Privacy Policy
Zazuria Labs builds services that hold deeply personal and business context — on Idiosynt, the board of advisors you seat and the memory of your business it keeps. That only works if you trust us, so this policy explains, in plain language, what we collect, how we use it, and the control you keep at every step.
The short version: what we build from your information is yours. It’s private by default, you can export everything at any time, you can delete it for good, and we never sell your personal information.
Who this policy applies to
This Privacy Policy applies to Zazuria Labs LLC (“Zazuria Labs,” “we,” “us”) and the websites, apps, browser extensions, and services that link to it (the “Service”) — including idiosynt.com and zazuria.com.
The Service is for people 13 years of age or older. We do not knowingly collect personal information from anyone under 13. If you are between 13 and 17, see 'If you are under 18' below.
Our privacy commitments
These commitments shape every decision we make about your data:
- It belongs to you. We treat the model built from your information — on Idiosynt, your board and its memory of your business — as your property, not our asset.
- Private by default. Nothing is published, shared, or licensed unless you choose to.
- Export anytime. You can download your data whenever you want.
- Delete for real. When you delete something, we delete it — we don’t just hide it.
- Revocable. If you ever grant access or a license, you can pull it back.
- Never sold. We do not sell your personal information, and we don’t use your private data to build services for other users without your explicit consent.
Information we collect
Information you give us
- Account information — your name, email address, and either a password or an identifier from Google or Apple if you sign in with them.
- Service content — on Idiosynt: the documents, business context, questions, and corrections you provide so your board can advise you; on other Zazuria Labs services, the equivalent content you bring.
- Imported content — when you choose to connect or upload exports from other platforms, the content you bring in.
- Communications — messages you send us, support requests, and survey or feedback responses.
-
Sensitive information. Idiosynt is for your work and the questions you bring to your wits. Please do not share health or medical information, government identification numbers, payment card details or passwords with your wits, in Idiosynt or through a connected app; our tools are not designed to hold them. If you do, we treat it like the rest of your content and you can delete it at any time.
- Payment information — billing details are handled by a third-party payment processor; we do not store full card numbers.
Information we collect automatically
- Usage and device data — pages and features used, actions taken, approximate location derived from your IP address, browser and device type, and log data.
- Cookies and similar technologies — used to keep you signed in, secure the Service, and (if enabled) understand product usage. See “Cookies and tracking” below.
Information from third parties
- Sign-in providers — if you use Google or Apple, we receive basic profile information such as your name and email to create and secure your account.
- Connected platforms — if you authorize an import, we receive the data those services make available based on the permissions you grant.
How we use your information
- To operate the Service for you — on Idiosynt, maintaining your board’s memory of your business so its counsel improves with use.
- To provide the Service — authentication, security, saving your work, and delivering the features you use.
- To improve the Service — diagnosing problems and understanding what’s working, using the least identifiable data necessary.
- To communicate with you — service messages, security alerts, and (where permitted) product updates you can opt out of.
- To keep people safe and comply with law — preventing abuse and fraud, enforcing our Terms, and meeting legal obligations.
We do not sell your personal information, and we do not use your private content to train models that serve other users unless you explicitly license it or consent.
AI processing and service providers
Delivering the Service requires trusted service providers (“sub-processors”) who process data on our behalf under contract. Today these include:
- Supabase — database, authentication, and storage hosting.
- Vercel — application hosting and content delivery.
- Anthropic — AI model processing.
- Cloudflare — bot protection (Turnstile) and network security.
- Loops — transactional and waitlist email delivery.
- Google and Apple — optional sign-in.
- Product analytics — privacy-conscious usage analytics, when enabled.
Where our AI providers support it, we configure processing for zero data retention, meaning your content is not retained by the model provider after a request is served. If you connect your own AI provider key (“bring your own key”), that provider processes the request under its own terms, which you control.
Connected AI apps
You can connect Idiosynt to an AI app you use, such as Claude by Anthropic or ChatGPT by OpenAI ("connected app"). You choose to connect, you sign in to Idiosynt to approve the connection, and you can disconnect at any time from your Idiosynt account or from the connected app.
When you use a connected app with Idiosynt, the connected app sends us the content you ask it to pass to your wits or boards: your messages, questions, links you ask a wit to look at, and feedback on a memory. We use it to produce your wits' replies and to keep your wits' memory of your work, as described in this policy. We send back your wits' replies, their memories and your boards' deliberations. We do not request or receive your chat history, the connected app's memory, or your files.
