Privacy Policy
Last Updated: October 29, 20261. About This Policy
This policy covers two separate things, which are handled very differently. Part A covers the ZyptAI product, which is installed in and runs inside Your own Azure tenant: the data it holds stays in Your subscription and ZyptAI has no access to it. Part B covers the zyptai.com website and our business dealings with You, where ZyptAI collects a small amount of personal data directly.
Part A: The ZyptAI Product, Installed in Your Azure Tenant
2. Where Your Data Lives
The ZyptAI product is deployed as an Azure Managed Application in Your Azure subscription. All Customer Data, including documents, prompts, chat history and generated content, is stored and processed in resources in that subscription. ZyptAI does not store or process copies of Customer Data in its own systems. You are the Data Controller and ZyptAI acts as a Data Processor under Your direction.
3. Operational Access
ZyptAI's only access to Your Azure environment is a deployment identity limited to publishing application updates. We have no access to Your search indexes, databases, or private documents. Any further access for support will be granted only by You and is recorded in Your Azure Activity Log.
4. AI Processing
The product uses Azure OpenAI services deployed in Your subscription. ZyptAI does not review Your prompts or completions and does not use them to train AI models. Microsoft's handling of prompts and completions, including its abuse monitoring, is governed by Microsoft's data, privacy and security terms for Azure OpenAI.
5. Application Telemetry
Health and performance metrics are collected by Application Insights in Your subscription and are used only for health monitoring and service improvement. Conversation history is stored in the Cosmos DB instance in Your subscription, under Your control. ZyptAI does not keep a copy of Your prompt history.
6. Third-Party Integrations
If You enable optional integrations, such as Lucid or Jira, the data needed for those features is sent to those providers and handled under their own terms and privacy policies.
7. GDPR & International Transfers
For customers processing personal data of EU/EEA residents, ZyptAI relies on Microsoft's Data Processing Agreement and Standard Contractual Clauses for any cross-border transfers within the Azure infrastructure. As Your Customer Data remains within Your selected Azure regions, ZyptAI does not independently transfer personal data outside Your chosen geography. Please contact us at contact@zyptai.com to request a Data Processing Agreement.
8. Data Retention & Deletion
You control retention by configuring the Azure services in Your subscription. When the Managed Application is deleted, Azure deletes the managed resource group and all resources in it. ZyptAI does not maintain independent backups of Your Customer Data.
9. Your Rights over Customer Data
As Data Controller, You retain full ownership and all rights over Your Customer Data, including rights of access, rectification, erasure, and portability. Requests relating to Customer Data should be managed through Your own Microsoft Entra ID and Azure governance, since ZyptAI cannot access that data.
Part B: The zyptai.com Website and Business Contacts
10. Who We Are
For the personal data described in this part, ZyptAI is the Data Controller. You can reach us at contact@zyptai.com.
11. Website Analytics & Cookies
zyptai.com uses Google Analytics, which sets cookies and collects information such as pages visited, time on site, device and browser type, and approximate location. We use it only to understand how the website is used. Google processes this data on our behalf under its own terms. You can block these cookies in Your browser settings or with the Google Analytics opt-out browser add-on. The ZyptAI product in Your Azure tenant does not use third-party analytics.
12. Contact Form & Email
When You use the contact form or email us, we receive Your name, email address, company, and message. Form submissions are delivered to us by email through Azure Communication Services. We use this information only to respond to You and to follow up about ZyptAI, and we keep it for as long as needed for that business relationship.
13. Azure Marketplace Purchases
When You purchase or trial ZyptAI through Azure Marketplace, Microsoft shares Your contact details, such as name, email address, and company, with ZyptAI as the publisher. We use them to provision, support, and bill for the product and to communicate with You about it.
14. Sharing
We do not sell personal data. We share it only with the service providers named in this policy, such as Microsoft and Google, and where required by law.
15. Your Rights
You can ask us to access, correct, or delete the personal data we hold about You under this part by emailing contact@zyptai.com. We will respond within 30 days.
General
16. Children
The website and the product are intended for businesses and are not directed at children. We do not knowingly collect personal data from children.
17. Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.
For further inquiries regarding our legal framework, please connect with us at contact@zyptai.com
Return to Homepage