Privacy Policy

Company

CBT Artificial Intelligence Technology INC doing business as "ZUUZ" ("Company," "we," "our," "us")

440N Wolfe Road, Sunnyvale, CA, USA 94085

Contact: info@zuuz.ai

Your privacy is important to us. This privacy statement explains the personal data ZUUZ collects, uses, stores, discloses, and protects when customers use the ZUUZ SaaS platform, websites, and services. How ZUUZ processes it, and for what purposes.

Zuuz offers SaaS Software Products which are used to help enterprises worldwide connect and improve their productivity. References to Zuuz products in this statement include Zuuz services, websites, apps, software, servers, and devices.

For individuals in the United States, please refer to the U.S. Privacy Data Notice and the Consumer Health Data Privacy Policy for additional information about the processing of your personal data, and your rights under applicable U.S. state data privacy laws.

Personal data we collect

Zuuz collects data from you, through our interactions with you and through our products. This includes:

• Information You Provide: Name, email, phone number, account login details, and billing details (processed through secure third-party processors).
• Customer Data Uploaded to the Platform: Operational data entered by users, files, documents, or integrations provided by customers. ZUUZ processes this data solely as a data processor on behalf of the customer.
• Automatically Collected Information: IP address, browser information, device IDs, usage events and logs, and cookies and tracking technologies.

The data we collect depends on the context of your interactions with Zuuz and the choices you make, including your privacy settings and the products and features you use. We also obtain data about you from Zuuz affiliates, subsidiaries, and third parties.

You have choices when it comes to the technology you use and the data you share. When we ask you to provide personal data, you can decline. Many of our products require some personal data to provide you with a service. If you choose not to provide data required to provide you with a product or feature, you cannot use that product or feature.

For U.S. customers, we process data for: Contract fulfilment, Service delivery, Security and fraud prevention, and Consent (where applicable).

How we use personal data

Zuuz uses the data we collect to provide you with rich, interactive experiences. In particular, we use data to:

• Provide our products and SaaS services, including updating, securing, and troubleshooting, as well as providing support.
• Improve and develop features and performance of our products.
• Authenticate users and provide customer service; send service-related communications; manage billing and accounts.
• Personalize our products and make recommendations.
• Communicate with you about our products, services, and company updates.

We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce, and doing research.

Our processing of personal data includes both automated and manual (human) methods of processing. Our automated methods often are related to and supported by our manual methods.

Reasons we share personal data

We share your personal data with your consent or to complete any transaction or provide any product you have requested or authorized. We also share data with:

• Zuuz-controlled affiliates and subsidiaries
• Vendors working on our behalf
• Legal authorities when required by law or to respond to legal process
• Others to protect our customers, protect lives, or maintain the security of our products

Zuuz confirms that it never sells personal information.

How to access and control your personal data

You can control your personal data that Zuuz has obtained, and exercise your data protection rights, by contacting Zuuz or using various tools we provide. You may request:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Data export

To exercise any of these rights, contact us at info@zuuz.ai.

Data sharing and retention

Zuuz may share data with:

• Cloud hosting providers (e.g., AWS, Azure, GCP)
• Payment processors
• Customer support tools
• Legal authorities only when required by law

Zuuz retains data only as long as necessary for Service delivery, Legal obligations, and Contractual obligations.

SMS and mobile messaging

If you give consent on our sign-up form, Zuuz may send you SMS text messages about your trial, onboarding, support requests and account. We only send SMS to people who have ticked the SMS consent box. The box is never pre-selected, and consent is never a condition of purchase.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party. We do share your mobile number with the subcontractors that deliver the messages on our behalf, namely our messaging platform and telecom carriers, and with support vendors acting on our instructions. That is the only sharing that takes place.

Message frequency varies, typically 2–6 messages per month. Message and data rates may apply.

Reply STOP to any message to opt out. Reply HELP for help, or email support@zuuz.ai. Opting out of SMS does not affect your trial, your account, or the emails you receive from us.

