Privacy Policy
Privacy Policy
Updated: 26 September 2026. This policy describes Zaknor at zaknor.com, including its AI assistant, file and image tools, account and subscription features. It explains both local storage and processing by our servers and service providers.
1. Information and purposes
- Account and subscription: name, declared age, age-eligibility confirmation and its date, accepted policy versions, login identifiers, email address, account settings, subscription status, billing references and usage records support authentication, adult eligibility, access, billing and customer service. Age is self-declared; this flow does not request a date of birth or identity document and does not independently prove age. Payment providers receive the information required for checkout. Zaknor does not store complete card numbers or card security codes.
- Content you submit: prompts, conversation context, images, documents, audio and instructions are processed to answer requests, inspect files or create outputs. Relevant content may be sent to an AI provider. Do not submit information about someone else without an appropriate legal basis or authority.
- Technical and security information: IP addresses, browser/device information, request times, errors and security events may be processed for service operation, abuse prevention, troubleshooting and usage measurement.
- Support and optional features: correspondence and information you provide are used to resolve requests. Scheduled tasks, if used, require server-side scheduling information and the instructions and results needed to perform them.
2. Local history, files and memory
The current service keeps ordinary chat history, attachments, generated files and personal memory in your browser/device rather than maintaining a permanent server-side chat archive. Local memory and relevant conversation context can be included in subsequent requests to provide continuity. Local storage is not automatic cross-device synchronization. Clearing site data, changing browsers or losing access to a device can remove your local history and files. Save important outputs yourself and protect access to shared devices.
Content still passes through processing services when needed. Temporary files may be placed on the server while an upload or generated output is transferred. Their normal cleanup follows consumption or confirmation of local saving; failed or abandoned transfers are eligible for periodic cleanup. A response-recovery cache may hold the final reply and associated output references for approximately 30 minutes. Expiration, scheduled cleanup and physical deletion need not occur at exactly the same time. These processing copies differ from your local chat history.
3. AI providers and retention
We use providers including OpenAI and, for supported tasks such as cloud transcription, Groq. The provider used depends on the feature and routing. OpenAI API content is not used to train its models by default unless the API customer opts in. Its default abuse-monitoring logs may contain content for up to 30 days, with exceptions such as legal or safety requirements. Application-state retention differs by endpoint; some stateful capabilities retain data until deletion. We do not promise that all provider-held data is deleted after one month.
Groq describes no default retention of inference content, but allows retention for certain features, troubleshooting or abuse investigations, including logs for up to 30 days unless a longer period is legally required. See Groq data controls. Provider arrangements do not remove Zaknor’s responsibilities for the processing it determines.
4. Microphone, images and external tools
Microphone access requires device/browser permission. On-device dictation processes audio locally where supported; its resulting text is sent when used in an AI request. Cloud transcription sends the necessary audio to the selected transcription provider. Spoken AI output is currently paused. Image and document requests may send the uploaded material and instructions needed to perform the task; images can contain identifiable people and embedded information.
Search and research features may send relevant queries or identifiers to external sources. Public metadata lookups can use identifiers such as DOI, ROR or Wikidata IDs; public research and job sources may receive the query or retrieve public listings. Avoid including private data in external searches. Following an external link opens a service governed by its own policies. We do not submit job applications merely because you view a job listing.
5. Recipients and international processing
Information may be processed by hosting, security/CDN, email, AI and payment providers, and by people authorized to support the service, only as needed for the relevant purpose. Lemon Squeezy acts as merchant of record for purchases made through its checkout and processes payment and tax information under its own notices. We may disclose information when legally required, to protect rights and security, or in a business transfer subject to applicable safeguards.
Providers may process data outside your country, including in the United States. Applicable transfer requirements can include an adequacy decision, approved contractual safeguards or another legally available mechanism. Your use of the service does not waive those requirements. Contact us for information about the recipients and safeguards relevant to your request.
6. Grounds for processing
Depending on the applicable law, processing relies on what is necessary to provide the service you request, comply with legal obligations, pursue permitted legitimate interests such as proportionate service security, or your consent where required. Optional consent can be withdrawn for future processing without affecting earlier lawful processing. A browser permission alone is not consent to every other use of data. Information necessary for authentication, billing or processing your request is required to supply the corresponding feature.
7. Cookies and device storage
We use cookies or similar storage for login sessions, security, preferences and local chat functionality. Browser controls can remove or block them, but some features may stop working. Non-essential analytics or advertising technologies, where used, require the choices or consent required by your local law; this policy alone does not provide that consent. We do not sell your chat content for advertising.
8. Retention and deletion
Email sign-in temporarily stores the email address, a cryptographic code verifier, browser-binding information, expiry and failed-attempt counts. Codes expire after 10 minutes and are single-use; expired records are scheduled for cleanup, which may run later than expiry. Email providers process delivery data and the message. Security counters limit requests by email and IP. In the email-code registration flow, a new account is not created when a declared age is below 18, and the rejected numeric age is not saved in the account record.
Local history and files remain subject to your browser storage controls and deletion actions. Account and subscription information is kept as needed to operate your account, handle billing and disputes, prevent fraud and meet recordkeeping duties. Support and security records are retained according to the purpose, incident needs and applicable obligations, rather than as a permanent chat archive. Temporary processing and provider retention are described above. Backups and legally preserved records may follow separate deletion cycles and restricted retention.
Deleting a local chat does not automatically delete billing records, support correspondence, provider logs or copies you exported or shared. For account or server-held data requests, use the contact below. We assess what can be erased and explain any lawful exceptions. We cannot restore local-only content after its only copy is lost.
9. Your rights
Subject to applicable law, you may request information about processing, access or a copy, correction, deletion, restriction, portability, objection to certain processing, or withdrawal of consent. You may complain to the competent privacy regulator, including SDAIA where the Saudi Personal Data Protection Law applies, or your EEA/UK supervisory authority where relevant. We may need proportionate identity verification and will respond within the applicable legal time limit. We do not use the assistant to make solely automated decisions about you that have legal or similarly significant effects.
10. Children, security and updates
The service is for adults aged 18 and over only; parental permission does not permit use below 18. Contact us if you believe an under-18 person has an account. We will assess the report, restrict ineligible access and delete data where required, retaining only information necessary for lawful security, billing or other obligations. Avoid sending highly sensitive information unless necessary and legally permitted. We use safeguards intended to protect data, but no system can guarantee absolute security; incidents are assessed and notified where the law requires.
We update this policy when the service or requirements change and identify the revision date. Material changes requiring notice or consent will be handled as required by law. Re-read this page before using newly introduced features.
Apple and Google sign-in
You may sign in with Apple or Google instead of an email code. Zaknor uses the provider account identifier, verified email address and, when supplied, name to authenticate and link your account. Apple lets you hide your email through its private relay; you do not need to reveal your personal email to use Apple sign-in. Apple linking is explicit for an existing Zaknor account. We retain the Apple account identifier and an encrypted token used to revoke authorization on account deletion. Google provides verified identity information; Zaknor does not request access to your Gmail messages or Google Drive files for sign-in. Provider sign-in data is not used for advertising tracking. Provider authentication may create an account record before the age declaration; the service remains unavailable until the required adult profile is completed.
Contact and responsibility
Responsible for the service and its data processing: Zaknor.
Privacy and data requests: privacy@zaknor.com.
Contact, support and billing.