1. Who we are
This Privacy Policy explains how Z3NTRA LLC, a Georgia limited liability company ("Z3NTRA," "we," "us," or "our"), collects, uses, and shares information through the Z3NTRA application (the "Service"). It applies to the account holders who sign up for and use the Service.
2. Information we collect
We collect the following categories of information:
- Account information — the email address and (for password accounts) hashed password you provide at signup, or your name, email, and profile picture if you sign up with Google.
- Connected-system credentials — API tokens or OAuth credentials for any external system you connect (Azure DevOps, Jira, and so on). These are encrypted at rest and are never displayed back to you or anyone else in full — only a masked preview.
- Synced task content — the task titles, descriptions, statuses, deadlines, and related details that Z3NTRA pulls in from the systems you connect, plus anything you create directly in Z3NTRA (projects, priorities, links between tasks, notes).
- Billing information — handled directly by our payment processor, Stripe. We receive and store limited billing metadata (subscription status, plan, renewal date) but not your full card number.
- Usage and log data — standard technical information like IP address, browser type, and request timestamps, generated by using the Service.
- Cookies — a single session cookie that keeps you signed in. See Section 6 below.
3. How we use information
We use the information above to:
- provide the Service — authenticate you, sync and display your tasks, run the priority scoring engine, and write changes back to connected systems where supported;
- process payments and manage your subscription, through Stripe;
- send account-related email — verification, password reset, and, if you've enabled them, reminders about tasks that are due soon or overdue;
- provide customer support when you contact us, or when an administrator accesses your account to help troubleshoot an issue (see Section 7);
- maintain the security and integrity of the Service, including detecting and preventing abuse; and
- comply with legal obligations.
We process this information on the basis that it's necessary to perform our contract with you (providing the Service you signed up for), and, for security and abuse-prevention, on the basis of our legitimate interest in keeping the Service safe and working.
4. How we share information
We don't sell your information. We share it only as follows:
- Infrastructure subprocessors — a small number of vendors we use to run the Service itself, such as our hosting provider, Stripe for payments, Google for sign-in and the optional Google Docs integration, and our email delivery provider. The full current list, with what each one does, is in our Subprocessor List.
- Systems you connect — when you connect an external system (Azure DevOps, Monday.com, Jira, and so on) and authorize a sync or write-back, Z3NTRA sends and receives data from that system on your instruction. You choose which systems to connect, and that provider's own privacy policy governs its handling of the data once it's there.
- Legal reasons — if required to comply with a legal obligation, or to protect the rights, property, or safety of Z3NTRA, our users, or others.
- A business transfer — if Z3NTRA is involved in a merger, acquisition, or sale of assets, account information may be transferred as part of that transaction, subject to the same commitments in this policy.
5. What we don't do
Z3NTRA does not use third-party advertising or analytics trackers of any kind — there's no ad network, ad pixel, or analytics script (like Google Analytics or similar) running anywhere in the Service. We don't sell or rent your information to data brokers or advertisers.
6. Cookies
The Service uses one cookie — a session cookie that keeps you signed in. It's not readable by page scripts, is limited to travel only over HTTPS in production, and expires automatically. We don't use tracking or advertising cookies.
7. Administrative access
A small number of Z3NTRA administrators can view the user directory and, for support or security purposes, access an account directly — including signing in as that account to see what the user sees ("impersonation"). Every time this happens, it's recorded in an audit log (who, which account, when, start and stop). This access exists to let us help troubleshoot issues and investigate abuse or security concerns, not for routine browsing of customer data.
8. Data security
Passwords are hashed with scrypt, a slow, memory-hard algorithm designed to resist large-scale guessing — we never store your password itself. Connected-system credentials are encrypted at rest with AES-256-GCM. Every account's data is isolated from every other account at the database level, and all traffic to the Service is encrypted in transit (HTTPS). No system is perfectly secure, and we can't guarantee absolute security, but these are the concrete measures in place today.
9. Data retention and deletion
We retain your account and task data for as long as your account is active, so the Service keeps working the way you'd expect. Z3NTRA does not currently have a self-service "delete my account" feature in the app. If you want your account and associated data deleted, contact us at privacy@z3ntra.ai and we'll process the request. Individual tasks can be removed from your list at any time from within the app.
10. Your rights
Depending on where you're located, you may have rights to access, correct, export, or delete the personal information we hold about you, or to object to or restrict certain processing. You can update your account details directly in the app, or reach us at privacy@z3ntra.ai for anything else, including deletion requests. We'll respond within a reasonable time.
11. Children's privacy
The Service is intended for business and professional use by adults and is not directed at children. We do not knowingly collect personal information from anyone under 18.
12. International users
Z3NTRA is operated from, and its data is hosted in, the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home jurisdiction.
13. Changes to this policy
We may update this policy from time to time. If we make a material change, we'll update the "Last updated" date above and, where required, notify account holders. Continued use of the Service after a change takes effect means you accept the updated policy.
14. Contact
Questions or requests about this policy can be sent to privacy@z3ntra.ai.