Policy

Privacy Policy

What ZeroWidth collects, how we use it, and what we don't.

At ZeroWidth, we value and respect your privacy. This Privacy Policy outlines our commitment to safeguarding the personal information you entrust to us when you use our tools and services. Our aim is to be transparent about the data we collect, why we collect it, and how we use it, while keeping it secure and confidential.

By using ZeroWidth's services, you agree to the terms set forth in this Privacy Policy and our overarching Terms of Service.

Summary

We collect the minimum necessary to provide the service.
We don't sell personal data to third parties.
We use a small set of subprocessors to operate the product. See Subprocessors.
You can request access to, correction of, or deletion of your data at any time.
We store data in the United States on Google Cloud Platform.
When you delete data, we remove it from our systems promptly thereafter.

How does ZeroWidth collect data about me?

ZeroWidth collects data about you:

when you browse our websites (zerowidth.ai and product subdomains)
when you create an account, sign in, or update your profile
when you use any ZeroWidth tool (Caliper, Workbench, Compass, Chat, …) directly or through its API
when you contact us for support, privacy requests, legal matters, or other inquiries

ZeroWidth may also inadvertently collect data about you if:

it is included in content another customer uploads to or configures within our tools (e.g., a dataset that names you)
it is included in data that is processed through the ZeroWidth API by another customer
you use an application built on top of ZeroWidth that processes your data on its operator's behalf

In those cases, the customer who uploaded or sent the data is the controller; we process it as their processor under the Data Processing Addendum.

What data is collected about me?

Website + product usage data

When you visit a ZeroWidth website or use a product surface, we use cookies and server-side logs to record what pages and actions you visited and when. We also collect technical information about your software and device, including (but not limited to):

your IP address
your preferred language
your web browser and operating system
the referring website

We use this data to:

operate, secure, and optimize the services
diagnose and debug technical errors
defend the services from abuse and attacks
understand aggregate usage patterns to guide product development

See the Cookie Policy for the specific cookies and similar storage we set.

Account data

Most ZeroWidth features require an account. Creating one requires a working email address; the rest of your identity comes from your chosen sign-in provider (Google, Microsoft, SAML, or magic link, via WorkOS — we never see your password). We use your email and identity to:

identify you across ZeroWidth services and workspaces
notify you about actions on your account
reset your authentication and help keep your account secure
contact you about support, billing, legal, and privacy requests
(with your consent or based on your account state) announce service changes, new features, or relevant paid offerings

You can optionally upload a profile picture. Your chosen name and profile picture may be visible to other members of workspaces you join, and to recipients of any content you share through the service.

Workspace and product data

When you use ZeroWidth's tools, you configure workspaces, flows, datasets, rubrics, knowledge pages, agents, integrations, and API keys. The data tied to these — and any other content you push through the tools — is stored and managed by ZeroWidth so the things you configured keep working:

Workspace data. Members, roles, settings, configuration, metadata, billing details, and analytics for each workspace you create or join.
Flow data. Configurations, prompts, node graphs, agent definitions, integration credentials, and run history for flows you build in Workbench.
Processed data. Anything you send to ZeroWidth — through the API, through the UI, or as input to a flow — for processing, analysis, evaluation, or any other purpose. This includes raw inputs, intermediate state, and the outputs models return on the way back.

You retain ownership of this data. We hold it only as long as needed to provide the services you're using; see Data Retention below for specifics.

AI calls

When you run a flow that calls a large language model, the input you supply and the output the model returns transit our infrastructure on the way to and from the provider (currently OpenRouter, on our side; or any provider you configure directly with your own key). We persist the request payload, the provider's response, and metadata (tokens, latency, model version) so you can review and replay the run.

We do not use your content to train or fine-tune any model, ours or anyone else's. See the Data Usage Policy for the full scope of what we will and won't train AI on, including the narrow carve-outs.

