Privacy Policy

Company

CBT Artificial Intelligence Technology INC doing business as "ZUUZ" ("Company," "we," "our," "us")

440 N Wolfe Road, Sunnyvale, CA, USA 94085

Contact: contact@zuuz.ai

Your privacy is important to us. This privacy statement explains the personal data ZUUZ collects, uses, stores, discloses, and protects when customers use the ZUUZ SaaS platform, websites, and services. How ZUUZ processes it, and for what purposes.

Zuuz offers SaaS Software Products which are used to help enterprises worldwide connect and improve their productivity. References to Zuuz products in this statement include Zuuz services, websites, apps, software, servers, and devices.

If you are a California resident, see "Your California privacy rights" below for additional information about the processing of your personal data and your rights under California law.

Personal data we collect

Zuuz collects data from you, through our interactions with you and through our products. This includes:

• Information You Provide: Name, email, phone number, account login details, and billing details (processed through secure third-party processors).
• Customer Data Uploaded to the Platform: Operational data entered by users, files, documents, or integrations provided by customers. ZUUZ processes this data solely as a data processor on behalf of the customer.
• Automatically Collected Information: IP address, browser information, device IDs, usage events and logs, and cookies and tracking technologies.

The data we collect depends on the context of your interactions with Zuuz and the choices you make, including your privacy settings and the products and features you use. We also obtain data about you from Zuuz affiliates, subsidiaries, and third parties.

You have choices when it comes to the technology you use and the data you share. When we ask you to provide personal data, you can decline. Many of our products require some personal data to provide you with a service. If you choose not to provide data required to provide you with a product or feature, you cannot use that product or feature.

For U.S. customers, we process data for: Contract fulfilment, Service delivery, Security and fraud prevention, and Consent (where applicable).

How we use personal data

Zuuz uses the data we collect to provide you with rich, interactive experiences. In particular, we use data to:

• Provide our products and SaaS services, including updating, securing, and troubleshooting, as well as providing support.
• Improve and develop features and performance of our products.
• Authenticate users and provide customer service; send service-related communications; manage billing and accounts.
• Personalize our products and make recommendations.
• Communicate with you about our products, services, and company updates.

We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce, and doing research.

Our processing of personal data includes both automated and manual (human) methods of processing. Our automated methods often are related to and supported by our manual methods.

Reasons we share personal data

We share your personal data with your consent or to complete any transaction or provide any product you have requested or authorized. We also share data with:

• Zuuz-controlled affiliates and subsidiaries
• Vendors working on our behalf
• Legal authorities when required by law or to respond to legal process
• Others to protect our customers, protect lives, or maintain the security of our products

Zuuz confirms that it never sells personal information.

How to access and control your personal data

You can control your personal data that Zuuz has obtained, and exercise your data protection rights, by contacting Zuuz or using various tools we provide. You may request:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Data export

To exercise any of these rights, contact us at contact@zuuz.ai.

Data sharing and retention

Zuuz may share data with:

• Cloud hosting providers (e.g., AWS, Azure, GCP)
• Payment processors
• Customer support tools
• Legal authorities only when required by law

Zuuz retains data only as long as necessary for Service delivery, Legal obligations, and Contractual obligations.

Google user data

When you connect a Google account, ZUUZ accesses only the data needed for the feature you turn on:

• Gmail (read): your email messages and attachments, used to identify sales conversations, organize them into leads and deals, summarize them and suggest replies.
• Gmail (send): used only to send an email you write or review and send by clicking Send in ZUUZ. ZUUZ never sends email automatically or in bulk.
• Google Calendar (read): your calendar events, used to show your customer meetings on the related lead or deal. ZUUZ never creates, changes or deletes events.
• Google Meet (read): transcripts of meetings you took part in, used to write meeting minutes and next steps.
• Google Drive (read): files in the folder you choose to follow, used to attach meeting notes and documents to the related deal. ZUUZ never creates, changes or deletes files.

Google user data is stored and processed in ZUUZ's own Google Cloud environment. It is not sold, not used for advertising, and not used to train general-purpose AI models. It is not shared with third parties except as needed to provide the service or to comply with the law.

You can disconnect any Google service at any time in Settings → Integrations, and remove ZUUZ's access at https://myaccount.google.com/permissions. To have your data deleted, email privacy@zuuz.ai. We delete it within 45 days.

