Privacy policy

What we collect

Your account. Your email address and a sign-in ID from WorkOS, our sign-in provider.

Billing. Stripe handles payments. We keep your Stripe customer and subscription IDs and your plan status. We never see or store your full card number.

Text you send us. When you or your agent asks Zavus to rewrite something, we send the text to our rewriting providers and return the result. We may keep the text and the rewrite. Don’t send anything you aren’t comfortable with us keeping.

Usage. For each rewrite we record the word count in and out, when it happened, how long it took and which model did it. This is how we bill you and keep the service running.

Your agent. The name your AI agent sends when it connects (for example, “claude-code”), so the dashboard can show it’s connected.

Feedback from your agent. Your agent can tell us how a rewrite went: whether it was good, what went wrong (for example, “changed the meaning”) and a short comment. Agents are told not to include the text itself or personal details.

API keys. We store a one-way hash of each key and when it was last used, never the key itself.

Browser and device. Your IP address and browser user agent, and the cookies described under Ads, analytics and cookies. Our hosting provider also keeps short-lived request and error logs.

How we use it

To run Zavus: sign you in, rewrite text, count words, bill you, prevent abuse and fix problems. To improve Zavus, including by reviewing the text you send, the rewrites and agent feedback, and using them to train and evaluate our models. To email you about your account and billing. To measure whether our ads work (see below).

Who we share it with

We share data only with the services that run Zavus for us, and only what each one needs:

Cloudflare hosts Zavus and its database. WorkOS handles sign-in. Stripe handles payments. Emulate and Fireworks AI receive the text you send to produce the rewrite, and may keep it and use it to improve their services under their own terms. Meta receives the advertising data described below. Google receives website usage data through Google Analytics.

We may also share data if the law requires it, to protect people or the service, or as part of a merger or sale of the business, in which case this policy keeps applying to your data.

We don’t sell your personal information.

Ads, analytics and cookies

Our pages use the Meta pixel, which sets cookies (_fbp, and _fbc if you arrived from a Meta ad) and tells Meta you visited. When you sign up, start a trial, subscribe or cancel, our server also tells Meta, along with a hashed (scrambled) copy of your email, your IP address, your browser user agent and those cookies. Meta uses this to measure and improve our ads. We also use Google Analytics, which sets cookies (_ga and similar) and tells Google which pages you visit, from what kind of device and roughly where, so we can see how people use our site. We don’t use any other tracking or advertising cookies. The dashboard also uses a sign-in cookie, which it needs to work.

You can block these cookies in your browser, opt out of Google Analytics with Google’s opt-out add-on, or ask us not to send your data to Meta by emailing support@zavus.ai.

How long we keep it

Account, billing and usage records: while you have an account, and afterwards as long as we need them for tax, accounting and legal reasons. Text you send and the rewrites: as long as we need them to run and improve Zavus, including model training. Logs: deleted automatically after a short time. If you delete your account, we delete or anonymize the rest.

Your choices and rights

You can ask us for a copy of your data, to correct it, or to delete your account and data, by emailing support@zavus.ai. Depending on where you live (for example, the EU, UK or California), you may have more rights, such as objecting to how we use your data or complaining to your local data protection authority. We won’t treat you differently for using them.

Everything else

Security. Data is encrypted in transit, API keys are stored hashed, and access to our systems is limited. No system is perfectly secure, so we can’t promise yours never will be exposed, but we’ll tell you if a breach affects you.

Where data goes. We and our providers may process your data in the United States and other countries. Where the law requires it, we rely on safeguards like the EU’s standard contractual clauses.

Children. Zavus isn’t for anyone under 18, and we don’t knowingly collect their data.

Changes. If we change this policy in a way that matters, we’ll update the date above and tell you by email or in the dashboard.

Contact. Agents USA, LLC, 8080 Westpark Drive, STE 42806, Houston, TX 77063, US, support@zavus.ai.