ZeroThink Privacy Policy

1. Who this policy covers

This policy covers visitors, account holders, subscribers, guests using direct-key mode, people who submit prompts, files, feedback, board posts, support requests, research materials, DNA-related files, ZMath files, or payment-related information through ZeroThink or linked TalkToAI services.

2. Information collected

• Account details, such as name, email address, Google login identifiers, subscription status, account role, and support messages.
• Technical information, including IP address, user agent, device/browser information, security logs, rate-limit events, and timestamps.
• User content, including prompts, uploaded files, generated outputs, research notes, chat history, board posts, comments, feedback, and files selected for analysis.
• Payment-related records, including plan type, subscription status, payment references, cancellation events, and fraud-prevention signals. Full card data is handled by payment processors when applicable.
• Direct-key mode information. User-supplied API keys may be stored in the user's browser or transmitted to the relevant endpoint only as needed to provide the requested function.
• DNA Lab or health-research data when a user voluntarily uploads it. This may include sensitive personal data and should only be uploaded by someone with lawful authority to use that file.

3. How information is used

• To provide ZeroThink, QuantumZero, ZMath, DNA Lab, board, research, subscription, upload, export, and support functions.
• To secure the service, stop abuse, detect automated misuse, investigate suspicious activity, protect intellectual property, and preserve audit logs.
• To improve reliability, debug errors, test features, maintain model and tool performance, and understand which features are useful.
• To process subscriptions, cancellations, refunds where applicable, and payment disputes.
• To comply with legal obligations, enforce terms, respond to lawful requests, and defend against claims.

4. Lawful bases

Depending on the context, information may be processed to perform a contract with the user, to take steps requested by the user, for legitimate interests such as security, service improvement, fraud prevention, IP protection, record keeping, and claim defence, to comply with legal obligations, or with consent where consent is required.

5. AI, research, and sensitive files

Users should not submit confidential, regulated, medical, genetic, legal, financial, government, defence, employer-owned, third-party, or highly sensitive material unless they have permission and accept the processing risk. DNA and health-research outputs are informational research outputs only and are not medical advice, diagnosis, treatment, or clinical decision support.

6. Sharing and processors

Information may be processed by hosting providers, payment providers, email providers, analytics/security tools, AI model providers, API providers, search providers, quantum-cloud or research API providers, and other technical suppliers used to deliver the service. Information may also be disclosed where required by law, to protect users or systems, to enforce terms, or as part of a business transfer.

7. In-house boards and public areas

Posts, comments, profile names, uploaded public materials, and board activity may be visible to other users or administrators. Users should not post private information, secrets, passwords, keys, personal data about others, unlawful material, or content they do not have the right to publish.

8. Retention

Records are kept only as long as reasonably needed for service delivery, security, account management, payment records, legal compliance, dispute handling, backups, research audit trails, and IP protection. Security logs, abuse records, payment records, and claim-defence records may be retained for longer where necessary.

9. User rights

Depending on location and the information involved, users may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent, and complaint to a regulator. Requests can be sent to shaf@talktoai.org. Identity checks may be required before action is taken.

10. Security

Reasonable technical and organisational measures are used to protect the service, but no website, AI workflow, blockchain transaction, uploaded-file system, or API integration can be guaranteed completely secure. Users are responsible for keeping account access, API keys, wallets, and files safe.

11. Changes

This policy may be updated as the service changes. Continued use after an update means the user accepts the updated policy where permitted by law.