ZUUZ's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Microsoft and other connected data

When you connect a Microsoft 365 or Outlook account, you sign in and approve access through Microsoft's own consent screen (OAuth). ZUUZ asks only for the permissions needed for the feature you turn on:

• Outlook mail (read): your email messages and attachments, used to identify sales conversations, organize them into leads and deals, summarize them and suggest replies. ZUUZ never sends email automatically or in bulk.
• Microsoft Teams (read): transcripts of the meetings you connect, used to write meeting minutes and next steps.

If you connect other sources, such as LinkedIn messages, call transcripts from a supported calling platform, or replies from a sales engagement tool, ZUUZ uses that data in the same way: only to provide the features you turn on.

Data from Microsoft and these other connected sources is not sold, not used for advertising, and not used to train general-purpose AI models. It is not shared with third parties except as needed to provide the service or to comply with the law.

ZUUZ stores the email content it processes, encrypted, for a retention period of 60 days by default, and your account can choose a shorter period. When the period ends, the email text, attachments, meeting transcripts and short AI summaries are deleted. Metadata (who emailed whom, when, and which emails share a thread) and CRM records stay for as long as you use ZUUZ and contain no email text.

You can disconnect any connected service at any time in Settings → Integrations. You can also remove ZUUZ's access in your Microsoft account settings, and for a work account your Microsoft 365 administrator can revoke it for your organization. To have your data deleted, email contact@zuuz.ai. We delete it within 45 days.

SMS and mobile messaging

If you give consent on our sign-up form, Zuuz may send you SMS text messages about your trial, onboarding, support requests and account. We only send SMS to people who have ticked the SMS consent box. The box is never pre-selected, and consent is never a condition of purchase.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party. We do share your mobile number with the subcontractors that deliver the messages on our behalf, namely our messaging platform and telecom carriers, and with support vendors acting on our instructions. That is the only sharing that takes place.

Message frequency varies, typically 2–6 messages per month. Message and data rates may apply.

Reply STOP to any message to opt out. Reply HELP for help, or email contact@zuuz.ai. Opting out of SMS does not affect your trial, your account, or the emails you receive from us.

We keep a record of your consent, including the time it was given, the exact wording you agreed to, and the page it was given on, so that proof of consent can be produced if a carrier or regulator requests it.

Cookies and similar technologies

Cookies are small text files placed on your device to store data that can be recalled by a web server. We use cookies and similar technologies for storing and honoring your preferences and settings, enabling you to sign in, combating fraud, and analyzing how our products perform.

Third-party cookies may include Analytics cookies (we use Google Analytics), cookies set by third-party content embedded on our pages (such as YouTube videos and our meeting scheduler), and Required cookies used to perform essential website functions. Embedded third-party content is governed by that provider's own privacy policy. Where required, we obtain your consent prior to placing optional cookies.

You have a variety of tools to control the data collected by cookies, web beacons, and similar technologies. You can use controls in your internet browser to limit how websites are able to use cookies and to withdraw your consent by clearing or blocking cookies.

Artificial Intelligence

Zuuz leverages the power of artificial intelligence (AI) in many of our products and services, including by incorporating generative AI capabilities. Zuuz's collection and use of personal data in developing and deploying AI features is consistent with the commitments outlined in this privacy statement.

AI/ML Processing of Data

Zuuz uses artificial intelligence models to power features such as email classification, summarization, drafting, and semantic search over the Google Workspace data you have connected. The following disclosures apply:

• Zuuz runs its AI processing on Google Cloud's Vertex AI, within Zuuz's own Google Cloud project. That processing is governed by Google Cloud's own data protection commitments. Workspace user data processed by these models is not used to train any general-purpose or foundational AI model, including Google's public models.
• Zuuz does not use, transfer, or sell Google user data (raw, aggregated, or derived) to train, fine-tune, or improve any generalized machine learning or artificial intelligence model.

