Privacy

1. Changes to this Privacy Notice

We may update this Privacy Notice from time to time by posting a revised version and changing the “Last updated” date above. Because Zeta has no email accounts, we will tell you about material changes with a notice inside Zeta. If you do not agree to an update, please stop using Zeta.

2. Collection and use of information

Zeta is designed so that most of your information never reaches us. We use the limited information described below to provide and secure Zeta, process payments, prevent abuse and comply with the law.

Information you provide

• Your key. You sign in with your own cryptographic key, through a browser extension, a remote signer, or a key you create or paste. Your public key identifies you. A secret key you create or paste here stays on your device and is never sent to us. We do not ask for your name, email address, phone number or a password.
• Profile information you choose to publish, such as a display name or picture. If you do not set a name, Zeta shows a generated two-word username.
• User content: your prompts and chat messages, the apps you build, their versions and demo reels, team names, and files you attach.
• Payment information: ecash tokens you send to pay for builds, and the details of Lightning wallets you connect. Wallet connections are stored on your device only.

Information collected automatically

• Technical request data, such as your IP address and the time of a request. We use it briefly in memory to limit abuse (for example, rate limits and the once-per-person welcome gift) and do not build profiles from it.
• A short proof-of-work check that your device solves before receiving the welcome gift, and a marker tied to your public key so the gift is given only once.

Zeta does not use advertising cookies, tracking pixels or third-party analytics, and does not target interest-based advertising. Your browser's local storage is used to keep your projects, wallet and settings on your device.

Information from other sources

• Teammates. When someone invites you to a team project or co-builds with you, we and your device receive the messages, prompts and app versions they share with the team.
• Public network data, such as profile information other people have published for their own keys, shown to identify teammates.

3. Where your information is stored

• On your device: projects, chats, app versions, wallet balance, wallet connections and settings.
• Encrypted backups: copies of your projects are encrypted so only your key can open them, then stored on public relay servers so you can continue on another device. Team projects are end-to-end encrypted between teammates; the servers that carry them see only scrambled data.
• File storage: images and PDFs you attach are stored unencrypted at unlisted links so the AI and your app can load them. Anyone who has the link can open them. Text files are sent with your message and are not stored there.
• Shared apps: when you share an app publicly, its files and preview are published for anyone to see. Public pages show your team's name, or “Built on Zeta”, never your personal name.

4. Disclosure of your information

We share information only as needed to run Zeta:

• AI model providers (such as OpenAI and Google), through our AI service provider, receive your prompt, recent conversation, the current app's code and attached files in order to generate a chat reply, a build or a voiceover. This is the one step where your content is not end-to-end encrypted.
• Ecash and payment services: the ecash mint swaps the tokens you pay with, and Lightning services route payments. They see payment amounts, not your projects.
• Relay and file storage servers that hold your encrypted backups, team messages, attached files and public shares.
• Teammates, when you send messages, prompts or versions to a team project.
• Hosting and infrastructure providers that run Zeta's website and servers.
• Professional advisors, buyers in a business transaction, or authorities where required by law, to protect our rights and users, or to prevent fraud and abuse.

We do not sell or “share” personal information for cross-context advertising, and we do not search for people by name using outside services. You find teammates on your device, or by link, code or QR.

5. Buzz workspaces and third-party services

We plan to offer team workspaces hosted on Buzz, a service operated by Block, Inc. When you join a Block-hosted Buzz workspace through Zeta, information you send there is also handled under Block's Buzz Privacy Notice, which you can read at buzz.xyz/privacy-policy.

Zeta also works with open networks and services we do not control, such as public relays, file servers, ecash mints and Lightning wallets. They operate under their own terms and privacy policies, and this notice does not apply to them.

6. Children's privacy

Zeta is open to people 13 and older, so students can use it for schoolwork, such as building a personal library. If you are under 18, you need a parent or guardian's permission to use Zeta, and they should review this notice with you. We do not knowingly collect personal information from children under 13. If you believe a child under 13, or a minor without permission, has given us information, contact us at privacy@getzeta.dev and we will delete what we can.

7. Data security and retention

We use encryption and other reasonable measures to protect your information, but no system is completely secure. Keep your secret key safe: anyone who has it can act as you, and we cannot recover it for you.

• Data on your device stays until you delete it or clear your browser's storage.
• Prompts, chats and app code sent to build or chat are processed to produce the reply and are not stored on our servers afterwards. AI providers may keep request data for a limited time under their own policies.
• Encrypted backups remain on relay servers until you delete your projects. Deleting replaces them with blank backups and asks servers to remove them; servers that ignore requests may keep scrambled copies.
• Publicly shared apps, attached files and copies held by teammates may remain after you delete a project.

8. Privacy rights

Depending on where you live, you may have rights to access, delete, correct or receive a copy of your personal information, to restrict or object to processing, and to withdraw consent. Most of your data is under your control on your device: you can delete projects at any time. For anything else, contact us. We will not discriminate against you for exercising your rights.

9. Data transfers

Zeta's servers, AI providers and relay servers may be located outside your country, including in the United States. Where the law requires, we take steps to protect information transferred abroad.

10. How to contact us

Questions about this Privacy Notice or your information? Email Zetabyte at privacy@getzeta.dev.