Text-messaging data

If you text one of our assistants through ZeroWidth's messaging number — or add a phone number to your account for verification codes, alerts, or scheduled summaries — we collect your phone number, the messages exchanged, and your opt-in and opt-out status. Assistant-conversation content is available to the team that operates the assistant you're texting, and those transcripts on the messaging system are deleted when a conversation ends. See the SMS Terms for the full program description.

Why does ZeroWidth collect my data?

We collect data to:

register, maintain, and manage your account, and offer the services you signed up for
understand user needs so we can refine and expand the product
send you relevant notifications, updates, and (where you've opted in) offers
monitor, troubleshoot, and optimize service performance
protect against fraud, unauthorized access, and abuse
comply with applicable legal, regulatory, and policy requirements
process and manage data you send through our API or interface, so the tools you've configured keep working

We collect data only when necessary, with a firm commitment to transparency and respect for your privacy.

How is my data used?

Improving the services

Aggregate usage data tells us where the product helps and where it doesn't. We use that to refine features, prioritize new ones, and retire what isn't earning its keep.

Service maintenance and support

Your email is the primary channel for service-related communication: outages, security notifications, billing updates, support replies, and product changes that affect what you've configured.

Security

We analyze data patterns to detect and counter unauthorized or malicious activity — both on individual accounts and against the service as a whole. This protects your account and the integrity of the service.

Legal and regulatory obligations

We may use collected data to comply with lawful legal process — court orders, subpoenas, regulatory inquiries — and to defend our rights or respond to claims. When we receive any such request, we evaluate it for validity and scope before responding.

Operating the tools you configure

When you send data through our API or interface for processing, we use that data only to run the tools you've configured. We don't repurpose it for unrelated analysis or share it outside the chain of subprocessors needed to deliver the result.

Limited inspection for safety

A small number of authorized ZeroWidth personnel may inspect specific data when investigating a credible abuse report, security incident, or terms-of-service violation. We don't browse Customer Content for any other reason. See the Data Usage Policy for the scope of this carve-out and the retention applied to the resulting case records.

Trusted partners (subprocessors)

We share specific data with a small set of subprocessors who help operate the service. Each is bound by a data-processing agreement that imposes obligations no less protective than our own Data Processing Addendum. The current list — who they are, what each does, and where they process — lives on the Subprocessors page, with reasonable advance notice before any new addition takes effect.

Legal obligations

On occasion, we may be compelled to share specific data due to legal obligations — responding to lawful requests from regulatory bodies, court orders, or other proceedings. In all such cases, our priority remains the safeguarding of our users' rights and interests, and we evaluate each request for validity and scope before responding.

Protecting ZeroWidth's interests

There may be situations where we believe sharing data is necessary to protect ZeroWidth's rights, interests, and property — cases involving potential fraud, threats to security, or technical vulnerabilities. In such scenarios, our priority is the continued security, reliability, and integrity of the service.

Nobody else

We do not sell personal data, share it with advertisers, or use your private Customer Content to train generative models.

Mobile information — your phone number, text-message content, and text-messaging opt-in status — is never shared with third parties or affiliates for marketing or promotional purposes.

Data retention

We hold data only as long as needed for the purpose it was collected. Retention periods reflect the nature of the data, its utility for ongoing operations, and applicable legal obligations.

Website + product usage data

Logs of pages visited, technical environment, and similar usage data are retained for a limited operational period. We use this for security investigations, debugging, and aggregate analytics.

Account data

Your account information — email, profile, workspace memberships — is retained as long as your account remains active. If you close or delete your account, we anonymize or delete your account data promptly thereafter, unless we have a legitimate business or legal reason to retain specific records (e.g., billing history for tax compliance).

Customer Content + processed data

Workspace content (pages, datasets, rubrics, flows, agents, run history) is kept as long as the workspace is active. When you delete a specific item, we remove it from our systems as soon as routine processing allows, to the fullest extent practicable. Routine backups and operational logs roll off on their own retention schedules thereafter.

Aggregate or de-identified statistics that cannot identify any individual user may be retained longer for analytics and product improvement.