Data protection mechanisms for sensitive data

Where Zuuz processes sensitive data (including data obtained through connected services such as Google Workspace) we apply the following protections:

• Encryption: Data is encrypted in transit (TLS) and at rest.
• Access controls: Access to sensitive data is restricted to authorized personnel on a least-privilege, need-to-know basis, and is logged and monitored.
• Purpose limitation: Sensitive data obtained through connected services (e.g., Gmail, Google Drive) is used only to provide the specific features you have requested (such as classification, summarization, drafting, and search) and is never used to serve advertising or to train general-purpose AI models.
• No human review by default: Zuuz does not allow employees or contractors to read your sensitive data except where necessary to (a) comply with a legal obligation, (b) investigate a security incident, or (c) with your explicit consent for support purposes, any such access is logged.
• Data minimization and retention: Sensitive data is retained only as long as necessary to provide the service and can be deleted upon request.
• Compliance: Zuuz's access to and use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Products provided by your organization

If you use a Zuuz product with an account provided by an organization you are affiliated with, such as your work account, that organization can:

• Control and administer your Zuuz product and account, including controlling privacy-related settings.
• Access and process your data, including interaction data, diagnostic data, and the contents of your communications and files associated with your Zuuz account.

If you have questions about Zuuz's processing of your personal data in connection with providing products to your organization, please contact your organization's administrator.

Enterprise and developer products

Enterprise and Developer Products are Zuuz products and related software offered to and designed primarily for use by organizations and developers, including:

• Cloud services and Online Services
• Enterprise and developer tools and cloud-based services
• Professional services such as onboarding, data migration, and data science services

In the event of a conflict between this Zuuz privacy statement and the terms of any agreement between a customer and Zuuz for Enterprise and Developer Products, the terms of those agreements will control.

Your California privacy rights

This section applies to California residents and supplements the rest of this privacy statement. It describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").

Personal information we collect

In the past 12 months, ZUUZ has collected the following categories of personal information, as described in "Personal data we collect" above:

• Identifiers, such as name, email address, phone number, account login details, IP address and device IDs.
• Commercial information, such as billing details. Payment details are processed by secure third-party payment processors.
• Internet or other electronic network activity, such as browser information, usage events and logs, and information collected by cookies.
• Professional information, such as the organization that provides your work account.
• The contents of communications you connect to ZUUZ, such as email messages and attachments, calendar events, meeting transcripts and messages.
• Sensitive personal information, limited to account login details and the contents of the email and messages you connect to ZUUZ.

We collect this information from you, automatically when you use our products, from the services you connect, and from Zuuz affiliates, subsidiaries and third parties. We use it for the purposes described in "How we use personal data", disclose it to the categories of recipients described in "Reasons we share personal data" and "Data sharing and retention", and keep it only as long as described in "Data sharing and retention".

No sale or sharing of personal information

ZUUZ does not sell personal information, and does not share personal information for cross-context behavioral advertising, as those terms are defined in the CCPA. We have not done so in the past 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

Your rights

• Right to know: you can ask what personal information we have collected about you, the categories of sources, the purposes for collecting it, the categories of third parties we disclose it to, and the specific pieces of personal information we hold about you.
• Right to delete: you can ask us to delete personal information we have collected from you, subject to the exceptions the law allows.
• Right to correct: you can ask us to correct inaccurate personal information we hold about you.
• Right to opt out of sale or sharing: ZUUZ does not sell or share personal information, so there is nothing to opt out of. If that changes, we will update this statement and give you a way to opt out first.
• Right to limit the use of sensitive personal information: ZUUZ uses sensitive personal information only to provide the services you request, to keep them secure, and for other purposes the CCPA permits. We do not use it to infer characteristics about you.
• Right to non-discrimination: we will not deny you service, charge you a different price, or give you a different level of service because you exercised any of these rights.

How to submit a request

To submit a request, email contact@zuuz.ai or call +1 858 585 9715. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, up to a further 45 days, we will tell you why.

Verification: to protect your data, we verify your identity before we act on a request to know, delete or correct. We do this by matching the information you give us with information we already hold, for example by asking you to confirm the request from the email address on your account. We use information provided for verification only for that purpose.

Authorized agents: you can have an authorized agent submit a request for you. We will ask the agent for proof that you gave them signed permission, and we may ask you to verify your identity directly with us, unless the agent holds a valid power of attorney under California law.

Data we process for business customers: when ZUUZ processes Customer Data on behalf of a business customer, such as the contents of a connected work mailbox, ZUUZ acts as that customer's service provider. If your request relates to that data, please send it to the organization that uses ZUUZ. We will help them respond.

Children's privacy

ZUUZ does not target or knowingly collect data from children under age 13.

International transfers

Data may be processed in the United States. Customers outside the U.S. consent to transfer by using the service.

Updates to this policy

We may update this policy; changes will be posted with a new revision date at the top of this page.