Privacy Policy

This policy explains what Zaelar collects when you use Zaelar Cloud (the hosted version of the product, at zaelar.com and my.zaelar.com), why, and what control you have over it. If you self-host Zaelar instead, none of this applies — your memory stays on your own machine and there is nothing for us to collect; only what each request needs goes out, with your own keys, to the AI, speech and search providers you choose.

What we collect

• Account data — your email address, a hashed password (we never store or see your password itself), and, if you choose to add them, a billing name and address.
• Usage & billing data — your Energy balance and usage history, and records of any purchases or subscription payments.
• Payment data — when you pay, Stripe collects your card or other payment details directly; we never see or store them. We receive and keep what we need for your receipts and for accounting: what you bought, the amount, the date, and Stripe's reference for the payment.
• Waitlist — if you join the waitlist when free licenses run out, we keep only your email address, to invite you later.
• Technical data — the IP address of requests to our website and sign-up forms, used only to prevent abuse (e.g. spam sign-ups).
• What you say to your agent — the voice and text you send during a session, processed to run your agent and to remember what you've told it (that's the whole point of a personal agent with memory). This is stored only in your own isolated instance, never mixed with any other user's, and we don't read or monitor it — see the next item for the one case where you can choose to share some of it with us.
• Feedback you choose to send — the floating feedback button lets you send us a suggestion or bug report. When you do, you can optionally check a box to attach that session's activity (only that session, nothing from before) so we can diagnose the issue. Nothing beyond your message is ever sent unless you check that box yourself.

Accounts you connect (Google, Spotify)

Your agent can work with your own accounts, but only the ones you connect yourself, from the Connectors tab, after the provider's own consent screen. Nothing is connected by default.

Google user data

When you connect your Google account, Zaelar asks only for the access each feature needs:

• Google Calendar (including Google Meet links on events) — to read your events, and to create, change or cancel the ones you ask your agent to.
• Google Contacts — to read your contacts so your agent knows who you mean, and, only if you turn on contact sync, to save the contacts you add through it.
• Google Photos — only the photos you pick yourself in Google's photo picker.
• Google Drive — the files you open or create through Zaelar; reading the rest of your Drive only if you choose that option when connecting.
• YouTube — read-only access to your subscriptions and playlists, to play what you ask for.

How we use it. Google user data is used only to provide the features you ask your agent for. To answer you, the part of that data a request needs (for example, tomorrow's events) is sent to the AI model provider generating the reply, and only for that purpose. We don't use Google user data for advertising, we don't sell it, we don't use it to develop, improve or train generalized AI or machine-learning models, and no person at Zaelar reads it, except with your explicit permission (for example, a session you choose to attach to feedback), when needed for security or to comply with the law.

How it is stored. The access tokens Google issues are kept only in your own isolated instance, never in our central database, and never shared with other accounts. Google data is fetched when a request needs it; what your agent remembers from it (for example, an appointment you talked about) is stored in your instance's memory, like the rest of your conversation.

How to delete it. Disconnecting Google in the Connectors tab deletes its tokens from your instance at once. You can also revoke Zaelar's access at any time at myaccount.google.com/permissions. Closing your account destroys your instance and everything in it, including anything your agent remembered from Google.

Limited Use. Zaelar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Spotify

Connecting Spotify lets your agent see what is playing on your devices and control playback. The access token is kept in your own instance, and disconnecting Spotify in the Connectors tab deletes it.

Cookies

We use one strictly-necessary cookie (zaelar_cloud_session) to keep you logged in. We also use Google Analytics, which sets cookies, to understand how the site is used — which pages are visited and from where. You can turn it off at any time from Cookie settings or the bar shown on your first visit: once you decline, it is not loaded again. We don't run advertising or sell any data. The product video on the home page is served by YouTube in its privacy-enhanced mode (youtube-nocookie.com): YouTube doesn't set advertising cookies from it, but playing it does connect your browser to Google's servers. If anything here changes, this page will say so before it happens.

Why we process it

• To provide the service you signed up for (your account, your agent, its memory, payments and receipts) — necessary to perform our contract with you.
• To keep records the law requires (invoices and payment records) — legal obligation.
• To prevent abuse and keep the service secure (rate limits, IP addresses on sign-up forms) — our legitimate interest in running a safe service.
• To answer feedback you choose to send — your consent, given by sending it.

We don't use your data for advertising, we don't sell it, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

Who else sees it

Running your agent means a few providers process data on our behalf, only for that purpose and under their own contractual data-protection commitments. We don't share your data with anyone else, and never for advertising.

• Hosting & infrastructure — Cloudflare (website, network, DNS), Fly.io (your agent's own isolated machine and storage, hosted in the United States), Neon (account database).
• Payments — Stripe (payments, receipts, the billing portal).
• Email — Resend (account and payment emails).
• Voice — LiveKit (the real-time voice connection), Deepgram (speech to text), Inworld and ElevenLabs (your agent's voice).
• AI models — the model providers that generate your agent's replies and process its memory: DeepSeek, Z.ai (Zhipu), OpenAI (memory embeddings and web search) and Google (web search). They receive the part of the conversation needed for each request.
• Errands you ask for — when you ask your agent to find or book something, it may send that request to an outside service or agent on your behalf. It only sends what the errand needs.

International transfers

Some of these providers process data outside the European Economic Area — in the United States and, for some AI model providers, in China and Singapore. Where a country isn't recognised by the EU as offering adequate protection, the transfer relies on the European Commission's standard contractual clauses or an equivalent safeguard. Ask us at [email protected] for details of the safeguard that applies.

If something goes wrong

We work to keep your instance secure (see Security), but no online service can guarantee against every possible breach. Because each account runs on its own isolated machine and database, an incident affecting one account's instance doesn't expose any other account's. If we discover unauthorized access to your data, we'll tell you without undue delay and explain what we know.

How long we keep it

For as long as your account is open. Closing your account (from your account page) immediately destroys your agent's own instance and everything stored in it. Invoices and payment records are kept for the period tax and accounting law requires (six years in Spain), and then deleted. A waitlist email is deleted when you ask, or once we've invited you and you haven't signed up within a year.

Your rights

You can access, correct, export or delete your data, object to or restrict how we process it, and withdraw any consent you've given. Most of it you can do yourself from your account page; for anything else, email [email protected] and we'll answer within one month. If you're not happy with how we've handled your data, you can complain to a data-protection authority — in Spain, the Agencia Española de Protección de Datos — or the one where you live.

Children

Zaelar isn't directed at children, and we don't knowingly collect data from anyone under 16.

Changes

If this policy changes in a way that matters, we'll update the date above and, for anything significant, let you know directly.

Contact

Questions about this policy or your data: [email protected].