Last updated: [EFFECTIVE DATE]

1. Who we are

ZiCorp LLC is an independently operated software business that provides a self-hosted AI chat service and related developer tools. We are the controller of the personal information described in this Policy. You can reach us at [email protected].

2. Information we collect

Information you provide

• Account information — your username, display name, and email address, created when you register.
• Authentication data — credentials and security factors you set up, such as multi-factor authentication (MFA), recovery codes, and passkeys. We store these in protected form; we do not store recovery codes or authentication secrets in plain text.
• Chat content — the messages you send to, and responses you receive from, the AI, which are saved to your conversation history so you can access them later.
• Communications — information you provide when you contact us for support.

Information collected automatically

• Technical and usage data — IP address, device and browser characteristics, pages and features used, timestamps, and similar diagnostic data, including security signals evaluated by our Zero Trust access policy.
• Cookies and local storage — see "Cookies and local storage" below.

Game and virtual-currency data

When you play our games (such as Zidle), we store your game data server-side: your character names and progression (levels, stats, items, and similar gameplay state), your guild membership and friends list, and your gameplay actions. Some game data is visible to other players by design — character names, class, level, combat power, guild membership, leaderboard standings, and messages you send in in-game chat channels (world chat is visible to all players; guild chat to your guild). In-game chat messages are automatically deleted after approximately 24 hours. Don't put personal information in character names or chat. We also keep a Zi Coins ledger — your balance and a record of each credit (purchase or grant) and spend — for support, fraud prevention, and purchase-bonus eligibility.

If you use our mobile/desktop game app, your sign-in session token is stored in your device's secure credential store (such as iOS Keychain or Android Keystore) and can be revoked at any time from your Account page on the website.

Sign-in providers (Google)

If you choose to sign in with Google, Google shares with us your email address, basic profile information (such as your name), a unique Google account identifier, and whether your email is verified. We use this to create a new account or to match and link to an existing account with the same verified email, and to sign you in. We do not receive your Google password. Your use of Google sign-in is also governed by Google's terms and the Google Privacy Policy. Using Google sign-in is optional — you can instead use a local account.

Payment information

Subscription and Zi Coins payments are processed by Stripe, Inc. ("Stripe"). Your full card number and other sensitive payment details are entered directly with Stripe and are never stored on, or transmitted through, ZiCorp's own servers or database. We retain only non-sensitive billing references provided by Stripe — such as a Stripe customer/subscription identifier, your subscription tier and status, billing dates, and transaction amounts — so we can manage your subscription and show your billing history. Stripe's handling of your information is governed by the Stripe Privacy Policy.

3. How we use information

• To create and operate your account and authenticate you securely;
• To provide the AI chat service and save and display your conversation history;
• To operate our games — saving your progression, matching you with other players (guilds, parties, arena, leaderboards), delivering in-game chat, and maintaining your Zi Coins balance and ledger;
• To process subscriptions, payments, plan changes, and cancellations (via Stripe), including Zi Coin top-ups and first-purchase bonus eligibility;
• To maintain security, prevent abuse and fraud, and enforce our Terms of Use and Zero Trust policy;
• To diagnose problems, monitor performance, and improve the Service;
• To communicate with you about your account, security, and service-related matters;
• To comply with legal obligations and to establish, exercise, or defend legal claims.

4. AI chat and your content

The AI features run on ZiCorp's self-hosted infrastructure. Your conversations are saved to your account history until you delete them. You are responsible for what you enter into chats. Please do not submit personal, financial, health, or other sensitive information you would not want stored; managing the contents of your saved conversations is up to you, and you can delete conversations at any time.

AI output may be inaccurate, incomplete, or unsuitable for your purposes and should not be relied upon as professional advice. We do not sell your conversations, and we do not use the contents of your private conversations to train third-party advertising profiles.

5. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers — vendors that help us operate the Service, including Stripe (payment processing), Cloudflare, Inc. (content delivery, TLS, and network security), and Google (optional sign-in). These providers may process limited data on our behalf or, in Google's case, when you choose to authenticate with them, under their own terms.
• Legal and safety — when we believe disclosure is reasonably necessary to comply with law, enforce our agreements, or protect the rights, property, or safety of ZiCorp, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

6. Cookies and local storage

We use strictly necessary cookies and browser local storage to operate the Service — for example, an encrypted, HTTP-only authentication cookie to keep you signed in, and small preference values (such as your theme and sidebar layout). We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser, but disabling necessary cookies may prevent you from signing in.

7. Data retention

We keep account information for as long as your account is active and as needed to provide the Service. Conversation history is retained until you delete it or close your account. Billing records are retained as required for tax, accounting, and legal purposes. We may retain limited information after account closure where necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

8. Security

We use technical and organizational measures designed to protect your information, including a Zero Trust access model evaluated on every request, encrypted authentication cookies, support for multi-factor authentication and passkeys, and reliance on Stripe for card data so that sensitive payment details never reach our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

• Access and update — you can view and update certain account details and preferences from your Account page.
• Delete content — you can delete individual conversations at any time.
• Close your account — contact us to request account closure and deletion of associated personal information, subject to our retention obligations.
• Communications — service and security messages are necessary to operate your account and may not be opt-out.

10. Your California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you with the following rights regarding your personal information.

Categories of personal information

In the past 12 months we may have collected the following categories: identifiers (e.g., name, email, IP address); customer records and commercial information (subscription and billing references); internet/network activity (usage and diagnostic data); and the contents of communications you choose to provide (chat content and support messages).

Your rights

• Right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it;
• Right to delete personal information we have collected, subject to legal exceptions;
• Right to correct inaccurate personal information;
• Right to opt out of "sale" or "sharing" of personal information — we do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information beyond the purposes permitted;
• Right to non-discrimination for exercising your rights.

To exercise these rights, email [email protected]. We will verify your request using information associated with your account. You may use an authorized agent where permitted by law.

11. Children

The Service is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will take appropriate steps to delete it.

12. Third-party links

The Service may link to third-party sites and services we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices.

13. International users

The Service is operated from the United States and intended for users in the United States. If you access the Service from elsewhere, you understand your information will be processed in the United States, which may have different data-protection laws than your jurisdiction.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

15. Contact us

Questions about this Policy or your information? Contact ZiCorp LLC at [email protected].

See also our Terms of Use.