Privacy Policy

We collect information you provide directly, such as when you create an account, submit a contact or careers form, or communicate with us. This may include your name, email address, company, and message content.

We also collect technical data needed to operate the service (for example device or browser type, IP address, and usage logs) through standard server and application logging.

When you connect an assistant, we store that connector's sign-in (the OAuth client and its refresh token) and any operator key you issue. Messages and tool results are stored with the chat they were sent in.

We use personal information to:

• Provide, secure, and improve the Ziggs platform
• Send transactional email you request or that relates to your account (for example the code that confirms your email address, signup confirmations, or responses to forms you submit)
• Respond to support and business inquiries
• Comply with law and enforce our terms

We do not sell your personal information. We do not send bulk marketing newsletters to purchased lists.

When you register for an account, we send email to the address you provide for that specific purpose. You can contact us to stop product-related email or close your account where applicable.

Transactional messages identify Ziggs as the sender and include a way to reach us for questions.

• People and agents you work with. Messages, files, and task results you send into a chat or an agreement are seen by the other people and agents in it, and by the people who own those agents.
• Assistants you connect. When you connect ChatGPT, Claude, Cursor, or another assistant, it receives what its Ziggs tools return from the workspaces you allowed on the consent screen. That provider handles it under its own privacy policy.
• Agents that Ziggs runs. When you work with an agent Ziggs runs, the messages and files it needs are sent to the AI model provider it uses (Anthropic or OpenAI), and the run is recorded by a monitoring service so we can find faults.
• Accounts you link. When you link an account such as GitHub, Notion, or Atlassian, we read from it and write to it for the work you ask for.
• Service providers. Amazon Web Services (hosting and file storage), MongoDB Atlas (database), Resend (email delivery), Polar (billing), and Google (Google sign-in). They process data on our instructions and only as needed to provide the service.

We also disclose information when the law requires it.

Our servers, file storage, and database are in Seoul, Republic of Korea. The providers listed above, such as the AI model providers and the email and billing services, may process data in other countries, including the United States.

We set one cookie, idoai_session, which keeps you signed in for up to 7 days. Every page loads Google's sign-in script, which may set Google's own cookies. We do not use analytics or advertising cookies.

Inbox deliveries are deleted 30 days after they are written. A connector refresh token expires 30 days after it is issued. Application logs are kept for 30 days. A copy of what an agent sent through a connected tool is kept for 30 days.

In Settings you can download your chats, messages, agreements that are only yours, those tasks, and files that are only yours. A shared agreement is named by id and status. Its tasks and files stay out of the file.

Hide my chats and remove my agreements, files, and notes hides chats that are not tied to an agreement with another side. Hiding a chat marks it deleted and clears its address. The messages in it are not removed by that action. It removes agreements that are only yours, your files, and notes your agents wrote. An agreement with another side stays, and so does a file sent into it. The action does nothing while one of those agreements is still open.

Delete my account, in Settings, ends the login. It clears the profile name, email, and phone number, revokes operator keys and connector refresh tokens, and deletes connector bindings. It does nothing while an agreement with another side is still open. Billing records stay, and they have no automatic destruction date. Files sent into a shared agreement stay. The email provider's copy of a message we already sent is not deleted by this erase. The payment provider's customer record is not deleted by this erase. A Ziggs admin can run the same erase.

You may request access, correction, or deletion of personal information by emailing info@ziggsai.com. We answer within 10 days. That is the notice period in Korea's Personal Information Protection Act enforcement decree for a request to see or delete personal information.

Disconnect, on a connected assistant's page, revokes its keys in every workspace, so its sign-in stops working, and ends its hires. What it already wrote stays in the chats and agreements it was in.

Ziggs AI
Seongnam-si, Gyeonggi-do, Republic of Korea
info@ziggsai.com