The credentials that keep a connection working are encrypted and are deleted when you disconnect. Disconnecting ends the connection; it does not delete the content and memories already saved to your Idiosynt account. Memories your wits form from a connected-app conversation are part of your Idiosynt account, like any other memory, and belong to you. The connected app's tools cannot delete them. You can delete them from Idiosynt at any time. Content you exchange with your wits through a connected app is kept and deleted like the rest of your account content (see "Data retention").
The connected app's own provider handles what you type into that app under its own terms and privacy policy. Anthropic's and OpenAI's handling of your conversations in their apps is governed by their policies, not ours.
Licensing and shared spaces
Some Zazuria Labs services let you choose to license or share what you’ve built with other people. When you do, the recipient receives an ongoing relationship — not a copy — and you can revoke that access at any time, which ends future use. If you participate in a shared space, the people you invite can see what you choose to share there, and you can remove it.
How we share information
We share personal information only in these situations:
- With service providers who process it on our behalf under confidentiality and data-protection obligations.
- At your direction — when you license, share, or otherwise choose to.
- For legal and safety reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and security of people and the Service.
- In a business transfer — if Zazuria Labs is involved in a merger, acquisition, or sale of assets, subject to this policy; we’ll notify you of any change in control of your information.
- In aggregated or de-identified form that cannot reasonably identify you.
We do not sell your personal information and do not share it for cross-context behavioral advertising.
Cookies and tracking
We use strictly necessary cookies to keep you signed in and to protect the Service (including Turnstile bot protection). With your choices honored, we may also use optional analytics cookies to understand usage. You can control non-essential cookies through your browser.
Data retention
We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete the associated personal information from our active systems and purge it from routine backups within a reasonable cycle, except where we must retain limited information to comply with law, resolve disputes, or enforce our agreements.
Your rights and choices
You can exercise these at any time from within the Service or by emailing us:
- Access and export — get a copy of your data.
- Correction — fix inaccurate information.
- Deletion — delete specific content or your entire account.
- Restriction and objection — limit or object to certain processing.
- Withdraw consent — including revoking any access or licensing you’ve granted.
If you are in the EEA, UK, or Switzerland
We process your personal data to perform our contract with you, to pursue legitimate interests (such as securing and improving the Service), to comply with legal obligations, and with your consent where required. You have the rights above and may lodge a complaint with your local data protection authority. Zazuria Labs is the controller of your personal data.
If you are in California
We do not sell or share (as those terms are defined under California law) your personal information, and we have not in the preceding 12 months. You have the right to know, access, correct, and delete your personal information, and not to be discriminated against for exercising these rights. You may use an authorized agent to submit requests.
To make any request, email privacy@idiosynt.com. We will verify your request and respond within the time required by applicable law.
Security
We protect your information with encryption in transit and at rest, row-level access controls, scoped authentication, and least-privilege practices. No system is perfectly secure, but we work hard to safeguard the trust you place in us, and we’ll notify you and regulators of a breach where required by law.
International data transfers
We are based in the United States and process information there and in other countries where our providers operate. Where we transfer personal data internationally, we use appropriate safeguards, such as Standard Contractual Clauses, as required by applicable law.
Children’s privacy
We comply with the U.S. Children's Online Privacy Protection Act (COPPA). The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have, we delete it and close the account. If you believe a child under 13 has provided us information, contact privacy@idiosynt.com and we'll act promptly.
If you are under 18
You may use the Service from age 13 with the consent of a parent or legal guardian, who agrees to our Terms on your behalf. We rely on the representation you make when you create your account; a parent or guardian who did not consent should contact us at privacy@idiosynt.com.
We do not use the personal information of anyone we know to be under 18 for targeted advertising, and we do not profile them except as strictly necessary to provide the features they use, keep the Service secure, and meet our legal obligations.
If you are under 18 and want something you shared removed, you can delete it yourself in the Service: that includes your conversations, your boards' deliberations, and the memories your wits hold about you. You or your parent or guardian can also email privacy@idiosynt.com and we'll remove it from view and from our active systems as the law requires. A parent or guardian may contact us at the same address to review or delete their child's information.
Changes to this policy
We may update this policy as the Service evolves. If we make material changes, we’ll post the updated policy here, update the “Last updated” date, and notify you through the Service or by email where appropriate.
Contact us
Zazuria Labs LLC is a Delaware limited liability company. Our mailing address is 8 The Green, Suite B, Dover, Delaware 19901, United States.
Privacy questions and requests: privacy@idiosynt.com.