Privacy Policy — Zeus AI

Zeus AI ("Zeus AI", "we", "us", "our") provides an AI Software Engineering Workspace. This Privacy Policy explains what information we collect when you use Zeus AI, why we collect it, how it's protected, who we share it with, and the rights you have over it. By using Zeus AI you agree to the practices described here.

1. Information we collect

1.1 Account information

Your email address, associated with your account via Google Authentication (Sign in with Google, handled by Supabase Auth).
Your display name, and any optional profile fields you choose to add (full name, age, nationality, avatar image).
Your subscription plan (Free, Pro, or Ultimate) and billing status.

1.2 Conversation history

The messages, prompts, and questions you send to Zeus AI, and the AI's responses, stored so you can revisit past conversations ("threads").
Saved code snippets you explicitly choose to bookmark.

1.3 Uploaded images and files

Images (e.g. screenshots of code, error messages, or UI mockups), project ZIPs, and text/code/PDF files you attach to a conversation or upload to the Workspace. These are sent to the AI provider processing your request so the AI can read and respond to them, and the resulting conversation (including the attachment) is stored in your account in the same way as text messages.

1.4 Usage data and analytics

Request counts and timestamps, used to enforce the free-plan limit (15 questions / 24 hours) and the Zeus AI Pro Fair Usage Policy (see our Terms of Service).
Workspace activity such as your chosen model provider and project usage — used only to power in-app features like your dashboard.
Basic technical metadata (e.g. request timestamps, coarse error logs) used for security, debugging, and abuse prevention. We do not use third-party advertising trackers or sell any usage data.

2. AI processing disclaimer

When you send a message, Zeus AI forwards your conversation (including any attached images, files, or uploaded project data) to an AI provider to generate a response. By default this is Google's Gemini API, with Ox Alpha used as the fallback provider. If you connect your own model keys (Bring Your Own Key), your request is sent to whichever provider you selected. Each provider processes your content solely to return an answer to your prompt; see that provider's own privacy terms for how it handles API data. AI-generated responses may be inaccurate or incomplete — always verify anything important, especially code you plan to run or rely on. Zeus AI does not use your conversations to train third-party foundation models.

3. Cookies and local storage

We use strictly-necessary cookies and browser storage for authentication (maintaining your Supabase login session) and for lightweight UI preferences (like your light/dark theme choice), stored in your browser's local storage. We do not use third-party advertising or cross-site tracking cookies.

4. How we protect your data

All traffic is served over HTTPS/TLS.
Data is encrypted at rest by our infrastructure providers (Supabase/Postgres, Vercel).
Row Level Security (RLS) policies in our database ensure your profile, conversations, and files are only ever readable by your own account.
API keys and secrets are stored as environment variables in our hosting provider, never committed to source code.
Bring-your-own (BYOK) model keys are encrypted at rest with AES-256-GCM and decrypted only in server memory for the duration of a request; we store only the last four digits of each key, and the raw key is never returned to your browser.
Access to production data is limited to what's operationally necessary.

5. Third-party services we use

We share the minimum data necessary with the following providers to operate Zeus AI:

Supabase — database, authentication, and storage. Hosts your account, profile, and conversation data.
Google — Google Sign-In (authentication) and the Gemini API (the default AI model that generates responses to your prompts, including analyzing any images/files you attach). We also use Ox Alpha as a fallback provider.
Bring-your-own providers — if you add your own keys, requests may additionally be routed to OpenAI, Anthropic Claude, OpenRouter, Groq, DeepSeek, Mistral, or Ox Alpha according to the provider you select.
Lemon Squeezy — our payment processor for Zeus AI Pro and Ultimate subscriptions. Lemon Squeezy handles your payment details directly; we never see or store your full card number.
Vercel — application hosting for zeusai's website and API.

We do not sell your personal data to anyone, for any purpose.

6. Data retention

We retain your account and conversation data for as long as your account is active, so your chat history remains available to you. If you delete your account, we delete your personal data — profile, threads, messages, and saved snippets — within 30 days, except where a short retention is required for legal, tax, fraud-prevention, or billing-record purposes.

7. Data deletion requests

You can request deletion of your account and associated data at any time from Settings → Delete account, or by emailing zeus.ai328@gmail.com with the subject line "Data deletion request" from the email address on your account. We will confirm and process the request within 30 days.

8. Your rights

Depending on your location (including under GDPR, UK GDPR, and similar laws), you have the right to:

Access — request a copy of the personal data we hold about you.
Correction — fix inaccurate or incomplete data, most of which you can edit yourself in Settings.
Deletion — request full account and data deletion (see §7).
Portability — request your data in a machine-readable format.
Objection / restriction — object to or ask us to limit certain non-essential processing.

To exercise any of these rights, email zeus.ai328@gmail.com. We respond within 30 days.

9. Children's privacy

Zeus AI is not directed at children under 13, and we do not knowingly collect personal data from children under 13.

10. International data transfers

Our infrastructure providers (Supabase, Google, Lemon Squeezy, Vercel) may process data in regions other than your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for such transfers.

11. Changes to this policy

We may update this Privacy Policy as Zeus AI evolves. We'll update the "Last updated" date above, and for material changes we'll make a reasonable effort to notify you by email or in-app notice. Continuing to use Zeus AI after a change means you accept the updated policy.

12. Contact

Questions about this policy or your data? Email zeus.ai328@gmail.com.