Privacy Policy

theszn.ai ("szn™", "we", "our", or "us") provides an AI-powered service that helps users complete real-world tasks. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

We collect information that you provide directly, information generated through your use of the Service, and certain information collected automatically.

Account Information

When you create an account, we may collect:

• First and last name
• Email address
• Profile picture (if provided)
• Phone number (optional)
• Timezone
• Physical addresses you choose to store for tasks

If you sign in using a third-party authentication provider such as Google or Apple, we may receive basic profile information from that provider, such as your name, email address, and profile picture.

Google User Data

With your authorization, szn may access the following Google user data through Google's OAuth 2.0 APIs:

• Profile information — your name, email address, and profile picture, used to create and manage your szn account.
• Gmail (read-only) — email message content and metadata, used to read relevant emails on your behalf when completing tasks you request (for example, finding confirmation emails, extracting booking details, or summarizing communications).
• Google Calendar — calendar events and scheduling data, used to read, create, or modify calendar events on your behalf when completing tasks you request (for example, scheduling appointments or checking availability).

How we use Google user data: Google user data is used solely to provide, maintain, and improve the Service's functionality as described above. We do not use Google user data to serve advertisements, conduct market research, or for any purpose unrelated to providing or improving the Service.

How we store and protect Google user data: Google user data is encrypted in transit (TLS/SSL) and at rest. Access is restricted to automated systems that require it to execute your tasks and to authorized personnel for support and operational purposes. Google user data is retained only as long as needed to provide the Service and is deleted when you delete the associated tasks or your account.

How we share Google user data: We do not sell, lease, or trade Google user data to third parties. Google user data may be shared only with:

• Infrastructure and service providers necessary to operate the Service (for example, cloud hosting), under obligations of confidentiality
• Third-party AI providers, solely to process task-related requests on your behalf — sensitive credentials are never shared with AI providers
• Law enforcement or government authorities, only when required by law

Limited Use disclosure: szn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You may also use certain parts of the Service without creating an account. In those cases, we create a temporary anonymous session identifier to enable the Service to function and to enforce usage limits.

Task and Usage Data

When you use the Service, we collect information necessary to execute and manage tasks, including:

• Task descriptions you submit
• Notes or additional information attached to tasks
• Task execution status, results, and logs
• Records of actions taken by the system to complete tasks

This information allows the Service to understand requests, coordinate actions, and provide task updates.

Optional Stored Credentials

You may optionally store credentials or other sensitive information in a secure vault to enable automated task execution.

Information stored in the vault is encrypted and protected with access controls. Vault information is only accessed when necessary to complete tasks you authorize.

You may delete stored credentials at any time.

Personalization Data

To improve your experience, the Service may store limited information about your preferences or patterns based on past tasks. This helps the system personalize recommendations and task execution over time.

You can review and delete stored personalization data within your account settings.

Communications Data

When the Service communicates with third parties on your behalf to complete a task, we may process communication-related information such as:

• Voice call records and transcripts
• Email messages sent through system-managed inboxes
• SMS messages sent as part of task coordination

These communications may include information necessary to complete your requested task.

Payment Information

Payments are processed by third-party payment providers such as Stripe. We do not store credit card numbers or bank account details on our servers.

We may store identifiers related to your subscription or billing status provided by the payment processor.

Information Collected Automatically

When you use the Service, certain information may be collected automatically, including:

• Device and browser information
• Usage patterns and feature interactions
• Log data such as IP address, request timestamps, and error reports
• Session cookies used to maintain authentication and service functionality

This information helps us operate, maintain, and improve the Service.

2. How We Use Information

We use collected information to:

• Provide and operate the Service
• Execute tasks requested by users
• Personalize user experiences and preferences
• Communicate updates, task progress, or service notifications
• Process payments and manage subscriptions
• Improve product performance and reliability
• Detect abuse, fraud, or security incidents
• Comply with legal obligations

3. How We Share Information

We do not sell your personal information.

We may share information in the following situations:

Service Providers

We work with third-party service providers that help operate the Service, including providers for infrastructure, AI processing, communications, analytics, and payment processing. These providers may access information only as necessary to perform services on our behalf.

Task Execution

In order to complete tasks you request, the Service may share relevant information with third parties involved in the task (for example, businesses or service providers).

AI Processing

Some task processing relies on third-party AI providers. Relevant task information may be sent to these providers in order to generate responses, recommendations, or task actions.

Sensitive credentials stored in the secure vault are not shared with AI providers.

Support and Operations

Authorized personnel may access task data when necessary to provide support, investigate issues, or improve service reliability.

Legal Requirements

We may disclose information if required by law, legal process, or governmental request, or to protect the rights, safety, or security of users or the Service.

Business Transfers

If szn is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest, including credentials stored in the secure vault
• Access controls that limit personnel access to user data based on role and need
• Regular monitoring for unauthorized access or suspicious activity

However, no system can be guaranteed to be completely secure.

5. Data Retention

We retain information only as long as necessary to provide the Service and fulfill the purposes described in this policy.

Typical retention periods include:

• Account information: until account deletion
• Task data: until deleted by you or your account
• Payment records: as required by financial regulations
• Log data: retained for limited periods for security and operational purposes

When you delete your account, we will delete or anonymize personal data within a reasonable timeframe unless retention is required by law.

6. Your Rights and Choices

You may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete tasks, stored credentials, or your account
• Opt out of promotional communications

Residents of California may have rights under the California Consumer Privacy Act (CCPA), including the right to request information about data collection and deletion.

Residents of the European Economic Area may have additional rights under the General Data Protection Regulation (GDPR), including data portability and the right to restrict certain processing activities.

To exercise these rights, contact us at hello@theszn.ai.

7. Children's Privacy

The Service is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16.

If we become aware that such information has been collected, we will delete it promptly.

8. International Data Transfers

Our services are operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made, we will notify users through the Service or via email.

Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, you may contact us at:

hello@theszn.ai