Privacy Policy

1. Who We Are

ZynAssist ("we", "us", "our") provides an AI-powered chat widget that businesses embed on their websites to automatically answer visitor questions using content from their own website. This policy covers data processed through zynassist.com and the ZynAssist service. For questions, contact us at support@zynassist.com.

2. Data We Collect

We collect the following categories of data:

Category	Examples	Source
Account data	Email address (used as username), password (stored hashed)	You, at sign-up
Website content	Pages, text, and documents crawled from your website to train your AI agent	Your website, via our crawler
Conversation data	Messages exchanged between your website visitors and the AI chat widget	End users of your widget
Billing data	Subscription plan, payment status (card details are handled directly by our payment processor and never touch our servers)	You / payment processor
Usage & log data	IP address, browser type, pages visited, timestamps, error logs	Automatically, when you use the service
Cookies	Authentication session cookie, username display cookie	Automatically, when you sign in

3. How We Use Your Data

We use personal data to:

• Create and manage your account, and authenticate you when you sign in.
• Crawl, index, and store your website content so your AI agent can answer questions about it.
• Generate AI responses to your website visitors' questions.
• Process subscription payments and manage billing.
• Send transactional emails: account verification, password reset, and service notices.
• Monitor, secure, and improve the reliability of the service (error logs, abuse prevention).
• Comply with legal obligations.

We do not use your website content or conversation data to train AI models on behalf of any party other than your own account, and we do not sell personal data to third parties.

4. Legal Basis for Processing (EEA/UK Users)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (providing the service you signed up for), legitimate interests (securing and improving the service, preventing abuse), consent (where you have explicitly given it, e.g. certain cookies), and legal obligation (tax and accounting records).

5. Cookies

ZynAssist uses a minimal set of cookies necessary to operate the service:

• Authentication cookie (jwtToken): HttpOnly, Secure, SameSite=Strict. Keeps you signed in. Cannot be read by JavaScript.
• Username cookie: Secure, SameSite=Strict. Lets the interface display "signed in as …" without re-reading the auth token.

We do not use third-party advertising or tracking cookies. Both cookies expire automatically after 24 hours or when you log out.

6. Third-Party Processors

We share data with a limited set of service providers who process it on our behalf, strictly to operate ZynAssist:

• Hosting infrastructure: our servers and database run on cloud infrastructure that stores your account, website content, and conversation data.
• AI providers: website content and visitor questions are sent to large language model providers to generate chat responses.
• Payment processing: subscription payments are handled by a third-party payment processor; we do not store full card numbers.
• Email delivery: transactional emails (verification, password reset) are sent via a third-party email provider.

Each of these providers is contractually restricted to using your data only to provide services to us.

7. International Data Transfers

ZynAssist is based in Norway. Some of our service providers may process data outside the EEA, including in the United States. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under applicable data protection law.

8. Data Retention

We retain personal data for as long as your account is active. Website content and conversation data are retained for the duration of your subscription and are automatically deleted from our systems within a reasonable period after account closure, except where we are required to retain records for legal, tax, or accounting purposes. You may request earlier deletion as described in Section 9.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data ("right to be forgotten").
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at support@zynassist.com. If you are in the EEA or UK and believe we have not addressed your request adequately, you have the right to lodge a complaint with your local data protection authority — in Norway, the Datatilsynet.

10. Children's Privacy

ZynAssist is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Data Security

We apply industry-standard safeguards, including encrypted connections (HTTPS/TLS), hashed password storage, and access controls restricting who can view stored data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, notify you by email or an in-app notice at least 14 days before the change takes effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

13. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at support@zynassist.com. See also our Terms of Service.