Back to Zaru

Privacy Policy

Effective Date: April 2, 2026 · Last Updated: April 2, 2026

This Privacy Policy explains how My Zaru, Inc. (“My Zaru”, “we”, “our”, or “us”) collects, uses, and protects information in connection with your use of Zaru, our AI agent orchestration platform.

1. Who We Are

My Zaru, Inc. is a company incorporated in the State of Delaware, USA, and the data controller for information collected through Zaru. Our contact address for privacy matters is [email protected].

2. Information We Collect

We collect the following categories of information:

Account Information

When you create a Zaru account, we receive and store your name, email address, and account identifiers. This information is provided by you at registration and is necessary to operate your account.

Conversation & Agent Content

When you interact with AI agents through Zaru, the content of your conversations and any artifacts produced during execution are stored in our platform database. This data is associated with your account and is used to provide conversation history, agent memory, and workflow continuity.

Usage and Telemetry Data

We collect operational data including API request logs, execution metrics, rate limit usage, session identifiers, and error reports. This data is used to operate, monitor, secure, and improve the platform.

API Keys You Provide

If you configure third-party AI provider keys (e.g., OpenAI, Anthropic), those keys are encrypted at rest and are used solely to authenticate requests to the provider on your behalf. We do not use your API keys for any other purpose.

3. How We Use Your Information

  • Service Delivery: To operate your account, process requests, run AI agents and workflows, and provide conversation history.
  • Safety & Abuse Prevention: To detect, investigate, and prevent violations of our Terms of Use and applicable law.
  • Platform Improvement: Aggregated, anonymized operational metrics (not your conversation content) are used to improve system performance and reliability.
  • Communications: To send transactional notifications (account activity, service changes). We do not send marketing emails without your explicit consent.

4. The Cortex Learning System

Zaru is powered in part by a distributed memory system that learns from platform usage. This system processes operational metadata only — such as which types of agent workflows succeed, timing patterns, and aggregate behavioral signals. It does not store or process the content of your conversations, agent inputs, or agent outputs. Conversation content remains isolated in your account scope and is never fed into cross-user learning systems.

5. Third-Party AI Providers

When you configure and use a third-party AI provider (such as OpenAI, Anthropic, Google, or others), your conversation content is transmitted to that provider to generate responses. My Zaru acts as a conduit: we route the request but are not the data controller for what the third-party provider does with your data. Each provider's own privacy policy governs their handling of your data. We encourage you to review those policies before enabling a provider.

6. Data Retention

We retain account information and conversation history for as long as your account is active. Operational logs are retained for up to 90 days. If you delete your account, your personal data and conversation content will be deleted within 30 days, except where retention is required by law. Anonymized, aggregated operational metrics may be retained indefinitely.

7. Data Security

We implement technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS/HTTPS) for all data exchanged with the platform.
  • Encryption at rest for databases, stored credentials, and API keys.
  • Role-based access controls limiting data access to authorized personnel.
  • Automated security monitoring across the platform infrastructure.

No system is perfectly secure. We cannot guarantee absolute security, but we commit to notifying affected users promptly in the event of a data breach that creates material risk.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (“right to be forgotten”), subject to legal retention obligations.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection / Restriction: Object to or request restriction of certain processing activities.
  • Opt-out of Sale (DPDPA): We do not sell personal data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

9. Cookies & Session Storage

Zaru uses session cookies exclusively for authentication state management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. If you block session cookies, you will not be able to log in to Zaru.

10. Children's Privacy

Zaru is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it promptly.

11. International Transfers

Our infrastructure is operated in the United States. If you access Zaru from outside the US, your information may be transferred to, stored, and processed in the US. By using Zaru, you consent to this transfer. We apply appropriate safeguards consistent with applicable data protection law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy with a new effective date and notify users of material changes in-app or via email. Your continued use of Zaru after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data requests, or concerns, contact us at: [email protected]

My Zaru, Inc.
300 Creek View Road, Suite 209, Newark, New Castle County, DE, 19711