Privacy Policy
Last updated: October 4, 2026
Ler em português (the Portuguese version prevails in case of conflict)
This policy explains what data Zeta collects, why, how long we keep it, who we share it with and how you exercise your rights. It applies to the Zeta app on the web (app.zeta-assistant.com), the macOS, Android and iPhone apps, and this website.
1. Who is responsible
The data controller is PABLO ALFONSO TEIXEIRA UNGARO LTDA, Brazilian company registration (CNPJ) 47.460.147/0001-28 ("Zeta", "we"). For any privacy matter, including reaching our data protection officer, email my.zeta.assistant@gmail.com.
2. Data we collect
2.1 Account
When you sign in with Google we receive your name, email address, profile picture and Google account identifier. We use them to create and identify your account. We never receive your password.
2.2 What you send to Zeta
- Messages, requests and replies in your conversations.
- Voice: audio is streamed in real time for speech recognition and the spoken reply. We keep the transcript of the conversation, not the audio. "Ok Zeta" wake-word detection runs on your own device.
- Files, photos and documents you attach.
2.3 Integrations you connect
- Google Calendar — see section 3.
- Home Assistant — your Home Assistant address and access token (stored encrypted), to run the home commands you ask for.
- Slack — if you install Zeta in a Slack workspace, the messages in which Zeta is mentioned.
2.4 Your devices
Device name, operating system and app version. In the macOS app, when you ask for a task on your computer, Zeta captures the screen during that task to see what it is doing; these captures are used only to carry out your request.
2.5 Technical data
Performance and error measurements (response times, failures, app version) without conversation content, and technical diagnostic logs.
3. Google user data (Sign-In and Google Calendar)
This section specifically describes how Zeta accesses, uses, stores and shares data received from Google APIs.
3.1 What we access
- Sign in with Google (scopes
openid,email,profile): name, email, picture and account identifier. - Google Calendar, only if you connect it under Settings → Integrations:
calendar.events— view, create, edit and delete events on calendars you can edit;calendar.calendarlist.readonly— view the list of your calendars, so you can choose a default calendar.
3.2 How we use it
We use your calendar data only to do what you ask: create, look up, reschedule and cancel events; list your calendars; and, when you ask to invite someone by name, look up that person's email among the attendees of your recent events. None of this happens without a request from you. Zeta asks for confirmation before cancelling events that have other guests or whole recurring series.
3.3 How we store it
- The token that grants access to your calendar is stored encrypted (AES-256-GCM) in our database.
- We do not copy your calendar. Event details appear only in the messages of the conversation in which you made the request and are stored with that conversation.
3.4 Who we share it with
To answer a request, the event data needed is processed by the AI provider that generates the reply (Anthropic), under contract and for that purpose only. We do not sell Google user data, do not use it for advertising, do not transfer it to third parties for any other purpose and do not use it to train artificial intelligence models.
Zeta's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3.5 How to revoke access
Go to Settings → Integrations → Google Calendar → Disconnect: Zeta revokes access at Google and deletes the token from our database immediately. You can also remove access at myaccount.google.com/permissions.
4. Purposes and legal bases
| Purpose | Legal basis (Brazilian LGPD) |
|---|---|
| Create your account and provide the service (conversations, voice, tasks, integrations) | Performance of a contract (art. 7, V) |
| Access your calendar, your home and other integrations | Performance of a contract, following your authorization for each integration (art. 7, V) |
| Security, abuse prevention and troubleshooting | Legitimate interest (art. 7, IX) |
| Improving product performance with content-free metrics | Legitimate interest (art. 7, IX) |
| Complying with legal obligations | Legal obligation (art. 7, II) |
5. Who we share data with
We use providers that process data on our behalf, under contract, only to operate Zeta:
| Provider | Purpose | Location |
|---|---|---|
| Anthropic (Claude) | Processing conversations and running tasks, including screen captures of computer tasks | USA |
| OpenAI | Real-time voice conversation, transcription and web search by voice | USA |
| Sign-In and Google Calendar | USA | |
| Railway | Server and database hosting | USA |
| GitHub | Distribution of app installers | USA |
| Slack | Only if you install the integration | USA |
Under the commercial API terms we use, Anthropic and OpenAI do not use this data to train their models. We do not sell or rent personal data. We may disclose data if required by law or court order.
6. International transfers
The providers above are in the United States, so your data is transferred outside Brazil, based on the contractual safeguards of those providers, as allowed by art. 33 of the LGPD.
7. How long we keep data
| Data | Retention |
|---|---|
| Account, conversations and attachments | While your account exists |
| Integration tokens (Google Calendar, Home Assistant) | Until you disconnect the integration or delete your account |
| Performance metrics (no content) | 180 days; after that, only aggregated anonymous totals |
| Technical diagnostic logs | 30 days |
| Diagnostic audio snippets, when the feature is enabled | 7 days |
8. Security
All traffic uses HTTPS. Integration tokens are encrypted. Access to production data is restricted. No system is 100% secure; if an incident may put you at risk, we will notify you and the Brazilian data protection authority (ANPD) as required by law.
9. Your rights
You may request at any time: confirmation of and access to your data, correction, anonymization or deletion, portability, information about who we share it with, and revocation of authorizations (art. 18 of the LGPD). Email my.zeta.assistant@gmail.com from your account's email address; we reply within 15 days. You may also file a complaint with the ANPD.
10. Account deletion
To delete your account, email my.zeta.assistant@gmail.com from your account's email address. Within 30 days we delete the account, conversations, attachments and integration tokens, and revoke Google Calendar access. We keep only what the law requires.
11. Children and teenagers
Zeta is not intended for anyone under 18 and does not knowingly collect their data. If you know of an account belonging to a minor, write to us and we will delete it.
12. Cookies and local storage
The app stores in your browser or device only what is needed to keep you signed in and remember preferences. We do not use advertising or tracking cookies. This website does not use analytics; it loads its font from Google Fonts.
13. Changes to this policy
If we make a material change, we will notify you in the app or by email before it takes effect. The date at the top shows the last update.
14. Contact
PABLO ALFONSO TEIXEIRA UNGARO LTDA · CNPJ 47.460.147/0001-28 · my.zeta.assistant@gmail.com