Privacy Policy

ZorbasAI, Inc. ("ZorbasAI", "we", "us") respects your privacy. This Privacy Policy explains what personal information we collect when you visit our website or use our products, how we use it, and the choices you have. By using our services, you agree to the practices described here.

1. Scope of this policy

This policy applies to information we collect through our website, sales and support interactions, and the operation of our products. It does not apply to third-party websites or services that may link to or from ours. Where we process personal information on behalf of a customer (for example, content submitted to our models), the customer is the controller and our handling is governed by our customer agreements.

2. Information we collect

• Information you provide. Your name, work email, company, phone number, and the contents of messages you send us through forms or email.
• Account & usage data. Login details, API usage metrics, and configuration settings when you use our platform.
• Device & technical data. IP address, browser type, operating system, and similar diagnostic data.
• Cookies. See our Cookie Policy for details on the cookies and similar technologies we use.

3. How we use information

We use personal information to:

• Provide, maintain, and improve our products and website;
• Respond to enquiries, demos, and support requests;
• Send service updates and, where permitted, marketing communications you may opt out of at any time;
• Monitor for security, prevent fraud, and meet our legal obligations.

4. Customer data & model inputs

We do not train our foundation models on customer inputs or outputs. Content you submit to a ZorbasAI model in a private or managed deployment remains under your control and is processed only to return a result to you. Deployments inside your own environment never transmit prompts or outputs to ZorbasAI.

5. When we share information

We do not sell personal information. We share it only with:

• Service providers who process data on our behalf under contract (e.g., hosting, analytics, payment processing);
• Professional advisors such as auditors and lawyers, where necessary;
• Authorities when required by law or to protect our rights, users, or the public.

6. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, and ongoing security testing. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our controls.

7. Data retention

We retain personal information for as long as needed to provide our services and for legitimate business or legal purposes. When information is no longer needed, we delete or anonymize it.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the use of your personal information, and to object to certain processing or request portability. To exercise these rights, contact us using the details below. We will respond within the timeframe required by applicable law.

9. International transfers

We are headquartered in Vancouver, Canada, and may process information in other countries. Where we transfer personal information across borders, we use appropriate safeguards, such as standard contractual clauses, to protect it.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

11. Contact us