Privacy Policy

Zeus AI ("Zeus AI", "we", "us", "our") provides an AI Software Engineering Workspace. This Privacy Policy explains what information we collect when you use Zeus AI, why we collect it, how it's protected, who we share it with, and the rights you have over it. By using Zeus AI you agree to the practices described here.

1. Information we collect

1.1 Account information

• Your email address, associated with your account via Google Authentication (Sign in with Google, handled by Supabase Auth).
• Your display name, and any optional profile fields you choose to add (full name, age, nationality, avatar image).
• Your subscription plan (Standard or Pro) and billing status.

1.2 Conversation history

• The messages, prompts, and questions you send to Zeus AI, and the AI's responses, stored so you can revisit past conversations ("threads").
• Saved code snippets you explicitly choose to bookmark.

1.3 Uploaded images and files

• Images (e.g. screenshots of code, error messages, or UI mockups) and text/code/PDF files you attach to a conversation. These are sent directly to Google's Gemini API as part of your prompt so the AI can read and respond to them, and the resulting message (including the attachment) is stored in your conversation history in the same way as text messages.

1.4 Usage data and analytics

• Question counts and timestamps, used to enforce the free-plan limit (15 questions / 24 hours) and the Zeus AI Pro Fair Usage Policy (see our Terms of Service).
• Learning activity such as streaks, achievements, and your selected learning mode — used only to power in-app features like your dashboard and leaderboard.
• Basic technical metadata (e.g. request timestamps, coarse error logs) used for security, debugging, and abuse prevention. We do not use third-party advertising trackers or sell any usage data.

2. AI processing disclaimer

When you send a message, Zeus AI forwards your conversation (including any attached images or files) to Google's Gemini API to generate a response. Google processes this content solely to return an answer to your prompt; see Google's own privacy terms for how Google itself handles API data. AI-generated responses may be inaccurate or incomplete — always verify anything important, especially code you plan to run or rely on. Zeus AI does not use your conversations to train third-party foundation models.

3. Cookies and local storage

We use strictly-necessary cookies and browser storage for authentication (maintaining your Supabase login session) and for lightweight UI preferences (like your light/dark theme choice), stored in your browser's local storage. We do not use third-party advertising or cross-site tracking cookies.

4. How we protect your data

• All traffic is served over HTTPS/TLS.
• Data is encrypted at rest by our infrastructure providers (Supabase/Postgres, Vercel).
• Row Level Security (RLS) policies in our database ensure your profile, conversations, and files are only ever readable by your own account.
• API keys and secrets are stored as environment variables in our hosting provider, never committed to source code.
• Access to production data is limited to what's operationally necessary.

5. Third-party services we use

We share the minimum data necessary with the following providers to operate Zeus AI:

• Supabase — database, authentication, and storage. Hosts your account, profile, and conversation data.
• Google — Google Sign-In (authentication) and the Gemini API (AI model that generates responses to your prompts, including analyzing any images/files you attach).
• Paddle — our payment processor for Zeus AI Pro subscriptions. Paddle handles your payment details directly; we never see or store your full card number.
• Vercel — application hosting for zeusai's website and API.

We do not sell your personal data to anyone, for any purpose.

6. Data retention

We retain your account and conversation data for as long as your account is active, so your chat history remains available to you. If you delete your account, we delete your personal data — profile, threads, messages, and saved snippets — within 30 days, except where a short retention is required for legal, tax, fraud-prevention, or billing-record purposes.

7. Data deletion requests

You can request deletion of your account and associated data at any time from Settings → Delete account, or by emailing Haidersiddique0909@gmail.com with the subject line "Data deletion request" from the email address on your account. We will confirm and process the request within 30 days.

8. Your rights

Depending on your location (including under GDPR, UK GDPR, and similar laws), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — fix inaccurate or incomplete data, most of which you can edit yourself in Settings.
• Deletion — request full account and data deletion (see §7).
• Portability — request your data in a machine-readable format.
• Objection / restriction — object to or ask us to limit certain non-essential processing.

To exercise any of these rights, email Haidersiddique0909@gmail.com. We respond within 30 days.

9. Children's privacy

Zeus AI is not directed at children under 13, and we do not knowingly collect personal data from children under 13.

10. International data transfers

Our infrastructure providers (Supabase, Google, Paddle, Vercel) may process data in regions other than your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for such transfers.

11. Changes to this policy

We may update this Privacy Policy as Zeus AI evolves. We'll update the "Last updated" date above, and for material changes we'll make a reasonable effort to notify you by email or in-app notice. Continuing to use Zeus AI after a change means you accept the updated policy.

12. Contact

Questions about this policy or your data? Email Haidersiddique0909@gmail.com.