Privacy, without the scavenger hunt.

1. Scope

This Privacy Policy applies to the Zone Agents websites, application, APIs, and related services (the “Service”). “Zone Agents,” “we,” “us,” and “our” refer to the operator of the Service.

The Service is intended for business users and is not directed to children under 18.

2. Information we collect

• Account information. When you create an account or sign in, our authentication provider processes details such as your name, email address, sign-in method, session, and security information. Zone Agents does not receive your plaintext password.
• Beta waitlist information. If you join the beta waitlist, we store the email address you submit, the signup source, the time you asserted permission to receive beta-access email, and your invitation status. Submitting an address does not by itself verify that the submitter owns that mailbox.
• Site questions and reports. We process the property addresses, business questions, workflow selections, generated briefs, source trails, shared-report settings, and other content you submit or create.
• Product feedback and usage. Signed-in users may send feedback, an optional rating, and the current product area. We also record report timing, model token counts, estimated cost, and coarse product events. We do not send property addresses, report text, feedback messages, or waitlist email addresses to product analytics. Our private operations channel receives the submitted property address or street and a concise description assembled from submitted request fields alongside operational usage details. For council-records searches, that description can include the user-entered measure, date range, municipality, and committee names. It does not include the generated report text, feedback message, waitlist email address, or account identifier.
• Service and security data. Our hosting and authentication providers may process IP address, device and browser details, request logs, timestamps, cookie identifiers, and similar technical data needed to operate and protect the Service.
• Communications. If you contact us, we process your message and contact details so we can respond. Authentication emails, including verification and password-reset messages, are sent by our authentication provider.

Please do not submit confidential personal information about individuals in a site question. The analysis workflow is designed for property details, business questions, and public municipal records.

3. How we use information

We use information to provide and save site briefs, manage beta access, authenticate users, maintain account security, answer support requests, diagnose failures, measure product use and estimated operating cost, prevent abuse, improve the Service, and comply with legal obligations.

Zone Agents uses automated systems, including artificial intelligence, to research public sources and draft reports. Those reports support human diligence; they do not make decisions about people.

4. Cookies and similar technology

The Service uses cookies and similar storage needed for sign-in, session continuity, security, and basic operation. We do not currently use advertising cookies or sell information for cross-site behavioural advertising.

5. When information is shared

We do not sell personal information. We disclose information only as needed to operate the Service, follow your instructions, protect rights and security, or comply with law.

Service providers that may process information for us include:

• Clerk for accounts, authentication, and transactional account emails;
• Google when you choose Google sign-in;
• Cloudflare for hosting, network delivery, security, and operational logs;
• Railway and its infrastructure providers for report storage;
• PostHog for limited, pseudonymous product analytics that excludes submitted addresses, report text, feedback messages, and waitlist email addresses;
• Slack for a private operations channel containing the submitted property address or street; a concise description assembled from request fields (including user-entered council-search details); report status, workflow, an internal request identifier, duration, source count, provider-call count, token count, model, estimated cost, and daily aggregate usage totals—not generated report text, feedback messages, waitlist email addresses, or account identifiers;
• AI and research providers, including Anthropic and public-web search services, to process site questions and retrieve public-source material; and
• Government and open-data services that receive the property or map query needed to retrieve a public record.

Some providers may process information outside Canada. Their handling of information is governed by their contracts with us and the laws where they operate.

6. Retention

We keep account, report, waitlist, feedback, and usage information for as long as needed to provide and improve the Service and for legitimate security, backup, dispute-resolution, and legal purposes. You can delete individual reports in the Service. You may also request deletion of your account, waitlist entry, and associated personal information, subject to information we must retain by law or for legitimate security and recordkeeping needs.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete personal information, withdraw consent, or complain to a privacy regulator. You may disconnect Google sign-in through your Google account, though you may need another sign-in method to keep using the Service.

Send a request to privacy@zoneagents.ca. We may need to verify your identity before completing it.

8. Security

We use administrative, technical, and organizational safeguards appropriate to the Service, including managed authentication, encrypted network connections, access controls, and per-user report separation. No online system can promise absolute security.

9. Changes to this policy

We may update this policy as the Service changes. We will post the revised version here and change the effective date. If a change materially affects how we use personal information, we will provide additional notice where required.