Volare Holdings LLC ("we", "our", or "us") operates the OpenZulu platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the OpenZulu managed service, Zulu Assistant, our websites, mobile apps, and customer support.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

Register for an account
Sign up for our newsletter
Contact our support team
Participate in surveys or promotions

This information may include your name, email address, phone number, company name, and subscription status. Payment processors handle payment credentials; we receive transaction and entitlement information rather than complete payment-card details.

1.2 Usage Data

We automatically collect certain information when you use our service, including:

IP address and browser type
Device information
Pages viewed and features used
Time spent on the platform
Referring website addresses
App, channel, subscription, and entitlement identifiers

1.3 AI Conversation Data

When you interact with your AI agent, your messages and any content your agent needs to complete a task are processed to provide the service. To generate responses, conversation content is sent to the third-party AI model provider that powers your agent. We do not sell your conversation data, and we do not use it to train third-party AI models. Credentials you connect (such as email account passwords) are encrypted at rest as described in Section 3.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send administrative information and updates
Respond to your comments and questions
Personalize your experience
Monitor and analyze usage patterns
Detect, prevent, and address technical issues
Comply with legal obligations

3. Data Security

We take reasonable measures to protect your data, including:

AES-256 encryption of connected credentials at rest
TLS for data in transit
Access controls for production systems and service data
Operational monitoring, dependency updates, and incident response procedures

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

3.1 Google User Data (Limited Use)

If you connect a Google account, OpenZulu requests the scopes needed for the features you enable, which may include supported Gmail, Google Sheets, Google Calendar, and Google Analytics workflows. OpenZulu's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the user-facing features you request; we do not sell Google user data, use it for advertising, or use it to develop, improve, or train generalized AI or ML models. You can disconnect your Google account at any time to revoke this access.

4. Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain security and business records, resolve disputes, and meet legal obligations. Retention periods vary by data type, subscription status, connected service, and legal requirement. You may request account deletion, subject to information we must or are permitted to retain.

5. Your Privacy Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal information
Object to or restrict certain processing activities
Data portability
Withdraw consent at any time

6. Third-Party Services

We use service providers and connected platforms to operate OpenZulu. These include infrastructure and database providers, Supabase for authentication and application data, Stripe and mobile-app commerce providers for billing and entitlements, Resend for service email, AI model providers for response generation, analytics providers when configured, and the messaging or Google services you choose to connect. Providers process information under their own terms and our applicable agreements with them.

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

8. Children's Privacy

Our service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

By email: privacy@openzulu.com
By mail: Volare Holdings LLC, 159 4th Ave N Suite 100, Nashville, TN 37219