We keep a record of your consent, including the time it was given, the exact wording you agreed to, and the page it was given on, so that proof of consent can be produced if a carrier or regulator requests it.

Cookies and similar technologies

Cookies are small text files placed on your device to store data that can be recalled by a web server. We use cookies and similar technologies for storing and honoring your preferences and settings, enabling you to sign in, providing interest-based advertising, combating fraud, and analyzing how our products perform.

Third-party cookies may include Social Media cookies, Analytics cookies, Advertising cookies, and Required cookies used to perform essential website functions. Where required, we obtain your consent prior to placing optional cookies.

You have a variety of tools to control the data collected by cookies, web beacons, and similar technologies. You can use controls in your internet browser to limit how websites are able to use cookies and to withdraw your consent by clearing or blocking cookies.

Artificial Intelligence

Zuuz leverages the power of artificial intelligence (AI) in many of our products and services, including by incorporating generative AI capabilities. Zuuz's deployment and use of AI is subject to Zuuz's AI Principles and Responsible AI Standard, and Zuuz's collection and use of personal data in developing and deploying AI features is consistent with the commitments outlined in this privacy statement.

AI/ML Processing of Data

Zuuz uses artificial intelligence models to power features such as email classification, summarization, drafting, and semantic search over the Google Workspace data you have connected. The following disclosures apply:

• Zuuz operates its primary AI models) including the Gemma large language model (as self-hosted, offline deployments within Zuuz's own isolated infrastructure. Workspace user data processed by these models is never transmitted to any third-party AI provider or used to train any general-purpose or foundational AI model.
• Where Zuuz uses Google Cloud's Vertex AI (Gemini) for specific processing tasks, that usage is governed by Google Cloud's own data protection commitments; user data is not used to train Google's public models.
• Zuuz does not use, transfer, or sell Google user data) raw, aggregated, or derived (to train, fine-tune, or improve any generalized machine learning or artificial intelligence model.

Data protection mechanisms for sensitive data

Where Zuuz processes sensitive data) including data obtained through connected services such as Google Workspace (we apply the following protections:

• Encryption: Data is encrypted in transit (TLS) and at rest.
• Access controls: Access to sensitive data is restricted to authorized personnel on a least-privilege, need-to-know basis, and is logged and monitored.
• Purpose limitation: Sensitive data obtained through connected services (e.g., Gmail, Google Drive) is used only to provide the specific features you have requested) such as classification, summarization, drafting, and search (and is never used to serve advertising or to train general-purpose AI models.
• No human review by default: Zuuz does not allow employees or contractors to read your sensitive data except where necessary to (a) comply with a legal obligation, (b) investigate a security incident, or (c) with your explicit consent for support purposes, any such access is logged.
• Data minimization and retention: Sensitive data is retained only as long as necessary to provide the service and can be deleted upon request.
• Compliance: Zuuz's access to and use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Products provided by your organization

If you use a Zuuz product with an account provided by an organization you are affiliated with, such as your work account, that organization can:

• Control and administer your Zuuz product and account, including controlling privacy-related settings.
• Access and process your data, including interaction data, diagnostic data, and the contents of your communications and files associated with your Zuuz account.

If you have questions about Zuuz's processing of your personal data in connection with providing products to your organization, please contact your organization's administrator.

Enterprise and developer products

Enterprise and Developer Products are Zuuz products and related software offered to and designed primarily for use by organizations and developers, including:

• Cloud services and Online Services
• Enterprise and developer tools and cloud-based services
• Professional services such as onboarding, data migration, and data science services

In the event of a conflict between this Zuuz privacy statement and the terms of any agreement between a customer and Zuuz for Enterprise and Developer Products, the terms of those agreements will control.

Children's privacy

ZUUZ does not target or knowingly collect data from children under age 13.

International transfers

Data may be processed in the United States. Customers outside the U.S. consent to transfer by using the service.

Updates to this policy

We may update this policy; changes will be posted with a new revision date at the top of this page.