Privacy Policy

1. What we collect

• Account data: your email address (we use passwordless magic-link sign-in).
• Profile data: your onboarding questionnaire answers (life stage, decision types, style preferences), which personalize your experience.
• Content data: the decisions, conversations, and reflections you record in the Service.
• Usage data: basic, privacy-friendly analytics (pages viewed, features used) without cross-site tracking.
• Payment data: payments are handled by our Merchant of Record, Paddle (Paddle.com Market Ltd). We never see or store your full card details. Paddle processes your payment information under its own privacy policy.

2. How we use your information

• To provide the Service: generating personalized decision guidance from your conversations and profile.
• To send you service emails (sign-in links, decision review reminders you scheduled).
• To improve the Service using aggregated, de-identified data.

We do not sell your personal data. We do not use your private conversations to advertise to you.

3. AI processing and international transfers

To generate guidance, your conversation content is sent to third-party large language model providers acting as our subprocessors, under data processing agreements. Your stored account data is hosted in secure data centers. Where data is transferred internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs). We request that model providers not use your inputs to train their models where such an option is available on our plan.

4. Legal bases (GDPR)

• Performance of a contract (Art. 6(1)(b)): providing the Service you signed up for.
• Consent (Art. 6(1)(a)): optional personalization and product emails; you may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)): service security, abuse prevention, aggregate analytics.

5. Your rights

You may at any time: access your data; export your decision records (machine-readable format); correct inaccuracies; delete your account and associated personal data; object to or restrict processing; withdraw consent; lodge a complaint with your supervisory authority. To exercise any right, email support@asktzu.com — we respond within 30 days.

6. Retention

Account and content data are kept while your account is active. If you delete your account, personal data is deleted within 30 days, except where we must retain records by law (e.g., transaction records retained by our Merchant of Record).

7. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to the operators of the Service and logged.

8. AI disclosure

The mentor you talk to is an artificial intelligence. Content it produces is generated automatically and may be inaccurate. It does not replace professional advice (see our Disclaimer).

9. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from minors; if we learn we have, we delete it.

10. Changes

We will notify material changes to this policy by email or a notice in the Service at least 14 days before they take effect.

11. Contact

Privacy questions: support@asktzu.com.