Data shared with subprocessors

Data shared with subprocessors is subject to the retention policies of those services, as described on the Subprocessors page.

Adjustments

Legal or regulatory requirements may occasionally require longer retention of specific data. If we adjust our retention policies, we'll update this page and the change-log at the bottom.

Your rights regarding your data

Depending on where you reside, you have certain rights concerning your personal data under laws including the General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA / CPRA). Below are the key rights:

Access

You have the right to request access to the personal data we hold about you — what we hold, how and why we process it, who we share it with, and how long we retain it.

Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request its correction.

Erasure ("right to be forgotten")

In certain circumstances you have the right to request the deletion of your personal data. This isn't absolute and may be limited by our own legal obligations (e.g., billing records, audit trails, court orders).

Restriction of processing

You have the right to request a restriction on the processing of your personal data — for example, while we verify its accuracy or the legitimacy of the processing.

Data portability

In certain circumstances you have the right to receive the personal data we hold about you in a structured, commonly-used, and machine-readable format, and to transmit that data to another entity.

Objection to processing

You have the right to object to the processing of your personal data for direct marketing purposes or when our processing is based on legitimate interests.

Automated decision-making and profiling

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you.

Exercising your rights

To exercise any of these rights, email contact@zerowidth.ai with "Privacy" in the subject. We respond within the timeframes required by applicable law.

You also have the right to lodge a complaint with your supervisory authority (EU / UK) if you believe we are processing your personal data in a way that violates applicable law.

Cookies

We use cookies and similar browser-side storage to keep you signed in, remember your preferences, and operate the service. We do not run third-party analytics or advertising cookies.

For the full list of cookies and similar storage we set — and what each is for — see the Cookie Policy.

You can manage or block cookies using your browser settings; if you block our session cookie you will not be able to sign in.

Children's privacy

ZeroWidth takes children's privacy seriously. Our services are designed for businesses and adults; they are not intended for children under the age of 13. We do not knowingly collect or solicit personal information from children under 13, or knowingly allow such persons to register for an account.

If we learn we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to remove that information. If you believe we may have any information from or about a child under 13, please contact us immediately at contact@zerowidth.ai.

We recommend that minors 13 years of age or older ask their parents for permission before submitting personal information online, and we encourage parents to teach children safe internet practices.

Parents can review, request the deletion of, or prevent further collection or use of their child's personal information by contacting us. Information collected for the sole purpose of obtaining verifiable parental consent or providing notice to parents is not retained if parental consent is not granted within a reasonable time.

Data transfers across borders

ZeroWidth operates primarily in the United States but has users and partners around the world. We and our subprocessors may transfer your personal data to, or access it in, jurisdictions (including the United States) that may not provide equivalent levels of data protection as your home jurisdiction.

We take steps to ensure your personal information receives an appropriate level of protection wherever it is processed. Where required, we rely on the EU Standard Contractual Clauses (and UK equivalents) as the transfer mechanism between the EEA / UK / Switzerland and the United States. See the Data Processing Addendum for the contractual details.

If you have questions or concerns about international transfers of your personal data, contact us.

Third-party links

ZeroWidth's services may contain links to third-party websites or services not owned or controlled by ZeroWidth. These links are a convenience and do not signify endorsement or affiliation.

We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. You acknowledge and agree that ZeroWidth is not responsible or liable, directly or indirectly, for any damage or loss arising from your use of or reliance on any such third-party site or service.

We strongly advise you to review the privacy policy and terms of service of every site you visit or service you use. If you decide to access any third-party site linked from our services, you do so at your own risk.

Changes

When we change this policy materially, we'll notify workspace administrators by email. The change log lives at the bottom of this page.

How to contact us

For privacy inquiries, deletion requests, or to exercise any of the rights described above:

contact@zerowidth.ai — subject line "Privacy"

For data-protection-specific inquiries, you can reach our Data Protection Officer directly:

dpo@zerowidth.ai

ZeroWidth, LLC