Legal

Privacy Policy

Last updated: July 13, 2026

1.Introduction

Welcome to ZCA.ai ("ZCA", "we", "our", or "us"). We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have regarding your data when using our platform at https://zca.ai (the "Service").

2.Information We Collect

Information you provide directly to ZCA.ai:

Name and email address during account registration.
Account profile information.
Task, journal, and productivity data that you choose to create within ZCA.ai.
Payment information, which is processed securely by Stripe. ZCA.ai does not store your payment card details.
Communications you send to us, such as support requests.

Information collected automatically:

Usage, diagnostic, and analytics data generated by your interactions with the ZCA.ai application itself (such as feature usage, device type, and error logs). This category does not include the contents of your Google user data.

Information from third-party services you connect:

Calendar information from connected calendar providers (such as Google Calendar, Microsoft Outlook, or iCloud) when you explicitly authorize access.
Google user data obtained through Google OAuth — calendar read access, calendar event management, Gmail sending, and basic Google profile information — limited to the scopes you explicitly grant, as described in Section 4. ZCA.ai does not request or access Google Drive.

3.How We Use Your Information

The uses in this section apply to information you provide directly to ZCA.ai and to automatically collected usage data. Google user data is used only as described in Section 4.

We use your information to:

Create and manage your account.
Provide the AI-powered productivity features you request.
Process subscriptions and payments.
Improve the ZCA.ai application, using only data generated within ZCA.ai (never the contents of your Google user data).
Protect the security and integrity of the platform.
Respond to customer support requests.
Comply with legal obligations.

4.Google User Data

If you choose to connect your Google account, ZCA.ai requests access only to the minimum Google OAuth scopes necessary to provide the specific features you enable. We do not request Google Drive access.

Depending on the permissions you grant, ZCA.ai uses the following Google scopes:

Calendar read access (calendar.readonly) — to list your Google calendars and read calendar events so we can display your schedule, sync day and week views, and detect scheduling conflicts inside ZCA.ai.
Calendar event management (calendar.events) — to create, update, or delete Google Calendar events only when you initiate or approve that action inside ZCA.ai (for example, scheduling a meeting through the AI assistant).
Gmail sending (gmail.send) — to send email on your behalf through Gmail, only when you explicitly compose or approve a specific message inside ZCA.ai.
Basic profile information (openid, userinfo.email, userinfo.profile) — to see your primary Google Account email address and publicly available personal info, solely to authenticate you and identify your connected account.

How we limit our use of Google user data:

Google user data is used solely to provide and improve the specific user-facing features you have enabled within ZCA.ai, and for no other purpose.
We do not use Google user data for advertising, ad targeting, or ad personalization.
We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence and/or machine learning models. Where AI features process your Google user data (for example, summarizing your calendar), that processing occurs only at your request, only to deliver the feature to you, and the data is not retained to train models.
We do not sell Google user data, and we do not transfer it to third parties except: (a) to provide or improve user-facing features at your direction, using service providers bound by this policy; (b) to comply with applicable law; (c) as part of a merger or acquisition, with prior notice to you; or (d) for security purposes such as investigating abuse.
Human access is restricted. ZCA.ai personnel do not read your Google user data except: (a) with your explicit consent; (b) when necessary for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) when the data has been aggregated and anonymized for internal operations.

5.Limited Use Compliance

ZCA.ai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

6.How We Store and Protect Google User Data

Google user data is transmitted using encryption in transit (TLS/HTTPS) and stored using encryption at rest. OAuth tokens are stored encrypted and are never exposed to your browser or to third parties. Access to production systems is restricted to authorized personnel and protected by access controls and logging.

7.Third-Party Services

We use trusted third-party providers to operate ZCA.ai, including:

Google APIs (calendar and email features you enable)
Microsoft Outlook APIs and Apple iCloud services (calendar features you enable)
Stripe (payment processing)
Cloud hosting and analytics providers

These providers process data only as necessary to deliver their services to us and are bound by contractual confidentiality and data-protection obligations. Our analytics providers do not receive the contents of your Google user data.

8.Data Sharing

We do not sell or rent your personal information or Google user data.

We may share information only:

With trusted service providers that help operate ZCA.ai, as described in Section 7.
When required by law, legal process, or governmental request.
To protect the rights, safety, and security of ZCA.ai, our users, or the public.

9.Data Retention and Deletion

We retain your information only for as long as necessary to provide our services or comply with legal obligations.

Google user data: Calendar, email, and profile data accessed from Google is processed to deliver the feature you requested and cached only as long as needed for that feature to function.

If you disconnect your Google account — from ZCA.ai settings, we stop accessing your Google data immediately and delete stored Google user data associated with the connection within 30 days.
If you delete your ZCA.ai account — all of your personal data, including any stored Google user data and OAuth tokens, is deleted within 30 days, except where retention is required by law.

You may also request deletion at any time by emailing info@zca.ai.

10.Your Rights

Depending on your location, you may have the right to:

Access your personal information.
Correct inaccurate information.
Request deletion of your account and associated data.
Receive a copy of your data in a portable format.
Withdraw your consent.
Object to certain processing activities.

To exercise these rights, contact us at info@zca.ai.

11.Revoking Google Access

You may disconnect your Google account at any time:

From your ZCA.ai account settings ("Connected Accounts" → "Disconnect"), or
From your Google Account security settings at https://myaccount.google.com/permissions.

Upon revocation, ZCA.ai's access to your Google data ends immediately, and stored Google user data is deleted as described in Section 9.

12.Children's Privacy

ZCA.ai is not intended for individuals under the age of 16, and we do not knowingly collect personal information from children.

13.Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date. If changes materially affect how we handle Google user data, we will notify you and, where required, request your consent before the changes apply.

14.Contact Us

If you have questions regarding this Privacy Policy or your data, please contact:

Email: info@zca.ai

← Back to home info@zca.ai