Privacy Policy

This policy explains what Zaelar collects when you use Zaelar Cloud (the hosted version of the product, at zaelar.com and my.zaelar.com), why, and what control you have over it. If you self-host Zaelar instead, none of this applies — your data never leaves your own machine, and there is nothing for us to collect.

What we collect

• Account data — your email address, a hashed password (we never store or see your password itself), and, if you choose to add them, a billing name and address.
• Usage & billing data — your Energy balance and usage history, and records of any purchases or subscription payments.
• Technical data — the IP address of requests to our website and sign-up forms, used only to prevent abuse (e.g. spam sign-ups).
• What you say to your agent — the voice and text you send during a session, processed to run your agent and to remember what you've told it (that's the whole point of a personal agent with memory). This is stored only in your own isolated instance, never mixed with any other user's, and we don't read or monitor it — see the next item for the one case where you can choose to share some of it with us.
• Feedback you choose to send — the floating feedback button lets you send us a suggestion or bug report. When you do, you can optionally check a box to attach that session's activity (only that session, nothing from before) so we can diagnose the issue. Nothing beyond your message is ever sent unless you check that box yourself.

Cookies

We use one strictly-necessary cookie (zaelar_cloud_session) to keep you logged in. We don't run analytics, advertising, or tracking cookies of any kind today. If that ever changes, this page will say so before it happens.

Who else sees it

Running your agent means a handful of infrastructure and AI providers process data on our behalf, under their own security commitments — we don't sell or share your data for advertising, ever. Today that includes: Cloudflare (network, DNS, hosting the site itself), Fly.io (runs your agent's own isolated instance and storage), Neon (the account database), Resend (sends account emails like sign-up confirmation and password resets), LiveKit (the real-time voice connection), ElevenLabs (turns your agent's replies into speech), and one or more third-party AI model providers that generate your agent's responses to what you say. Once payments are enabled, Stripe will process those — it doesn't yet, no payment data is collected today.

If something goes wrong

We work to keep your instance secure (see Security), but no online service can guarantee against every possible breach. Because each account runs on its own isolated machine and database, an incident affecting one account's instance doesn't expose any other account's. If we discover unauthorized access to your data, we'll tell you without undue delay and explain what we know.

How long we keep it

For as long as your account is active. Closing your account (from your account page) immediately destroys your agent's own instance and everything stored in it. We may keep minimal account records — your email and billing history — for a while afterwards where we're required to for accounting purposes; email [email protected] if you'd like those erased sooner.

Your rights

You can see and edit your profile data any time from your account page, export what we hold on request, and close your account whenever you like. Email [email protected] for anything this page doesn't cover — correcting, restricting, or fully erasing your data, or a complaint about how we've handled it.

Children

Zaelar isn't directed at children, and we don't knowingly collect data from anyone under 16.

Changes

If this policy changes in a way that matters, we'll update the date above and, for anything significant, let you know directly.

Contact

Questions about this policy or your data: [email protected].