Back

Privacy Policy

Last updated: 2026-10-10

1. Data Collected

We collect: account information (name, email, hashed password), project data (tasks, documents, comments), usage data (pages visited, actions performed), and technical data (IP address, browser). Passwords are hashed with bcrypt and never stored in plain text.

2. Use of Data

Your data is used to: provide the service, improve the platform, generate AI suggestions (only within your space), and communicate with you (notifications, invoices). We NEVER sell your data to third parties. Data sent to the AI API is processed in transit and not retained by the provider.

3. Storage and Security

Data is stored in databases isolated by enterprise. Connections are encrypted in transit (TLS), backups are regular and access is restricted by role.

4. Requests about your data

You can request access to, correction, export or deletion of your data, and withdraw AI consent. Contact privacy@zenoba.ai to make a request.

5. Artificial Intelligence

Zenoba AI processes your documents and project data to generate plans and recommendations. This processing occurs within your isolated space. Data is not used to train external models. You retain ownership of all content generated from your data.

6. Privacy officer

The person responsible for the protection of personal information is Zenoba Inc. For any question or request regarding your data: privacy@zenoba.ai.

7. Subcontractors

Key providers include Anthropic Inc. (United States) for some AI processing and OVH (Québec) for hosting and embeddings. Depending on the agreed offer, hosting in France or installation in the customer’s infrastructure may be available. Providers and regions for your instance are confirmed in the offer.

8. Retention period

Account data is retained as long as the account is active. After account deletion, data is erased within 30 days. Backups are purged within 90 days. Audit logs are retained for 1 year.

9. Hosting regions and external processing

The current instance is hosted in Québec. Hosting in France or installation in the customer’s infrastructure can be assessed on request. Some requests to external AI providers may be processed in their operating regions; the providers and processing locations for the selected offer are specified before contracting.