Your data, treated like research data.

Account data: the name, work email, and company you provide on sign-up. Used to authenticate you and contact you about your account.

Study inputs: the briefs, stimuli, audience definitions, and any uploaded customer data you bring to a study. Scoped to your workspace.

Study outputs: the populations, transcripts, surveys, and reasoning chains Zippy produces for you. Yours to keep, export, and delete.

Operational telemetry: aggregated, non-identifying usage signals (page views, error rates, feature usage) used to improve product reliability.

We do not use your prompts, populations, or outputs to train any shared model. Yours or anyone else's.

We do not sell, rent, or share your data with third-party advertisers. We have no advertising business.

We do not allow other Zippy customers to read, query, or otherwise access content that lives in your workspace.

Customer data is encrypted at rest (AES-256) and in transit (TLS 1.3). All hosting and processing happens in the United States; customer data does not leave US soil. Specific region details available on request.

We use leading US-based model providers (OpenAI, Anthropic) under strict no-training agreements. Customer prompts and outputs do not enter shared training pipelines.

Studies, populations, and transcripts persist in your workspace until you delete them or close your account. Deletion is hard-deletion within 30 days, including from backups.

Operational telemetry is retained for 13 months in identifiable form, then aggregated indefinitely.

Access, correction, deletion, export, and objection requests are honored within 30 days. Email privacy@zippypays.com with the request and we'll confirm receipt the same business day.

California residents have additional rights under CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. Other US state privacy laws (Colorado, Connecticut, Virginia, Utah) are honored where they apply.

We use a small set of subprocessors for hosting (AWS), model inference (OpenAI, Anthropic), error monitoring (Sentry), product analytics (PostHog, self-hosted), and email (Resend).

The current list, including processing scope and region, is available on request and updated when subprocessors change.

When the formal Privacy Policy supersedes this summary, customers will be notified by email at least 30 days before the new policy takes effect.