Privacy Policy

1. Who we are

Zlarix is an AI-powered policy assistant that helps employees get instant, cited answers from company documents inside Microsoft Teams and Slack. Zlarix is operated by Zlarix ("we", "us", "our").

If you have any questions about this policy, contact us at hello@zlarix.com.

2. What data we collect

We collect only what is necessary to provide the service:

• Account information - your work email address when you sign up for a trial or subscription.
• Documents you upload - PDF, Word, or text files you upload to your workspace. These are stored securely and used only to answer questions within your workspace.
• Questions asked by employees - questions submitted via Teams or Slack, logged to improve answer quality and provide analytics to workspace admins.
• Usage data - number of queries, response times, and feature usage. No personally identifiable employee data is stored beyond the question text.

3. How we use your data

We use your data exclusively to:

• Provide and operate the Zlarix service for your workspace
• Generate answers to employee questions using your uploaded documents
• Send you service notifications and updates (you can opt out anytime)
• Improve answer accuracy and system performance

We do not use your documents or employee questions to train AI models. We do not sell your data to any third party. Ever.

4. Data isolation

Every Zlarix workspace is fully isolated. Your documents and conversation history are stored in a separate namespace. No data from your workspace is accessible to any other customer or workspace.

5. Third-party services

Zlarix uses the following third-party services to operate:

• OpenAI - to generate embeddings and answer questions. Document content is sent to OpenAI's API for processing. OpenAI's data processing agreement applies.
• Supabase - SOC 2 certified database hosting for workspace and usage data.
• Railway - SOC 2 certified infrastructure hosting.
• Qdrant - vector database for document search. Hosted on Railway infrastructure.

6. Data retention

Your uploaded documents and workspace data are retained for the duration of your subscription. When you cancel, your data is deleted within 30 days upon request. Employee question logs are retained for 90 days for analytics, then automatically deleted.

7. Security

All data is encrypted in transit (HTTPS/TLS) and at rest. We use SOC 2 certified infrastructure. Access to production data is restricted to authorised personnel only.

8. Your rights

You have the right to access, correct, or delete your data at any time. To exercise any of these rights, contact us at hello@zlarix.com. We will respond within 5 business days.

If you are in the EU or UK, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with your supervisory authority.

9. Changes to this policy

We may update this policy from time to time. We will notify you by email and update the "Last updated" date at the top of this page. Continued use of Zlarix after changes constitutes acceptance of the updated policy.