Summary
- We only learn from the apps and sites you put on your allow-list.
- We never log keystrokes and never take screenshots while learning.
- Secrets such as card numbers and API keys are redacted on your Mac before upload.
- We don't sell your data or use it for advertising.
- You can see the source of everything learned, delete any of it, or export and delete all of your data.
What we collect
Account information
Your name, email address and authentication details, handled by our authentication provider (Clerk).
Capture data (from the Mac app)
For allow-listed apps and sites only: app and window names, browser URLs, the accessibility description of elements you click, field values as they change, menu selections, and idle/lock events used to separate sessions. Redaction replaces sensitive values with placeholders before upload.
Learned content
Episodes, playbooks, facts, task types, proposals, tags, groups and exports derived from your capture data, plus the edits you make to them.
Agent run data
Work packages you create, the agent's actions, approvals, screenshots of the target window taken during runs, and an audit log of each run.
Device and usage data
Registered device names, app and OS versions, last-seen times, and service logs needed to operate, secure and debug the service.
How we use it
- To provide the service: learn playbooks, answer your questions, build exports and run agents you start.
- To secure the service: detect abuse, enforce isolation, and investigate incidents.
- To support you when you contact us.
We don't use your capture data or learned content to train general-purpose models.
AI model providers
Learning, Ask and the agent use Anthropic's Claude models through the Anthropic API. Relevant content is sent to Anthropic to generate results, under data-retention terms set by our agreement with Anthropic. Captured content is always sent as data, separated from instructions.
Sharing & subprocessors
We share data only with providers that help us run the service:
- Amazon Web Services — hosting, storage and encryption (United States).
- Anthropic — AI models.
- Vercel — web hosting.
- Clerk — authentication.
- Cloudflare — DNS only; your traffic isn't proxied through it.
When you connect an MCP client such as Claude, or export a package, you choose to send your playbooks to that destination. We may disclose information if required by law, and we'll tell you when we're allowed to.
Retention
- Raw capture data: deleted after your retention window (default 30 days, adjustable in Settings).
- Learned content and run audit logs: kept until you delete them or your account.
- After you delete your account, we remove your data from active systems within 30 days and from backups on their normal expiry.
Your choices & rights
- Edit your allow-list, pause capture, or forget recent activity at any time.
- Delete any episode, fact or playbook, or export or delete all data from Settings.
- Revoke devices and connected MCP clients.
- Depending on where you live, you may have rights to access, correct, delete or port your data, or object to processing. Contact us to exercise them.
Security
Data is encrypted in transit and at rest with per-user encryption context, isolated per user, and protected by the controls described on our Security page.
International transfers
Your data is processed in the United States. Where required, we rely on appropriate safeguards for transfers.
Children
Z.E.U.S isn't intended for anyone under 18, and we don't knowingly collect their data.
Changes
We'll post changes here and update the date above. For material changes, we'll notify you by email or in the app before they take effect.
Contact
Questions or requests: privacy@zeus.yskew.com.