Privacy Policy

Information we collect

Account information. When you sign up (via Clerk), we collect your name, email address, and authentication details.

Conversations and memory. We store the messages you send to Zolk, the replies it generates, and the long-term memory it builds (such as notes, reminders, and facts you ask it to remember). Each user's data is isolated to their own account.

Connected apps. When you connect a third-party account through Composio (for example Google Calendar, Gmail, Notion, Slack, or GitHub), Zolk may read and, with your confirmation, write data on your behalf in those services. The actions and data involved are processed to carry out your requests and automations.

Messaging channel data. If you use Zolk over Telegram, WhatsApp, or RCS, we process the content of your messages and basic sender details needed to run the conversation.

Payment information. Paid plans are handled by Dodo Payments. We receive a record of your subscription (such as plan and status) but your full card details are processed solely by Dodo Payments and never touch our servers.

Usage and technical data. We log basic device, browser, and usage information to operate, secure, and improve the Service.

How we use your information

• To operate the Service, respond to your requests, and run your reminders and automations.
• To process actions in your connected apps when you ask Zolk to.
• To maintain long-term memory so Zolk can follow context across conversations.
• To process subscriptions and manage your account.
• To provide support, prevent abuse, and comply with our legal obligations.

How we process data with AI

To answer you and take actions, your messages and relevant context are sent to AI providers (including OpenAI) and processed on Cloudflare infrastructure. We use these providers as processors on our behalf. Do not share information with Zolk that you would not want processed by these services.

Generated websites and workspaces

Zolk can build and deploy websites to a <your-project>.zolk.site address inside an isolated Cloudflare Sandbox. Workspaces may retain code and generated project files so later edits can be built and redeployed. Sandbox containers do not receive application secrets or your connected-app credentials.

How we share information

We do not sell your personal information. We share data only with the service providers that help us run Zolk — such as hosting (Cloudflare), authentication (Clerk), AI providers (OpenAI), app connections (Composio), and payments (Dodo Payments) — each under their own terms, and only as needed to provide the Service. We may also disclose information when required by law or to protect our rights and users.

Data retention

We keep your data for as long as your account is active and as needed to provide the Service. You can request deletion of your account and associated data at any time by contacting us. Some records may be retained as required by law or for legitimate security and billing purposes.

Your choices and rights

Depending on where you live (for example the EU/UK under GDPR, or California under CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can disconnect a connected app at any time, and you can contact us to exercise these rights.

Security

We use reasonable technical and organizational measures to protect your data. Each user's data is isolated, application secrets are kept separate from sandbox workspaces, and sensitive actions in connected apps require your confirmation. However, no system is perfectly secure, and we cannot guarantee absolute protection.

Children's privacy

The Service is not intended for children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and we may notify you for significant changes.

Contact

Questions about this policy or your data? Email hello@zolk.app.