Privacy Policy

Zenny is an AI customer-agent platform built and operated by ZeroManual, Inc. ("ZeroManual," "we," "us," "our"). Businesses ("Clients," "you," "your") sign up for Zenny to have an AI agent handle bookings, scheduling, and customer communication on their behalf. This Privacy Policy explains what information we collect, how we use it, and how we protect it — particularly data accessed through a Client's connected Google account, and data belonging to a Client's own customers that passes through that connection.

1. Who This Policy Covers, and How Google Access Works

The Google account connected to Zenny belongs to the business using our platform — a Client's own Gmail inbox and Google Calendar, connected once by that business through the Zenny dashboard. Zenny is not a consumer tool that end users sign into with their personal Google account for their own use.

Once connected, Zenny's AI agent uses that access to act on the Client's behalf — reading and sending email, and creating or managing calendar events — for the specific, limited purpose of communicating with and serving that Client's own customers (e.g. replying to a customer inquiry that arrived in the Client's inbox, or booking a customer's appointment on the Client's calendar). We do not use this access for any other purpose, and the Client controls the connection at all times, including disconnecting it.

2. Information We Collect

a) Google Account Data (from the connecting business)

When a Client connects their Google account to Zenny via OAuth, we request access to:

• Gmail — to read, send, organize, and manage the Client's email messages, so the AI agent can communicate with the Client's customers on the Client's behalf
• Google Calendar — to view, create, update, and delete the Client's calendar events, so the AI agent can schedule and manage the Client's customer appointments

We request only the scopes necessary to provide this functionality.

b) End-Customer Data (encountered while serving a Client)

Because the AI agent is reading and sending email and managing calendar events on a Client's behalf, the content it accesses will often include personal information about that Client's own customers — for example, a customer's name, email address, message content, or appointment details. Zenny never obtains this data through a direct connection or authorization from the end customer; it appears only within the Client's own Gmail/Calendar data, which the Client has authorized us to access. We treat this end-customer data with the same Limited Use restrictions described in Section 4 below, regardless of whose data it is. Questions or requests from an end customer about their own data should be directed to the Client business they interacted with, who remains the data controller for that relationship; we assist Clients in fulfilling such requests on request.

c) Account Information

Basic profile information (name, business email address) provided by Google during authentication, and account details the Client provides directly when signing up for Zenny.

d) Usage Data

Information about how a Client's account interacts with the Service, such as feature usage and log data, used to maintain and improve the Service.

3. How We Use Your Information

We use the data described above solely to:

• Provide, operate, and maintain the Service's core functionality — the AI agent reading, sending, and managing email and calendar events on a Client's behalf, to serve that Client's own customers
• Authenticate the Client's identity and maintain their session
• Respond to support requests
• Improve and troubleshoot the Service

We do not use Gmail or Calendar data — a Client's own, or their customers' — for advertising purposes, and we do not sell this data.

4. Google API Services User Data Policy

Zenny's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only access Gmail and Calendar data to provide the Client-facing features the connecting business has explicitly requested
• We do not use this data to serve ads
• We do not allow humans to read this data except: (a) with the Client's explicit consent, (b) for security purposes (e.g., investigating abuse), (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized
• We do not transfer this data to third parties except as necessary to provide the Service, comply with law, or as part of a merger/acquisition (subject to this policy continuing to apply)

5. Data Sharing

We do not sell, rent, or trade data. We may share data with:

• Service providers who help us operate the Service (e.g., hosting, infrastructure), bound by confidentiality obligations
• Legal authorities, if required by law, subpoena, or legal process
• Successors, in the event of a merger, acquisition, or asset sale, subject to equivalent privacy protections

6. Data Retention

We retain a Client's Google account data, and any end-customer data accessed through it, only as long as necessary to provide the Service or as required by law. If a Client disconnects their Google account or deletes their Zenny account, we will delete associated Gmail/Calendar data from our systems within a reasonable period, except where retention is required for legal or security purposes.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect data from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

A Client may:

• Revoke access to their Google account at any time, either from the Zenny dashboard's Integrations page or directly via Google Account permissions
• Request deletion of their data by contacting us
• Request access to or correction of their personal data by contacting us

An end customer who wants to exercise rights over their own data should first contact the Client business they dealt with directly, since that business is who they gave their information to; we support Clients in fulfilling such requests.

9. Children's Privacy

The Service is not directed at individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction), and we do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last Updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

For questions about this Privacy Policy or your data, contact us at: