 sign-in, we receive Auth0's issuer and subject identifiers plus profile details made available for authentication, such as name, email address, and email-verification status. We use the issuer and subject—not the email address—to link the external identity to the local Zusey account.

Subscription information

When billing is enabled, we store subscription status, billing interval, paid-through dates, cancellation state, and Stripe customer, price, and subscription identifiers. Stripe processes full payment-card and payment-method details.

Hosted tool information

Hosted Zusey tools process your account identity, authorization scopes, entitlement state, selected assistant identifier, installed version numbers you supply, and short-lived setup references. These tools are designed not to inspect your local project folder, email, calendar, provider credentials, or host schedules.

Technical and communication information

We and our infrastructure providers may process IP address, request and security logs, browser or device information, timestamps, error details, and similar diagnostics. If you contact us, we process the message and contact details needed to respond.

Auth0 and Google sign-in data

Data we access

Zusey requests only the openid, email, and profile permissions from Auth0 for website login. Auth0 may authenticate you through its email/password database connection or its Google connection. For Google login, Google makes account identifier, name, email address, email-verification status, and related profile details available to Auth0.

How we use and store it

We use this information only to authenticate you, create or connect your Zusey account, prefill your basic account profile, confirm a provider-verified email address, and protect account security. Zusey stores your email address, first and last name, email-confirmation status, Auth0 issuer and subject, login provider, and local account link while your account or connected login remains active.

Zusey does not receive the password you give Auth0 or Google and does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or other Google content through website sign-in. Signing in to the Zusey website does not connect a Google email or calendar account to an assistant.

Sharing, retention, and your choices

We do not sell Auth0 or Google sign-in information, use it for advertising, or use it to train general-purpose AI models. We disclose it only to service providers needed to operate and secure Zusey, when you direct us to disclose it, or for the legal and safety reasons described in this policy.

You can delete your Zusey account through account management or revoke the Google connection from your Google Account's third-party connection settings. Contact us if you need help with the Auth0 identity linked to your Zusey account. Retention and deletion are subject to the limited backup, security-log, fraud-prevention, and legal exceptions described below.

Where project content stays

When you use Zusey inside OpenAI or another connected product, the prompts, files, conversations, and connector data you provide there are processed under that provider’s terms and privacy policy. Limited tool parameters may be sent to Zusey when you invoke a hosted Zusey tool.

You decide what information belongs in a local project and which third-party services are permitted to process it. Avoid placing credentials or unnecessary sensitive information in project files.

How we use information

We use personal information to:

• create, authenticate, secure, and administer accounts;
• provide assistant access, setup references, update checks, and subscription entitlements;
• process billing events and maintain subscription status;
• send account, security, confirmation, invitation, and password-reset messages;
• operate, troubleshoot, protect, and improve the Services;
• respond to support requests and enforce our agreements; and
• meet legal obligations and protect users, the public, and our rights.

We do not use personal information to train general-purpose AI models. We do not sell personal information or share it for cross-context behavioral advertising.

Legal bases for processing

Where a law requires a legal basis, we process information as necessary to perform our agreement with you, comply with legal obligations, protect vital or legitimate interests such as security and service improvement, and act on consent where consent is the appropriate basis.

You may withdraw consent for future processing when consent is the basis, but withdrawal does not affect processing already completed or processing supported by another lawful basis.

How we share information

We disclose information only as needed for the purposes described in this policy:

• Service providers. Hosting, database, security, and email-delivery providers process information for us under contractual or operational restrictions.
• Authentication providers. Auth0 processes the website login flow. Google also receives and returns information when you choose the Google connection in Auth0.
• Payment providers. Stripe processes checkout, payment methods, invoices, subscriptions, and billing-portal activity when billing is enabled.
• Services you direct. OpenAI and other connected providers process information when you choose to use their products or invoke a connection.
• Legal and safety needs. We may disclose information when reasonably necessary to comply with law, legal process, or a valid government request; enforce agreements; or protect rights, safety, and service integrity.
• Business transactions. Information may transfer as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

Cookies and similar technology

Zusey uses cookies and similar browser storage that are necessary for sign-in, security, anti-forgery protection, session continuity, and core application operation. A “remember me” selection may keep an authentication cookie longer than the current browser session.

As of this policy’s effective date, the Zusey website does not use advertising cookies or third-party analytics. If that changes, we will update this policy and provide any notice or choice required by law.

Retention and deletion

We keep personal information for as long as reasonably needed to provide the Services, secure accounts, maintain accurate business and subscription records, resolve disputes, and satisfy legal obligations. Retention depends on the information type, account status, legal requirements, and security needs.

You can delete your Zusey account through the account-management page. Account deletion removes the account data held in the application database, subject to records we must retain or that remain with independent providers such as Stripe. Limited information may remain temporarily in protected backups, security logs, or fraud-prevention records before scheduled deletion or isolation.

Deleting a Zusey account does not delete local project files or data held by OpenAI or another third-party provider. Manage those records through the system that holds them.

Security

We use administrative, technical, and organizational safeguards designed for the nature of the information we handle, including access controls, protected credentials, encrypted transport, anti-forgery protections, and provider-specific authentication controls.

No service or transmission method is completely secure. You are responsible for protecting your account, devices, local files, provider connections, and backups. Contact us if you believe your account or information has been compromised.

Your rights and choices

Depending on where you live, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, restrict or object to certain processing, withdraw consent, appeal a decision, and receive equal service when exercising privacy rights.

You can review or update core account details and request account deletion through account management. You may also contact us to make a privacy request. We may need to verify your identity and authority before completing a request, and legal exceptions may apply.

We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics. There is therefore no sale or targeted-advertising opt-out needed for the current Services.

International transfers

We and our service providers may process information in countries other than where you live. When required, we use recognized transfer mechanisms and contractual protections. Privacy and data-protection laws may differ between countries.

Children

The Services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

Changes to this policy

We may update this Privacy Policy as the Services, providers, or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law.

Contact us

For privacy questions or requests, contact:

Coder Foundry
[email protected]

We will respond according to the law that applies to your request.