פרטיות ואבטחה

Trust & security (English)

What happens to what you send Zetale, on one page. The binding text is the privacy policy.

Zetale uses AI and can make mistakes — check important dates against the source.

Who receives what, and why

• Google Gemini (USA) — every message and file you send (text, photo, PDF, voice note, video), to understand it and turn it into events, reminders and lists. On paid use Google does not train on the data and keeps logs 55 days for abuse monitoring.
• GREEN-API — the WhatsApp connection: your messages and the assistant's pass through it; and WhatsApp/Meta themselves.
• Render (Frankfurt, EU) — the server that runs the service.
• Supabase (Frankfurt, EU) — the database.
• Cloudflare — hosts the home site (zetale.live), with no cookies and no ad tracking.
• Perplexity (USA) — web questions only, only where web search is on (currently off for customers' accounts), without names, numbers or personal details.
• Only if you connect them: Google Calendar, Todoist or Microsoft Outlook — your events and reminders, to add them there. Disconnect any time.
• FlightAware — only the flight number, only where live flight tracking is on (currently off for customers' accounts).
• Sentry — technical error reports, when enabled, with no message content or personal details.
• A payment processor — only when billing is on, only for the charge; card details are not stored by us.

Never sold, never used for ads.

Where it is stored

• The server (Render) and the database (Supabase) are in Frankfurt, Germany — in the EU.
• Files you add to a project are kept encrypted in the database; photos of organisations' fault reports in private storage, with no public link.
• Understanding messages (Google Gemini) and web search (Perplexity) happen in the USA; by agreeing at sign-up you consent to this transfer for providing the service.

What is encrypted

• Communication and storage are encrypted by the infrastructure providers.
• Personal content is additionally encrypted at field level, with a separate key per family: events and reminders, the conversation history, details you saved, the shopping list, flights' booking code and surname, video transcripts, and projects — including their files.
• Google and Todoist connections: the access token and the account address are stored encrypted.
• Every family and organisation is kept separate; the service admin does not look at content.
• This is not absolute: the server itself can decrypt the data in order to work, so access to it is limited and controlled.

What is deleted, and when

• Files, photos and voice notes are not kept — only their summary, unless you saved them in a project. One-time codes are dropped immediately.
• Conversation history, including the summary of files: 180 days.
• Videos: the video file is never kept; the transcript and description: 180 days, or until deleted if saved in a project.
• Past events: 24 months.
• Agreement documents: 14 months.
• Bought or removed shopping items: 30 days.
• Technical message log: 12 months.
• Organisations' closed faults (description and photos): 24 months after closing.
• Early-access requests from the site: up to 90 days, or until sign-up opens and you get one message about it.
• Saved details and projects: until you delete them.

Deleting everything

Send delete my data on WhatsApp and confirm with DELETE within 10 minutes. When the family's owner does this, the whole family is erased and the subscription cancelled. You can also ask for access, correction or deletion: privacy@snow996.com or through the assistant on WhatsApp, answered within 30 days.

Security incidents

Handled by a written procedure: stop the leak, replace keys, report to the Privacy Protection Authority and notify those affected as the Authority directs.

Privacy contact: privacy@snow996.com or through the assistant on WhatsApp.