Privacy Policy

Effective date: February 2026

At Zaya, your privacy is fundamental to everything we build. We believe that honest self-reflection requires a safe space, and that starts with how we handle your data.

1. Information we collect

We collect the minimum amount of data necessary to provide and improve our service:

• Email address — provided when you sign up for early access or create an account.
• Conversation data — the content of your interactions with Zaya, used solely to provide the service and improve your experience.
• Usage data — anonymous, aggregated information about how you interact with the platform (e.g., session duration, features used).

2. How we use your data

Your data is used to:

• Provide, maintain, and improve the Zaya service.
• Personalise your experience over time.
• Send important service updates (never marketing spam).
• Conduct anonymous, aggregated research to improve our AI models.

We will never sell your personal data to third parties. Your conversations are yours.

3. Data storage and security

We take the security of your data seriously. All data is encrypted in transit (TLS) and at rest. We use industry-standard security practices and regularly review our infrastructure to ensure your information remains protected.

4. Third-party sharing

We do not share your personal information with third parties for marketing or advertising purposes. We may share anonymised, aggregated data for research purposes, and we may use trusted service providers (e.g., cloud hosting, analytics) who are bound by strict data processing agreements.

5. Cookies

Zaya uses essential, functional cookies required to operate the service. We do not use advertising cookies or third-party cookies for profiling purposes.

We use Google Analytics to understand how visitors interact with our site. These cookies help us measure traffic and improve the experience. The data collected is anonymous and aggregated. We also use Microsoft Clarity to understand how users navigate the site through heatmaps and session replays. No personally identifiable information is collected through these tools for advertising purposes.

6. Your rights

You have the right to:

• Access your personal data at any time.
• Correct any inaccurate information.
• Delete your account and all associated data.
• Export your data in a portable format.
• Withdraw consent for data processing at any time.

To exercise any of these rights, get in touch with us.

7. Data retention

We retain your data only as long as necessary to provide the service. If you delete your account, all personal data and conversation history will be permanently removed within 30 days.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or through the service. Your continued use of Zaya after changes are posted constitutes acceptance of the updated policy.

9. Contact

If you have questions about this policy or how we handle your data, reach out to us.

Zaya is committed to compliance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.